Security Incidents mailing list archives

Re: Increased traffic to tcp port 524

From: Andrew Frith <AndrewF () GATEWAY BM>
Date: Wed, 25 Oct 2000 17:10:27 -0300

Port 524 is registered as NCP.

It is used by Netware 5.x server & clients (anything else?).  These shouldn't be straying outside of the local networks 
though.

Now that I've looked we've had a couple of connections to 524 the past few days.  Nothing of note though (and no 
captures).

<Suzanne.Hernandez () GUNTER AF MIL> 10/24/00 04:28PM >>>

What's with the increased attempts on tcp port 524?

These are coming from networks all over the place....

Current thread:

Increased traffic to tcp port 524 Suzanne . Hernandez (Oct 26)
- <Possible follow-ups>
- FW: Increased traffic to tcp port 524 Suzanne . Hernandez (Oct 27)
- Re: Increased traffic to tcp port 524 Andrew Frith (Oct 27)
- Re: Increased traffic to tcp port 524 David Knapp (Oct 28)