[nsp-sec] 37K+ Host Grum Botnet

Jason Gardiner gardiner at direcpath.com
Thu Sep 24 18:45:09 EDT 2009


ACK for 31939

Stephen Gill wrote:
> ----------- nsp-security Confidential --------
> 
> Hi Team,
> 
> Please visit the following URL for infected Ips in your network seen
> chatting up with this Grum spam botnet head end: 209.160.73.60:80
> 
>     <https://www.cymru.com/nsp-sec/Owned/grum/grum.txt>
>     (*) Your regular nsp-sec u/p apply.
> 
> Timestamps in GMT, last seen times only, though there were several hits per
> IP in the short time we received the data for.
> 
> -- steve
> 


-- 
Jason Gardiner
Director Network Engineering
DirecPath, LLC

o. 404.961.7024
c. 404.557.4007



__________ Information from ESET NOD32 Antivirus, version of virus signature database 4455 (20090924) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com



More information about the nsp-security mailing list