Re: Increased Kuang2 activity

From: Johannes Ullrich (jullrichat_private)
Date: Mon Feb 10 2003 - 08:55:45 PST

  • Next message: Eric Greenberg: "RE: Suspicious file on Desktop"

    We do see a sporadic increase in port 17300 traffic at dshield.org.
    see:
    http://isc.sans.org/port_details.html?port=17300
    
    if you have any full packets, please post ...
    
    
    On 09 Feb 2003 19:01:23 -0500
    Jason Dixon <jasondixonat_private> wrote:
    
    > I've noticed a large increase of activity to port 17300 hitting my
    > firewall over the last 3 days, from various sources.  Googling relates
    > this port to the kuang2 trojan.  Has anyone else seen this?  Anything
    > else this might be attributed to?
    > 
    > TIA,
    > J.
    > 
    > 
    > 
    > 
    > ----------------------------------------------------------------------------
    > This list is provided by the SecurityFocus ARIS analyzer service.
    > For more information on this free incident handling, management 
    > and tracking system please see: http://aris.securityfocus.com
    > 
    > 
    
    
    -- 
    --------------------------------------------------------------------
    jullrichat_private             Collaborative Intrusion Detection
                                             join http://www.dshield.org
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Mon Feb 10 2003 - 11:46:53 PST