[nsp-sec] The Planet: irc.amiria.net known C&C?

Rob Thomas robt at cymru.com
Tue May 26 09:59:37 EDT 2009


Hi, Peter.

> The administrator can't find anything wrong on the system. But when it
> restarts it tries to resolve irc.amiria.net and make a connection on
> port 6667 (and others) on that system. I am asking the provider to make
> a dump of the traffic from and to the IRC server.

I'm not familiar with irc.amiria.net, though I do see IRC-like traffic
to it starting on 2009-04-13 23:59:47 UTC.

Thanks,
Rob.
-- 
Rob Thomas
Team Cymru
http://www.team-cymru.org/
cmn_err(CEO_PANIC, "Out of coffee!");





More information about the nsp-security mailing list