Increase in TCP 6129 (Dameware) scans?

[Kevin Patz <jambo_cat () yahoo com>]

Lately I've been seeing a dramatic increase in scans
on TCP port 6129, which belongs to the Dameware Mini
Remote Control. From 1/17 on I've seen from 17 to 50
attempts per day, steadily increasing.

Looking on incidents.org, there are some comments that
seem to indicate that there could be a trojan that
installs Dameware and allows hackers to gain control
of such infected PCs. Either that or there is a
vulnerability in Dameware or a lot of improperly
secured installations of it.

Any comments?  This seems to be the #1 "trojan" port
scan lately, surpassing SubSeven and Kuang2.


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!
http://webhosting.yahoo.com/ps/sb/

---------------------------------------------------------------------------
----------------------------------------------------------------------------