report botnet C&C?

William Pitcock nenolod at
Thu Feb 9 05:11:10 UTC 2012


On Feb 8, 2012, at 1:04 PM, Nicolai wrote:

> On Tue, Feb 07, 2012 at 10:20:07PM -0500, Ryan Rawdon wrote:
>> Assuming it is not a futile/wasted effort, where is the current best
>> place/resource to report an active botnet C&C to?
> I don't know if there's a single best option, but there are several good
> ones.  In addition to Cymru I'd mention, which runs several
> public botnet C&C trackers.

DroneBL does investigate and track C&Cs, or at least, did when I ran it.  I would assume that it still does, so you may wish to contact them.


More information about the NANOG mailing list