Educause Security Discussion mailing list archives
FYI: IM worm
From: "Cam Beasley, ISO" <cam () AUSTIN UTEXAS EDU>
Date: Sun, 1 May 2005 23:31:09 -0500
you may have noticed an up tick in IM worm infections this weekend (Kelvir varietals). you might check your netflow logs for hosts connecting to the following IRC controllers (some have been killed): 64.62.167.108:1345 70.84.19.20:5190 72.20.25.153:44444 130.79.188.9:8080 220.85.13.91:4367 hope this information is helpful. ~cam. Cam Beasley, CISSP CIFI Manager, InfoSec Operations Information Security Office University of Texas at Austin cam () austin utexas edu ------------------------------- Abuse/Misuse: abuse () utexas edu ********** Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at http://www.educause.edu/groups/.
Current thread:
- FYI: IM worm Cam Beasley, ISO (May 01)