[nsp-sec] [ACK 3701] 37K+ Host Grum Botnet

[Stephen Fromm]

On Thu, 2009-09-24 at 13:36 -0700, Stephen Gill wrote:
> ----------- nsp-security Confidential --------
> 
> Hi Team,
> 
> Please visit the following URL for infected Ips in your network seen
> chatting up with this Grum spam botnet head end: 209.160.73.60:80
> 
>     <https://www.cymru.com/nsp-sec/Owned/grum/grum.txt>
>     (*) Your regular nsp-sec u/p apply.
> 
> Timestamps in GMT, last seen times only, though there were several hits per
> IP in the short time we received the data for.

ACK AS3701.

Thanks,

-- 
Stephen Fromm
stephenf <at> nero net
Network for Education and Research in Oregon