DameWare Mini Remote Control's default port — famously scanned after its pre-auth overflows.
IANA leaves 6125-6129 unassigned; 6129 is claimed in practice by DameWare Mini Remote Control, a Windows remote-administration tool whose client service listens here by default. A pre-authentication buffer overflow made it a mass-scan target: CERT VU#909678, where a crafted packet mimicking a client compromises the server. Moving the service off the default port is common advice precisely because the number is so well known. A listener here means a managed Windows fleet, and a lot of internet background noise still probes it.
Do not expose
A remote-control agent with a history of pre-auth remote code execution has no business on a public IP; reach it over a VPN and keep the version current.
$ sudo lsof -nP -iTCP:6129 -sTCP:LISTENSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.