Crippling a botnet? Опции

[davidcave]

I'm an aspiring network admin at a small ISP. We manage about 60 highrise buildings. Each building has anywhere from 1 to 60 24 port switches, or some DSLAMs, or some coax gateways, with p2p radios on the roof, with a main router at a central building.

I recently got an email from a guy working for SiteTruth that explains that there's phishing emails coming from a phony email address, but that the IP associated with the domain of the emails is one of ours. He goes on to say that a traceroute to the IP bounces around a bunch of our IPs before hitting the trace IP. I did the same traceroute and saw the same route he included in the email.

So the route hits on about 60 of our IPs before hitting the target IP. We use dhcp for clients on our entire network and none of these IPs in the trace are associated with our equipment as all our equipment have excluded static IPs, so they're all client machines.
Thanks !

I didn't find the right solution from the internet.

References:

http://www.networking-forum.com/viewtopic....=46&t=46499

Investment Management Video Examples