Hey, dunno if this is the right place to post this but maybe someone could help?
I help run a network and for the past 3-4 days have constantly been bot flooded by a botnet it would seem..
Normally we have been able to use our bopm bots to block and catch them but in this instance it seems near impossible and its rapidly filling up the autokill lists. The services are all offered for free so this is not something we would like to continue.
Used to be able to catch the bots by using the freelists that are most commonly banned and blocking the ports used but now the bots/hosts/ips used dont seem to exist and seem to mainly be *.wannado.fr and *.do hosts and a lot of *.ca thrown in also..
Anyone have any ideas of how to help catch the hosts or lookup the hosts so we can put a stop to this?
Thanks in advance for any help offered.
