Re: Reporting botnets

[Rick Wesson <wessorh () ar com>]

Er. Ummmm. We collect around 1M observations per day. not just botnets, 
but I need more botnets data.

Its the reporting thats a real bitch and I haven't quite got that part 
working (well) yet. I'm confidant that we will.

so, I'd love to know about more bad stuff out there. I can take just 
about any delimited, machine readable format you like and would be happy 
to talk off-line on how to get stuff in the system.

now, if i could just get the reporting done...


-rick

Mike Johnson wrote:
> So, as I was reporting an IRC server and a distribution server 
> (webserver hosting files for the bot) today I got to wondering if 
> there's some organization out there that collects statistics on these 
> and/or gets involved in handling of these reports.  So far, when I've 
> made the reports, the hosts involved are helpful in the resolution, but 
> I'm sure I'll run into a difficult one at some point (perhaps after I 
> start trying to report the ones in China).
>
> So, does such a beast exist?
>
> OBFunSec: Uh.  Hrm.  I got nothing.
>
> Thanks!
> Mike
> _______________________________________________
> Fun and Misc security discussion for OT posts.
> https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
> Note: funsec is a public and open mailing list.

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.