valid_whois_result is called too many times (unnecessarily) Searching for MX appears to be called too many times, make it quieter traceroute for more info (Suggested by John McInnes Add timeouts to finger because it can take a long time If attacker responds to SMTP, send the complaint to root and postmaster of his local machine. Automatic processing of followups and attacks via .forward