[nsp-sec] ACK: 37K+ Host Grum Botnet

Wim Biemolt Wim.Biemolt at surfnet.nl
Thu Sep 24 16:54:52 EDT 2009


Stephen Gill wrote:

> Please visit the following URL for infected Ips in your network seen
> chatting up with this Grum spam botnet head end: 209.160.73.60:80
> 
>     <https://www.cymru.com/nsp-sec/Owned/grum/grum.txt>
>     (*) Your regular nsp-sec u/p apply.
> 
> Timestamps in GMT, last seen times only, though there were several hits per
> IP in the short time we received the data for.

ACK for AS1103.

Cheers,

-Wim -/- SURFcert



More information about the nsp-security mailing list