Botnet hunting resources (was: Re: DOS in progress ?)

Luke S Crawford lsc at
Mon Aug 10 02:49:47 CDT 2009

goemon at writes:

> On Fri, 8 Aug 2009, Luke S Crawford wrote:
> > 1. are there people who apply pressure to ISPs to get them to shut down
> > botnets, like maps did for spam?
> sadly no.


Why do you think this might be?  Fear of (extralegal) retaliation by
botnet owners?  or fear of getting sued by listed network owners?   or is 
the idea (shunning packets from ISPs that host botnets)  fundamentally unsound?

If someone sufficiently trustworthy produced a BGP feed of networks that 
were unresponsive to abuse complaints, do you think other networks would use
it to block traffic?  I mean, ultimately I think that having several 
providers of such feeds with differing levels of aggression would be the best
case, but someone has got to go first.  

Luke S. Crawford         -   Hosting for the technically adept   -   We don't assume you are stupid.  

More information about the NANOG mailing list