-
September 17th, 2007, 02:08 PM
#1
Instant messenger behavior
So, I'm looking at my Snort logs with a focus on looking for odd after-hours type of file-transfer nastiness, and I keep seeing Yahoo IM logons from the same box at random late-night hours during the night.
I don't *think* anyone's on the box at those hours... ;-)
If someone leaves the IM open, does it periodically re-logon (refresh?) itself? Is this typical behavior for IM, IRC, or any of those? (Yes, I'm aware the 'bot C&C over IRC stuff -- just not sure what's "normal").
Thanks in advance,
~m
Similar Threads
-
By el-half in forum Microsoft Security Discussions
Replies: 8
Last Post: December 10th, 2003, 10:14 PM
-
By Mykol in forum Microsoft Security Discussions
Replies: 3
Last Post: August 8th, 2003, 05:28 PM
-
By KOBBRAS in forum Miscellaneous Security Discussions
Replies: 4
Last Post: January 29th, 2003, 08:37 PM
-
By LoGiK in forum Newbie Security Questions
Replies: 4
Last Post: November 12th, 2002, 05:08 PM
-
By Sick Dwarf in forum AntiOnline's General Chit Chat
Replies: 6
Last Post: September 26th, 2002, 02:59 AM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|