Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: New Feature: Subnet Report - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
New Feature: Subnet Report

We do have a new way to search our data more efficiently by subnets. Right now, the data will cover recent reports to DShield and a few of external feeds that we include. You can access the new report here: https://isc.sans.edu/subnetquery.html

I am still monitoring the impact the queries have on our overall database performance. For now, you are limited to 3 queries per minute if you are not logged in. 

And as a reminder: The data is only as good as the data we receive. Please consider contributing your own data. See https://isc.sans.edu/howto.html for details. We do also access web server error logs (see: 404 project) and Kippo SSH honeypot logs.

In case of high database load, you will be redirected back tot he index page (index_cached.html), 

 

---
Johannes B. Ullrich, Ph.D.
STI|Twitter|LinkedIn

I will be teaching next: Intrusion Detection In-Depth - SANS London September 2019

Johannes

3609 Posts
ISC Handler
When I enter an IP I don't see any results. After clicking "Search" I'm returned to the same page with the IP address removed, but the /xx maintained. Is this the return to the index page during high traffic periods?
Anonymous

Sign Up for Free or Log In to start participating in the conversation!