If you want to have an impact on this problem, you'll have to grab your telephone and start contacting specific sites and the follow up with email. I know this is a lot of work because that's what we did with the netflow data we got from our smurf attack. It is pretty easy to get sites to fix this once you get their attention. Our success rate with a telephone was about 80 percent. You are in a real good position to get their attention when you can say 'Your site is attacking my network and it hurts.' 2.
Federal networks are the most trouble.
NASA is not very well organized. Ragging on this list is probably within its charter. That's not the problem. It is simply not going to be effective.