Well... sincerely not, I just get stuff done w/o docs. Step…

Well... sincerely not, I just get stuff done w/o docs.
Steps would include:
- setting up a chrooted non privileged ftp server with full debug logging to be the honeypot
- script to parse debug log and score the malicious IPs
- upon score, firewall rules