[149595] in North American Network Operators' Group
Re: report botnet C&C?
daemon@ATHENA.MIT.EDU (William Pitcock)
Thu Feb 9 00:12:10 2012
From: William Pitcock <nenolod@systeminplace.net>
In-Reply-To: <20120208190433.GA19246@vectra.student.iastate.edu>
Date: Wed, 8 Feb 2012 23:11:10 -0600
To: Nicolai <nicolai-nanog@chocolatine.org>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
hi,
On Feb 8, 2012, at 1:04 PM, Nicolai wrote:
> On Tue, Feb 07, 2012 at 10:20:07PM -0500, Ryan Rawdon wrote:
>> Assuming it is not a futile/wasted effort, where is the current best
>> place/resource to report an active botnet C&C to?
>=20
> I don't know if there's a single best option, but there are several =
good
> ones. In addition to Cymru I'd mention abuse.ch, which runs several
> public botnet C&C trackers.
DroneBL does investigate and track C&Cs, or at least, did when I ran it. =
I would assume that it still does, so you may wish to contact them.
William
