Email address obfuscation in effect -- please
click here to turn it off.
[
Date Prev][
Date Next][
Thread Prev][
Thread Next][
Date Index][
Thread Index]
Mike Miller wrote:
> Look at these data for port 6129 attempts, extracted from iplog:
>
[snipped]
> Something new is out there and it is going nuts. Those connection
> attempts came from 454 different IP addresses. It started at about
> 9:00 pm last night, so I was getting 50 per hour at the end of Jan 8
> and about 35 per hour, on average, since then.
>
> Mike
Yeah, I've been experiencing the same things from all sorts of IPs.
They've been going on since Jan 3rd with our machines (but I suspect
even before that). What looks probable is this:
http://securityresponse.symantec.com/avcenter/venc/data/w32.mockbot.a.worm.html
or something else looking for DameWare.
Cheers,
Ognen
_______________________________________________
members mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/members
Home | FAQ | Server | Presentations | Mailing Lists/Archives | Member Tools | Links | Sponsors | Contact