To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
----------
One good resource is the fine folks over at shadowserver.org:

 http://www.shadowserver.org/cc.php

- ferg




-- "Dave Ellingsberg" <[EMAIL PROTECTED]> wrote:
 
>You can know who your compromised users are by watching flows to C&C's.

 
>2. Blocking communication to C&C's. 
 
>Watch the flows, block the users from communicating out to them. Watch 
>these users and see where else they are communicating in comparison to 
>other users, en-masse. 
 
Where is there such a list of known C&C devices or DNS names?

bigfoot.


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/

_______________________________________________
To report a botnet PRIVATELY please email: [EMAIL PROTECTED]
All list and server information are public and available to law enforcement 
upon request.
http://www.whitestar.linuxbox.org/mailman/listinfo/botnets

Reply via email to