Snort mailing list archives
RE: I'm being attacked, now what?
From: Ryan Russell <ryan () securityfocus com>
Date: Mon, 18 Jun 2001 11:03:54 -0600 (MDT)
Not a script exactly, but the same idea embedded in a service. Check out aris.securityfocus.com . We give you a (free) way to manage incident reporting, including the drafting of the e-mail notes, automatic lookups of the providers, etc.. You can anonymize the victim (your) IP addresses as well. Ryan On Sat, 16 Jun 2001, Sheahan, Paul (PCLN-NW) wrote:
Thanks to all for their input on this. I have obtained some great information on this subject now! I have seen mention of a script several times now that allows us IDS guys to automatically lookup the email of the technical contact of an ISP when a large attack occurs and send out an automated email. Can anyone post an example of such a script? It would be nice to be able to automatically email info to an ISP when an attack/probe occurs on a large scale. It is very time consuming to send out manual emails to a dozen ISPs everyday!
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: http://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- I'm being attacked, now what? Sheahan, Paul (PCLN-NW) (Jun 15)
- Re: I'm being attacked, now what? Paulie (Jun 15)
- Re: I'm being attacked, now what? Bob Staaf (Jun 15)
- <Possible follow-ups>
- RE: I'm being attacked, now what? Sheahan, Paul (PCLN-NW) (Jun 15)
- Re: I'm being attacked, now what? Bob Staaf (Jun 15)
- Re: I'm being attacked, now what? Tremaine Lea (Jun 15)
- Re: I'm being attacked, now what? Bob Staaf (Jun 15)
- RE: I'm being attacked, now what? Sheahan, Paul (PCLN-NW) (Jun 15)
- RE: I'm being attacked, now what? Ryan Russell (Jun 18)