Botnet hunting resources (was: Re: DOS in progress ?)
Luke S Crawford
lsc at prgmr.com
Mon Aug 10 02:49:47 CDT 2009
goemon at anime.net writes:
> On Fri, 8 Aug 2009, Luke S Crawford wrote:
> > 1. are there people who apply pressure to ISPs to get them to shut down
> > botnets, like maps did for spam?
> sadly no.
Why do you think this might be? Fear of (extralegal) retaliation by
botnet owners? or fear of getting sued by listed network owners? or is
the idea (shunning packets from ISPs that host botnets) fundamentally unsound?
If someone sufficiently trustworthy produced a BGP feed of networks that
were unresponsive to abuse complaints, do you think other networks would use
it to block traffic? I mean, ultimately I think that having several
providers of such feeds with differing levels of aggression would be the best
case, but someone has got to go first.
Luke S. Crawford
http://prgmr.com/xen/ - Hosting for the technically adept
http://nostarch.com/xen.htm - We don't assume you are stupid.
More information about the NANOG