<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Courier New";
color:black;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Courier New";color:black">Hi Alice,
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Courier New";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Courier New";color:black">My first suggestion, if you haven’t done so, is to ask ACS for their log files for the incidents that caused the blocks. That will give you some idea what ACS is seeing
that is triggering the blocks. Then you can go back and cross-reference your EZproxy logs. What ACS is seeing may be legitimate user activity. Otherwise, I have seen this situation occur due to the browser plug-ins, the use of third-party citation software,
and actual fraudulent activity. <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Courier New";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Courier New";color:black">You may also want to look at some of your EZproxy settings. Checkout this material (https://www.oclc.org/content/community/en_us/ezproxy/events/ezp-forensics-roundtable.html)
that I helped create about EZproxy security. You maybe find you need to start lowering some thresholds.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Courier New";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Courier New";color:black">The EZproxy listserv is an active place and maybe prove useful for you (particularly the archives, since ACS and this issue has been a topic of conversation in the past).
<a href="http://www.oclc.org/support/services/ezproxy/documentation/list.en.html">
http://www.oclc.org/support/services/ezproxy/documentation/list.en.html</a> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Courier New";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Courier New";color:black">Cheers, Paul<o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black">-------------------------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black">Paul R Butler, mlis<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black">Library Technologies Support Analyst<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black">Library Information Technology Services (L.I.T.S)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black"><a href="bsu.edu">Ball State University</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black">Muncie, IN 47306<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black;background:white">P: 765.285.8032</span><span style="font-size:10.0pt;font-family:"Courier New";color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black">E:
<a href="mailto:prbutler@bsu.edu">prbutler@bsu.edu</a><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black">University Libraries<i>...a destination for research, learning, and friends<o:p></o:p></i></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:black">The University Libraries provide services that support student pursuits for academic success and faculty endeavors for knowledge creation and classroom instruction.
<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size:12.0pt;font-family:"Courier New";color:black"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Eril-l [mailto:eril-l-bounces@lists.eril-l.org]
<b>On Behalf Of </b>Alice Daugherty<br>
<b>Sent:</b> Friday, December 16, 2016 11:04 AM<br>
<b>To:</b> 'eril-l@lists.eril-l.org' <eril-l@lists.eril-l.org><br>
<b>Subject:</b> [Eril-l] APS IP Block solutions?<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hello all, <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">In the past we have had the occasional IP block from ACS with the IP unfortunately being our EZProxy IP. Lately, this has been a recurring issue, and not always the same user.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Recently, one person brought their computer to our IT people and no viruses were found. We were thinking that a keystroke virus might have been the culprit. Currently, a different user is causing our IP block and has caused the last 3
blocks.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This year, it seems that the excessive downloads block has occurred more frequently and with other vendors as well.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I wondered how other campuses are handing this issue? How many attempts at password changes do you provide users before you consider taking away their access? Do you ever consider restricting their access? Are there other technologies
that can be put in place to prevent these types of breaches?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thank you, <o:p></o:p></p>
<p class="MsoNormal">Alice<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;line-height:15.0pt"><a href="http://www.lsu.edu/"><b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#664499;text-decoration:none"><img border="0" width="54" height="17" id="Picture_x0020_1" src="cid:image001.png@01D25793.153C2D40" alt="LSU"></span></b></a><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;line-height:15.0pt"><b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333">Alice Daugherty</span></b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"><br>
Collection Assessment and Analysis Librarian<br>
LSU Libraries<br>
Louisiana State University <br>
30 Middleton, Baton Rouge, LA 70803 <br>
office 225-578-7652 <br>
<a href="mailto:adaugher@lsu.edu"><b><span style="color:#451D7C">adaugher@lsu.edu</span></b></a> | <a href="http://www.lsu.edu/"><b><span style="color:#451D7C">lsu.edu</span></b></a> | <a href="http://lib.lsu.edu/"><b><span style="color:#451D7C">lib.lsu.edu</span></b></a><o:p></o:p></span></p>
<p class="MsoNormal" style="margin-bottom:7.5pt;line-height:15.0pt"><a href="http://www.facebook.com/LSULibraries"><b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#664499;text-decoration:none"><img border="0" width="17" height="17" id="Picture_x0020_2" src="cid:image002.png@01D25793.153C2D40" alt="Facebook"></span></b></a><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"> </span><a href="http://www.twitter.com/lsulibraries"><b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#664499;text-decoration:none"><img border="0" width="21" height="17" id="Picture_x0020_3" src="cid:image003.png@01D25793.153C2D40" alt="Twitter"></span></b></a><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"> </span><a href="http://www.instagram.com/lsulibraries"><b><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#664499;text-decoration:none"><img border="0" width="17" height="17" id="Picture_x0020_4" src="cid:image004.png@01D25793.153C2D40" alt="Instagram"></span></b></a><span style="font-size:10.5pt;font-family:"Helvetica",sans-serif;color:#333333"> <o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>