Increased port 17300 scans.

MegaVectra · Post by **MegaVectra** » Fri Aug 22, 2003 10:32 am

Anyone else seeing this?

donk · Post by **donk** » Fri Aug 22, 2003 11:44 am

I've seen 12 attempts on that port in the last 24 hours .. from 4 different IP's .. haven't been watching so I'm not sure if that's normal for me or not..

It looks like a scan for the Kuang2 virus, which only infects WIN95/98. Back in April 2003 there was some discussion about attempts to install a trojan on machines infected with this virus (link)

Hope that helps ..

Post by **FlyingPenguin** » Fri Aug 22, 2003 4:41 pm

Looks like it really peaked big time around the 9th.

http://isc.sans.org/port_details.html?port=17300