nanog mailing list archives
Re: Botnet hunting resources (was: Re: DOS in progress ?)
From: goemon () anime net
Date: Sat, 8 Aug 2009 21:39:02 -0700 (PDT)
On Fri, 8 Aug 2009, Luke S Crawford wrote:
1. are there people who apply pressure to ISPs to get them to shut down botnets, like maps did for spam?
sadly no.
I've got 50 gigs of packet captures, and have been going through with perl to detect IPs who send me lots of tcp packets with 0 payloads, then manually sending abuse reports. Half the abuse reports bounce, and the other half are ignored. (most of the hosts in question are in china.)
it's a big problem, especially with rogue networks like france and china.there is currently zero incentive for anyone clean up, as there are no consequences for not doing so.
this will not change until there are real consequences for operating IP cesspools.
-Dan
Current thread:
- Re: DOS in progress ?, (continued)
- Re: DOS in progress ? Christoph Blecker (Aug 06)
- Re: DOS in progress ? Marshall Eubanks (Aug 06)
- Re: DOS in progress ? Bill Woodcock (Aug 06)
- Re: DOS in progress ? Marshall Eubanks (Aug 06)
- Re: DOS in progress ? Bill Woodcock (Aug 06)
- Re: Botnet hunting resources (was: Re: DOS in progress ?) Roland Dobbins (Aug 07)
- Re: Botnet hunting resources (was: Re: DOS in progress ?) Luke S Crawford (Aug 08)
- RE: Botnet hunting resources (was: Re: DOS in progress ?) Frank Bulk (Aug 08)
- Re: Botnet hunting resources Joel Jaeggli (Aug 08)
- Re: Botnet hunting resources (was: Re: DOS in progress ?) Luke S Crawford (Aug 10)
- Re: Botnet hunting resources (was: Re: DOS in progress ?) goemon (Aug 10)
- Re: Botnet hunting resources (was: Re: DOS in progress ?) Nathan Ward (Aug 10)
- Re: Botnet hunting resources (was: Re: DOS in progress ?) Jared Mauch (Aug 10)
- Re: Botnet hunting resources Jack Bates (Aug 11)
- RE: Botnet hunting resources Bradley Freeman (Aug 11)
- RE: Botnet hunting resources Tomas L. Byrnes (Aug 11)