[nsp-sec] Backscatter from 204.188.227.106:6667

Tue Jun 26 22:17:38 EDT 2012

Hi,

We are seeing hundreds of systems getting hit by backscatter from 204.188.227.106:6667, which appears on the C&C list .. does anyone know about this and what 
is going on?  Is anyone else seeing this?

Thanks,
Joel

Joel Rosenblatt, Director, Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel
Public PGP key
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x90BD740BCC7326C3