[unisog] TCP port 9051?
paw at noh.ucsd.edu
Tue Jul 13 17:15:07 GMT 2004
I've had several machines misbehave this morning after
connections to them on tcp port 9051 (from a machine in Brazil,
if that helps). Does anyone know what might be running there?
I don't have access to the hosts themselves, so I can't just
Thanks for any help. After the 9051 connection, the victims
contact IRC servers, so this looks like some sort of botnet.
Network Security Manager
UCSD ACS/Network Operations
paw at ucsd.edu
6F3A AE75 F931 3A19 D207 19F3 DB9B 29DC 2C3F E015
More information about the unisog