[nsp-sec] 37K+ Host Grum Botnet

Jonas Thambert jonas.thambert at sitic.se
Mon Sep 28 07:50:15 EDT 2009


ACK on swedish IPs/ASN.

//Jonas



Gabriel Iovino wrote:
> ----------- nsp-security Confidential --------
> 
> 
> 
> ------------------------------------------------------------------------
> 
> Stephen Gill wrote:
>> Please visit the following URL for infected Ips in your network seen
>> chatting up with this Grum spam botnet head end: 209.160.73.60:80
> 
> Sanitized notifications have been sent to the following <see attached>.
> 
> Thank you
> 
> Gabe
> 

------------------------------------------------------------------------



_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
community. Confidentiality is essential for effective Internet security counter-measures.
_______________________________________________


-- 
Jonas Thambert CISSP, CISA, CISM
Swedish IT Incident Centre, GovCERT-SE AS41884
National Post and Telecom Agency
P O Box 5398, SE-102 49 Stockholm, Sweden
Office address: Birger Jarlsgatan 16, Stockholm
Tel dir: +46 8 678 57 65 Mob: +46 706 25 57 65
Op: +46 8 678 55 00 Fax: +46 8 678 55 05
SITIC: +46 8 678 5799
Mailto: jonas.thambert at sitic.se
http://www.sitic.se http://www.pts.se
--
Get my PGP-Key at: http://www.sitic.se/jonas.thambert_at_sitic.se.asc



More information about the nsp-security mailing list