[nsp-sec] The Planet: irc.amiria.net known C&C?
Rob Thomas
robt at cymru.com
Tue May 26 09:59:37 EDT 2009
Hi, Peter.
> The administrator can't find anything wrong on the system. But when it
> restarts it tries to resolve irc.amiria.net and make a connection on
> port 6667 (and others) on that system. I am asking the provider to make
> a dump of the traffic from and to the IRC server.
I'm not familiar with irc.amiria.net, though I do see IRC-like traffic
to it starting on 2009-04-13 23:59:47 UTC.
Thanks,
Rob.
--
Rob Thomas
Team Cymru
http://www.team-cymru.org/
cmn_err(CEO_PANIC, "Out of coffee!");
More information about the nsp-security
mailing list