logo

Spam botnets: The fall of Grum and the rise of Festi

ID: 7f1ac111-3461-5e61-8666-906e24703f4c

STIX ID: report--7f1ac111-3461-5e61-8666-906e24703f4c

Feed Name: The Spamhaus Project

Threat Score
70/100

Date Published: 2012-08-16

Date Updated: 2026-04-30

Author: The Spamhaus Team

...
...

Spamhaus and partners took down the Grum botnet in July 2012, effectively neutralizing it, while observing a rapid rise in Festi (Spamnost) activity that, at its peak, accounted for ~300,000 spamming IPs in a 24-hour period and competed with Cutwail as a top spam source; Spamhaus continues to monitor and mitigate these spam botnet threats using takedowns and BGP feed protections.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.