mailing list archives
Re: report botnet C&C?
From: William Pitcock <nenolod () systeminplace net>
Date: Wed, 8 Feb 2012 23:11:10 -0600
On Feb 8, 2012, at 1:04 PM, Nicolai wrote:
On Tue, Feb 07, 2012 at 10:20:07PM -0500, Ryan Rawdon wrote:
Assuming it is not a futile/wasted effort, where is the current best
place/resource to report an active botnet C&C to?
I don't know if there's a single best option, but there are several good
ones. In addition to Cymru I'd mention abuse.ch, which runs several
public botnet C&C trackers.
DroneBL does investigate and track C&Cs, or at least, did when I ran it. I would assume that it still does, so you may
wish to contact them.