[Dshield] 4899

Ed Truitt ed.truitt at etee2k.net
Fri Apr 23 13:18:05 GMT 2004

Paul Marsh wrote:

> Anyone else seeing 4899? Not that I'm seeing a lot a few here and
>there, I've never seen them before.  The port looks to be a remote admin
Over the past 30 days, I have been hot on this port every day.  The top 
number of probes has been > 11,000, 28 of the other days have been 
between 1,000 and 10,000 probes.  Right now, it is number 7 on the "top 
trends" list (just above 3127 - MyDoom.)  The details can be seen at

Ed Truitt
PGP fingerprint:  5368 D25E 468C A250 9833  CCD6 DBAE 9C25 02F9 0AB9

"Note to spammers:  my 'delete' key is connected to YOUR ISP.
 Also, if you send me UCE, I reserve the right to post your spew
on my Web site, with the appropriate color commentary, so that
others may have a good laugh at your expense."

More information about the list mailing list