[nsp-sec] ACK 174 RE: 37K+ Host Grum Botnet

[Shelton, Steve]

ACK for 174.

Thanks!

Steve Shelton
Security Engineer
Cogent Communications

-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Stephen Gill
Sent: Thursday, September 24, 2009 2:36 PM
To: NSP-SEC List
Subject: [nsp-sec] 37K+ Host Grum Botnet

----------- nsp-security Confidential --------

Hi Team,

Please visit the following URL for infected Ips in your network seen
chatting up with this Grum spam botnet head end: 209.160.73.60:80

    <https://www.cymru.com/nsp-sec/Owned/grum/grum.txt>
    (*) Your regular nsp-sec u/p apply.

Timestamps in GMT, last seen times only, though there were several hits
per
IP in the short time we received the data for.

-- steve

-- 
Stephen Gill, Chief Scientist, Team Cymru
http://www.cymru.com | +1 630 230 5423 | gillsr at cymru.com




_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the
nsp-security
community. Confidentiality is essential for effective Internet security
counter-measures.
_______________________________________________