Internet2 Network Security SIG

["Hunter, David B." <>]

All,

Just thought I’d pass this along in case you aren’t on the NANOG list and would find this interesting.  There has been a lengthy discussion related to “booters” which has been somewhat interesting.  Especially an initial post by someone who has done some research on the topic and amassed a database of booters for blocking.

You can read the archived messages here, the initial subject was "EVERYTHING about Booters (and CloudFlare) ".

http://mailman.nanog.org/pipermail/nanog/2016-July/thread.html

An early poster in the thread, Jair Santanna, provided some links to videos and a website that catalogs booters (http://booterblacklist.com/)

Message: 3

Date: Wed, 27 Jul 2016 15:49:50 +0200

From: Jair Santanna <>

To: 

Subject: EVERYTHING about Booters (and CloudFlare)

Message-ID: <>

Content-Type: text/plain; charset=utf-8; format=flowed

Hi folks,

A friend forward me your topic about Booters and CloudFlare. Then I 

decided to join the NANOG list. The *answer* for the first question 

about CloudFlare and Booters is at: 

https://www.youtube.com/watch?v=wW5vJyI_HcU (minute 45:55) given by the 

_CloudFlare CEO_ in the blackhat2013.

I investigate Booters since 2013 and I know many (if not all) the 

possible aspects about this DDoS-as-a-Service phenomenon. A summary of 

my entire research (or large part of that) can be watched at 

https://tnc16.geant.org/web/media/archive/3A (from minute 22:53). On top 

of that, I developed an algorithm to find Booters and publicly share 

such list (http://booterblacklist.com/). My main goal with this 

initiative is to convince people to blacklist and keep on track the 

users that access Booters (that potentially perform attacks)

If you have any question about any aspect of the entire phenomenon don't 

hesitate to contact me. By the way, I want to help deploy the booters 

blacklist worldwide and help prosecutors to shutdown this bastards. I 

have many evidences!

Cheers,

Jair Santana

jairsantanna.com

David B. Hunter
Network Design Engineer
University Information Technology Services

Indiana University
317-278-4873

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail