RE: I'm being attacked, now what?

[Ryan Russell <ryan () securityfocus com>]

Not a script exactly, but the same idea embedded in a service.  Check out
aris.securityfocus.com .  We give you a (free) way to manage incident
reporting, including the drafting of the e-mail notes, automatic lookups
of the providers, etc..  You can anonymize the victim (your) IP addresses
as well.

                                        Ryan

On Sat, 16 Jun 2001, Sheahan, Paul (PCLN-NW) wrote:

> Thanks to all for their input on this. I have obtained some great
> information on this subject now!
>
> I have seen mention of a script several times now that allows us IDS guys to
> automatically lookup the email of the technical contact of an ISP when a
> large attack occurs and send out an automated email. Can anyone post an
> example of such a script? It would be nice to be able to automatically email
> info to an ISP when an attack/probe occurs on a large scale. It is very time
> consuming to send out manual emails to a dozen ISPs everyday!


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
http://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users