I've always appreciated that .ca domains are private by default. Even without whois, you can dig the IP address and find out their ISP (sometimes). I've had so

I've always appreciated that .ca domains are private by default. Even without whois, you can dig the IP address and find out their ISP (sometimes). I've had some success getting compromised servers shut down by reporting them to the abuse email address in the dig record. If you email amazon with the details of malicious AWS instance, they will notify the customer and/or kill the instance pretty darn quickly. Does anyone know of an open source program that finds malicious IP's in apache / nginx logs and reports them automatically? I've been thinking of making this tool but it must exist already. In my head, I call it the internet hygiene project. It's a slow and very unsexy way of dealing with the botnet problem, but I think it could make a positive difference. Admittedly, it'll only catch the low hanging fruit, but there is so much of it, I think it is a good start. Apologies for going off-topic.