Scans for 524/TCP (Novell Core Protocol)?

Brian Reilly reillyb at
Wed Jul 23 12:10:37 GMT 2003

We've seen an increase in scans for 524/TCP (Novell Core Protocol, or ???)
over the past few weeks.  Are we alone here?  Anyone have thoughts on
what's up -- is there a new vulnerability or tool that's making the
rounds?  I've also found references to Fluxay/RemoteNC scanning for
524/TCP, but couldn't find any detailed information.



Brian Reilly, CISSP
University Network Security Officer
Georgetown University, UIS
<reillyb at>
+1 202.687.2775

More information about the unisog mailing list