[Labs-l] Tools admins, please check, Fwd: [Fail2Ban] apache-bots: banned 208.80.153.167

[Jeremy Baron]

On Sep 7, 2013 10:01 AM, "Marc A. Pelletier" <marc at uberbox.org> wrote:
> On 09/07/2013 03:19 AM, Leslie Carr wrote:
> > Has someone in the tools project (tools project is the owner of .167)
> > been misbehaving?  Or is this a totally false alarm?
>
> I'm not seeing anything on that grid node that seems untowards, but one
> of the bots running there checks for dead external links on enwiki --
> I'm guessing it actually follows the links to check for a 200, so that
> might have been what happened.

where did the string "apache-bots" come from then? is that the name of a
user account that we were supposedly trying to brute force?

note this report doesn't even say what protocol was involved. (http? ssh?
rsh?) also, it says "1 attempt". so maybe was some sort of typo/honest
mistake.

-Jeremy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wikimedia.org/pipermail/labs-l/attachments/20130907/381a1ccb/attachment.html>