[154047] in North American Network Operators' Group
Re: Automatic attack alert to ISPs
daemon@ATHENA.MIT.EDU (Barry Greene)
Fri Jun 22 04:45:14 2012
In-Reply-To: <CA+rW-LCpFPbz9SJTROzDC8hgeEi4gmuzNn5hu_4Z+mYiOO8N9g@mail.gmail.com>
From: Barry Greene <bgreene@senki.org>
Date: Fri, 22 Jun 2012 16:44:00 +0800
To: Yang Xiang <xiangy08@csnet1.cs.tsinghua.edu.cn>
Cc: "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Shadowserver.org has a public benefit notification service.
Sent from my iPad
On Jun 22, 2012, at 2:46 PM, Yang Xiang <xiangy08@csnet1.cs.tsinghua.edu.cn>=
wrote:
> Argus can alert prefix hijacking, in realtime.
> http://tli.tl/argus
> Hope to be useful to you.
>=20
> BR.
>=20
> =E5=9C=A8 2012=E5=B9=B46=E6=9C=8822=E6=97=A5=E6=98=9F=E6=9C=9F=E4=BA=94=EF=
=BC=8CGanbold Tsagaankhuu =E5=86=99=E9=81=93=EF=BC=9A
>=20
>> Hi,
>>=20
>> Is there any well known free services or scripts that sends automatic
>> attack alerts based on some logs to corresponding ISPs (based on src
>> address)?
>> I have seen dshield.org and mynetwatchman, but I don't know yet how
>> good they are.
>> If somebody has recommendations in this regard please let me know.
>>=20
>> thanks in advance,
>>=20
>> Ganbold
>>=20
>>=20
>=20
> --=20
> _________________________________________
> Yang Xiang. Ph.D candidate. Tsinghua University
> Argus: argus.csnet1.cs.tsinghua.edu.cn