To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
On Thu, 19 Oct 2006, Dave wrote:
> What is the best approach to get a botnet shut down?
hostname(s) -> ip address(es)
addresses -> network owners via whois
addresses -> ASNs via various lookup tools
network operator emails from ASN and whois info
email explaining situation to operators:
- who you are
- what malware is using the botnet
- ip(s) and port(s) involved
- any proof you have: logs, traces, etc
- size estimates of the botnet
if it's involved in ongoing attacks you need to tell them.
this list can also help route the reports to the right people.
________
jose nazario, ph.d. [EMAIL PROTECTED]
http://monkey.org/~jose/ http://monkey.org/~jose/secnews.html
http://www.wormblog.com/
_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
