To report a botnet PRIVATELY please email: [EMAIL PROTECTED] ---------- Dave wrote: > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > ---------- > Hi Everyone, > > What is the best approach to get a botnet shut down? > > > Thanks in advance, > > Dave > _______________________________________________ > To report a botnet PRIVATELY please email: [EMAIL PROTECTED] > All list and server information are public and available to law enforcement > upon request. > http://www.whitestar.linuxbox.org/mailman/listinfo/botnets It depends.
For a truly malicious botnet the absolute best approach is to have law enforcement track the botmaster down and haul him in to court. This approach is often out of one's scope of influence. For an exploited server the best approach is to get in touch with the server's operators to have them look into the problem. For legitimate ircd this appproach is relatively easy and usually successful. A weaker alternative is to determine the proper abuse contact at the ISP hosting the botnet C&C then very politely asking them to investigate the botnet. This approach actually works. Expect questions from the ISP as they must consider their customer and business base. In any case, be certain to have information which can back up your claims. Expect to spend quite a lot of time for each report and do not overlook the need to build strong and positive relationships with the support community. You can also report the botnet privately to [EMAIL PROTECTED] and your report will reach people who do this sort of thing. Best Regards, Randy _______________________________________________ To report a botnet PRIVATELY please email: [EMAIL PROTECTED] All list and server information are public and available to law enforcement upon request. http://www.whitestar.linuxbox.org/mailman/listinfo/botnets
