[70467] in North American Network Operators' Group
Re: Antivirus firms discover Bots
daemon@ATHENA.MIT.EDU (Stephen J. Wilcox)
Sun May 16 11:41:19 2004
Date: Sun, 16 May 2004 16:38:50 +0100 (BST)
From: "Stephen J. Wilcox" <steve@telecomplete.co.uk>
To: Petri Helenius <pete@he.iki.fi>
Cc: Sean Donelan <sean@donelan.com>, <nanog@merit.edu>
In-Reply-To: <40A788F4.6060704@he.iki.fi>
Errors-To: owner-nanog-outgoing@merit.edu
On Sun, 16 May 2004, Petri Helenius wrote:
>
> Stephen J. Wilcox wrote:
>
> >Hmm, so if the AV discovers an active bot is it possible to take this a step
> >further and locate the C&C and forward that info to relevant network operators?
> >
> >
> >
> With some operators specializing hosting these, what good would that do
> until the "big guys" start cutting them off at their borders?
I mean fwd to some central location to be shared with various operators rather
than spamcop style org lookup ..
Steve
