Re: Botnet hunting resources (was: Re: DOS in progress ?)

[Luke S Crawford <lsc () prgmr com>]

goemon () anime net writes:

> On Fri, 8 Aug 2009, Luke S Crawford wrote:
> > 1. are there people who apply pressure to ISPs to get them to shut down
> > botnets, like maps did for spam?
>
> sadly no.

...

Why do you think this might be?  Fear of (extralegal) retaliation by
botnet owners?  or fear of getting sued by listed network owners?   or is 
the idea (shunning packets from ISPs that host botnets)  fundamentally unsound?

If someone sufficiently trustworthy produced a BGP feed of networks that 
were unresponsive to abuse complaints, do you think other networks would use
it to block traffic?  I mean, ultimately I think that having several 
providers of such feeds with differing levels of aggression would be the best
case, but someone has got to go first.  


-- 
Luke S. Crawford
http://prgmr.com/xen/         -   Hosting for the technically adept
http://nostarch.com/xen.htm   -   We don't assume you are stupid.