generally speaking, most people that run botnets are dumb kids (I know I was), so popping one of the boxes should both be fairly easy and point you at a c2 of some kind.

at which point you can report it to the host/attack it/whatever.