Botnet hunting resources
Tomas L. Byrnes
tomb at byrneit.net
Tue Aug 11 12:56:35 CDT 2009
>From: Bradley Freeman [mailto:bradley.freeman at csirt.ja.net]
>Sent: Tuesday, August 11, 2009 6:37 AM
>Subject: RE: Botnet hunting resources
>I surprised that nobody has mentioned the work of shadowserver.org,
>able to send reports of malware infections on your networks (see
>has proved to a brilliant tool in mitigating various forms of malware
>as Conficker with almost 0% false positives.
[TLB:] ThreatSTOP are a Shadowserver partner, and they, along with the
Cyber_TA project @ SRI, are the source of our botnet C&C block list.
More information about the NANOG