We now have agents connected to over 30 different ISPs from 7 countries, and 24 US states. Since we are now masking out the lower two bytes of all victim IP addresses, this has made it harder for people that receive escalations to determine the number of agents that reported a given attacker. To make this clear, I've added the AgentAlias name to the escalation e-mail. It actually only does it if the offset is negative. Select IPWatch from the Personal Functions menu.
All data is routed into an Incoming queue first.
I then would manually run a procedure to process it into the live database. Attack data is now uploaded in real-time using HTTP and Zone Alarm log format is supported. Requests other log file formats can be made here .