Page is a not externally linkable
vincevincevince - 8:29 am on May 6, 2008 (gmt 0)
Free hosting providers may find they have new customers who just have pages of IP addresses. P2P behaviour between infected bot machines could pass IP addresses. Back-end caching of infected machine IPs could allow pinging outward from a new control center to inform them of its existence. Forums and messageboards could suddenly have posts on them which reveal new command IP addresses. The list goes on, and on, and on. Oh, and by the way... if your business depends upon giving out these free dynamic DNS accounts... are you going to take measures to piss off someone with a huge botnet able to wipe you out so hard you won't know what's hit you?
Block these and another method will spring up. Real domains are virtually free compared to the profits of running a bot net and with so many compromised machines it would be easy to have someone kindly make the purchase for you.