nanog mailing list archives

Re: report botnet C&C?


From: William Pitcock <nenolod () systeminplace net>
Date: Wed, 8 Feb 2012 23:11:10 -0600

hi,

On Feb 8, 2012, at 1:04 PM, Nicolai wrote:

On Tue, Feb 07, 2012 at 10:20:07PM -0500, Ryan Rawdon wrote:
Assuming it is not a futile/wasted effort, where is the current best
place/resource to report an active botnet C&C to?

I don't know if there's a single best option, but there are several good
ones.  In addition to Cymru I'd mention abuse.ch, which runs several
public botnet C&C trackers.

DroneBL does investigate and track C&Cs, or at least, did when I ran it.  I would assume that it still does, so you may 
wish to contact them.

William



Current thread: