[nsp-sec] 37K+ Host Grum Botnet

Stephen Gill gillsr at cymru.com
Thu Sep 24 16:36:03 EDT 2009


Hi Team,

Please visit the following URL for infected Ips in your network seen
chatting up with this Grum spam botnet head end: 209.160.73.60:80

    <https://www.cymru.com/nsp-sec/Owned/grum/grum.txt>
    (*) Your regular nsp-sec u/p apply.

Timestamps in GMT, last seen times only, though there were several hits per
IP in the short time we received the data for.

-- steve

-- 
Stephen Gill, Chief Scientist, Team Cymru
http://www.cymru.com | +1 630 230 5423 | gillsr at cymru.com





More information about the nsp-security mailing list