Knocking it offline means it can't be part of the attackers botnet, so once it's a part of someone's botnet, they have a vested interest in keeping it online, strangely enough.

That's a different problem