Page 1 of 1

Increased port 17300 scans.

Posted: Fri Aug 22, 2003 10:32 am
by MegaVectra
Anyone else seeing this?

Image

Posted: Fri Aug 22, 2003 11:44 am
by donk
I've seen 12 attempts on that port in the last 24 hours .. from 4 different IP's .. haven't been watching so I'm not sure if that's normal for me or not..

It looks like a scan for the Kuang2 virus, which only infects WIN95/98. Back in April 2003 there was some discussion about attempts to install a trojan on machines infected with this virus (link)

Hope that helps ..

Posted: Fri Aug 22, 2003 4:41 pm
by FlyingPenguin
Looks like it really peaked big time around the 9th.

http://isc.sans.org/port_details.html?port=17300