full-disclosure - Anyone else exoeriencing blasts o' port 6129 TCP?

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

From: jeff-kell at utc.edu (Jeff Kell)
Subject: Anyone else exoeriencing blasts o' port 6129
 TCP?

Jim Race wrote:

> I noticed some action the previous 48 hours, and on checking logs this 
> morning it seems that port 6129 (DameWare Remote Admin) was the common 
> factor. ISC seems to have it on the top of their trends list:

Yes, 6129 and 17300.

Have also found live Nachi traffic (wasn't that thing supposed to expire 
at the end of 2003?)

Jeff