Threat Level: green Handler on Duty: Brad Duncan

SANS ISC InfoSec Handlers Diary Blog

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Possible NetDevil Scanning, RH Linux 7.1, 7.2, 7.3 and 8.0 End-of-Life

Published: 2004-01-14
Last Updated: 2004-01-15 00:22:25 UTC
by Tom Liston (Version: 1)
0 comment(s)
Possible NetDevil Scanning

The Internet Storm Center has noted a concurrent rise in scans for ports 901, 902, and 903. This is consistent with the default ports used by the NetDevil (Backdoor-RP) trojan for control, keylogging communication, and file transfer. If anyone monitors outbound traffic to these ports, please notify us:

More information on the NetDevil trojan can be found at:

Red Hat Linux 7.1, 7.2, 7.3 and 8.0 end-of-life

As per their support policy, RedHat Software has announced that RedHat Linux 7.1, 7.2, 7.3 and 8.0 have reached their errata maintenance end-of-life.

RedHat will no longer be producing security, bugfix, or enhancement updates for these products. Note also, that Red Hat Linux 9 reaches its end of life on April 30, 2004.

Those of you running these systems should consider migrating to newer versions.


Handler on Duty: Tom Liston -
0 comment(s)
Diary Archives