Re: Anyone else exoeriencing blasts o' port 6129 TCP?

[Jeff Kell <jeff-kell () utc edu>]

Jim Race wrote:

> I noticed some action the previous 48 hours, and on checking logs this 
> morning it seems that port 6129 (DameWare Remote Admin) was the common 
> factor. ISC seems to have it on the top of their trends list:

Yes, 6129 and 17300.

Have also found live Nachi traffic (wasn't that thing supposed to expire 
at the end of 2003?)

Jeff

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html