What a Botnet Looks Like

Esther Schindler writes "CSO has an annotated, zoomable map of real botnet topologies showing the interconnections between the compromised computers and the command-and-control systems that direct them. The map is based on work by security researcher David Voreland; it has interactive controls so you can zoom in and explore botnets' inner workings. Hackers use botnets for spamming, DDoS attacks and identity theft. One recent example is the Storm botnet, which may have comprised 1 million or more zombie systems at its peak. As with any networking challenge, there are good (resilient) designs and some not-so-good ones. In some cases the topology may be indicative of a particular botnet's purpose, or of a herder on the run."

Re:Flash site, very funny.

[gnutoo]

It is true [slashdot.org].

Re:Thanks for posting...

[Anonymous Coward]

You don't want to use iptables for that kinda thing, you use ipset, arange all those IP addresses in a giant hash map and match against that :)