Lumen Technology’s Black Lotus Labs took the ngioweb botnet and NSOCKS proxy offline Tuesday.

The Shadowserver Foundation put the figure at around 87,000 for a vulnerability rated as critical and first discovered in February.