[nsp-sec] ACK - 37K+ Host Grum Botnet

Rodolfo Baader rbaader at arcert.gov.ar
Fri Sep 25 09:55:08 EDT 2009


Hi!

ACK for AR ASNs: 7303 10318 10481 10834 11315 11664 11815 15078 16814 17069
19037 20207 22080 22927 27691 27747 27813 27818 27833 27881 27953 27964

Notifications were sent to the abuse/noc departments.

R.

Stephen Gill wrote:
> ----------- nsp-security Confidential --------
> 
> Hi Team,
> 
> Please visit the following URL for infected Ips in your network seen
> chatting up with this Grum spam botnet head end: 209.160.73.60:80
> 
>     <https://www.cymru.com/nsp-sec/Owned/grum/grum.txt>
>     (*) Your regular nsp-sec u/p apply.
> 
> Timestamps in GMT, last seen times only, though there were several hits per
> IP in the short time we received the data for.
> 
> -- steve
> 



More information about the nsp-security mailing list