[nsp-sec] 8k compromised Ips

William Allen Simpson william.allen.simpson at gmail.com
Fri Jan 2 19:37:28 EST 2009


Stephen Gill wrote:
> Here's a list of 8K compromised Ips as seen via a WSNpoem dump logfile, dups
> not removed.
> 
Sanitized report sent to contacts at AS 12036, but I'll note that ASN Alert
reported (cbl) spam for the same dates, so they *should* already have
notified the customer.  Still, the customer wasn't very likely to be
around on Christmas day.  Very clever of the miscreants.... ;-)




More information about the nsp-security mailing list