[Eril-l] American Chemical Society blocked IPs

[Treskon, Matthew]

Bob,

At this time, I’m working with colleagues to identify settings that disable unauthorized access while ensuring that heavy, but valid, use is permitted. I’d be interested to hear if anybody else on this list has any suggestions or can point to a “best practices.”


Matthew


--------------------------------------------------
Matthew Treskon - Librarian
United States Department of Agriculture
National Agricultural Library
Digital Library Branch

10301 Baltimore Avenue, 115-A
Beltsville, MD 20705
301-504-5065
matthew.treskon at ars.usda.gov

--------------------------------------------------



From: Bob Pearson [mailto:b.pearson at auckland.ac.nz]
Sent: Wednesday, June 08, 2016 1:15 AM
To: Treskon, Matthew
Cc: eril-l at lists.eril-l.org
Subject: RE: [Eril-l] American Chemical Society blocked IPs

Hi Matthew

When using UsageLimit, what settings do you use for “MB” and “transfers” and do you have specific settings for ACS?

Bob Pearson
Digital Access Librarian
Digital Services
The University of Auckland Library
New Zealand

From: Eril-l [mailto:eril-l-bounces at lists.eril-l.org] On Behalf Of Treskon, Matthew
Sent: Wednesday, 8 June 2016 8:39 a.m.
To: Egan,Noelle <nme26 at drexel.edu<mailto:nme26 at drexel.edu>>
Cc: eril-l at lists.eril-l.org<mailto:eril-l at lists.eril-l.org>
Subject: [FORGED] Re: [Eril-l] American Chemical Society blocked IPs

Noelle,

If you haven’t already looked in to it, you may want to consider the UsageLimit option:
https://www.oclc.org/support/services/ezproxy/documentation/cfg/usagelimit.en.html

Matthew


From: Eril-l [mailto:eril-l-bounces at lists.eril-l.org] On Behalf Of Kathleen Folger
Sent: Tuesday, June 07, 2016 4:37 PM
To: Egan,Noelle
Cc: eril-l at lists.eril-l.org<mailto:eril-l at lists.eril-l.org>
Subject: Re: [Eril-l] American Chemical Society blocked IPs

Noelle,

Thanks so much for sharing this information. We got a report from ACS of a breach via our proxy server and investigated as we do normally. We identified a compromised user account and reported back to ACS but they have not been responding to our requests to have the block removed.  Now I know why.

-Kathleen

_________________________________________
Kathleen M. Folger, Electronic Resources Officer
University of Michigan Library
312 Hatcher North
Ann Arbor, MI 48109-1190
V:(734) 764-9375
F:(734) 764-0259
kfolger at umich.edu<mailto:kfolger at umich.edu>

On Tue, Jun 7, 2016 at 4:19 PM, Egan,Noelle <nme26 at drexel.edu<mailto:nme26 at drexel.edu>> wrote:
Hi All,

Here at Drexel we had a hack of 4 users account on Sunday, and the accounts were used to download massive numbers of articles from ACS.  ACS subsequently blocked our access through our EZProxy IP address.

I just got off the phone with Richard at ACS about this, who let me know that many universities had user accounts hacked in the same way, and this breach was affecting several other publishers as well.   I was surprised I hadn’t seen any traffic about the issue on this listserv – has anyone else been blocked by ACS or another publisher in the last few days for excessive downloading?

FYI – ACS says they are not unblocking any IP addresses until they have the issue resolved, at which time they’ll email all their affected customers about reinstated access.

Thanks, Noelle

-------------------------------------------------------------------
Noelle Egan
eResources & Acquisitions Librarian
Drexel University Libraries
Drexel University
3300 Market Street
W. W. Hagerty Library
Philadelphia, PA 19104
Tel: 215.895.2752<tel:215.895.2752>  |  Fax: 215.895.2070<tel:215.895.2070>
drexel.edu/library<http://www.library.drexel.edu/>


_______________________________________________
Eril-l mailing list
Eril-l at lists.eril-l.org<mailto:Eril-l at lists.eril-l.org>
http://lists.eril-l.org/listinfo.cgi/eril-l-eril-l.org





This electronic message contains information generated by the USDA solely for the intended recipients. Any unauthorized interception of this message or the use or disclosure of the information it contains may violate the law and subject the violator to civil or criminal penalties. If you believe you have received this message in error, please notify the sender and delete the email immediately.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eril-l.org/pipermail/eril-l-eril-l.org/attachments/20160608/a9fad7a6/attachment-0001.html>