[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-Disclosure] Anyone else exoeriencing blasts o' port 6129 TCP?
- To: Jim Race <caferace@well.com>, full-disclosure@lists.netsys.com
- Subject: Re: [Full-Disclosure] Anyone else exoeriencing blasts o' port 6129 TCP?
- From: Jeff Kell <jeff-kell@utc.edu>
- Date: Sat, 03 Jan 2004 22:12:34 -0500
Jim Race wrote:
I noticed some action the previous 48 hours, and on checking logs this
morning it seems that port 6129 (DameWare Remote Admin) was the common
factor. ISC seems to have it on the top of their trends list:
Yes, 6129 and 17300.
Have also found live Nachi traffic (wasn't that thing supposed to expire
at the end of 2003?)
Jeff
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html