Re: Increased Kuang2 activity

["Johannes Ullrich" <jullrich () euclidian com>]

We do see a sporadic increase in port 17300 traffic at dshield.org.
see:
http://isc.sans.org/port_details.html?port=17300

if you have any full packets, please post ...


On 09 Feb 2003 19:01:23 -0500
Jason Dixon <jasondixon () myrealbox com> wrote:

> I've noticed a large increase of activity to port 17300 hitting my
> firewall over the last 3 days, from various sources.  Googling relates
> this port to the kuang2 trojan.  Has anyone else seen this?  Anything
> else this might be attributed to?
>
> TIA,
> J.
>
>
>
>
> ----------------------------------------------------------------------------
> This list is provided by the SecurityFocus ARIS analyzer service.
> For more information on this free incident handling, management 
> and tracking system please see: http://aris.securityfocus.com


-- 
--------------------------------------------------------------------
jullrich () euclidian com             Collaborative Intrusion Detection
                                         join http://www.dshield.org

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com