[nsp-sec] 37K+ Host Grum Botnet - ACK 2856

[graeme.shinnie at bt.com]

 ACK 2856. Abuse team notified and infected users about to be made
aware. 

Regards
Graeme

-----Original Message-----
From: nsp-security-bounces at puck.nether.net
[mailto:nsp-security-bounces at puck.nether.net] On Behalf Of Stephen Gill
Sent: 24 September 2009 21:36
To: NSP-SEC List
Subject: [nsp-sec] 37K+ Host Grum Botnet

----------- nsp-security Confidential --------

Hi Team,

Please visit the following URL for infected Ips in your network seen
chatting up with this Grum spam botnet head end: 209.160.73.60:80

    <https://www.cymru.com/nsp-sec/Owned/grum/grum.txt>
    (*) Your regular nsp-sec u/p apply.

Timestamps in GMT, last seen times only, though there were several hits
per IP in the short time we received the data for.

-- steve

--
Stephen Gill, Chief Scientist, Team Cymru http://www.cymru.com | +1 630
230 5423 | gillsr at cymru.com




_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the
nsp-security
community. Confidentiality is essential for effective Internet security
counter-measures.
_______________________________________________