[unisog] TCP port 9051?

Pat Wilson paw at noh.ucsd.edu
Tue Jul 13 17:15:07 GMT 2004


I've had several machines misbehave this morning after
connections to them on tcp port 9051 (from a machine in Brazil,
if that helps).  Does anyone know what might be running there?
I don't have access to the hosts themselves, so I can't just
look...

Thanks for any help.  After the 9051 connection, the victims
contact IRC servers, so this looks like some sort of botnet.


Pat Wilson
Network Security Manager
UCSD ACS/Network Operations
paw at ucsd.edu
6F3A AE75 F931 3A19 D207 19F3 DB9B 29DC 2C3F E015




More information about the unisog mailing list