[anti-abuse-wg] Botnet detection in isp networks with c&c server blacklists

• Previous message (by thread): [anti-abuse-wg] Ecatel Network (Quasi Networks)

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Ehrlich, Kay Kay.Ehrlich at enviatel.de
Wed Jul 26 16:46:59 CEST 2017

Hello,

has anybody experience with botnet detection in isp networks? We want to use netflow data to handle this issue (no deep paket inspection).
Our idea is to match the netflow data with different command and control server blacklists.

Do anybody know where I can find up-to-date lists for free or service companies who offer such a blacklist service?

Thanks for your help.

Kind regards,
Kay Ehrlich
envia TEL GmbH - an isp in Central Germany
kay.ehrlich at enviatel.de



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ripe.net/ripe/mail/archives/anti-abuse-wg/attachments/20170726/a2245a27/attachment.html>

• Previous message (by thread): [anti-abuse-wg] Ecatel Network (Quasi Networks)

Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

[ anti-abuse-wg Archives ]