Re: Port 17300 probes?

From: MARLON BORBA (MBORBA@trf3.gov.br)
Date: 04/14/03

  • Next message: vex86@rogers.com: "Re: New trojan? Old trojan with new characteristics? Anyone seenthis?"
    Date: Mon, 14 Apr 2003 13:38:56 -0300
    From: "MARLON BORBA" <MBORBA@trf3.gov.br>
    To: <incidents@mwwm.net>, <incidents@securityfocus.com>
    
    

    It could be someone are trying to find a Kuang2 trojan into your network:

    http://www.glocksoft.com/trojan_list/Kuang2_the_virus.htm

    http://www.iss.net/security_center/static/4074.php

    Regards,

    Marlon.

    >>> <incidents@mwwm.net> 14/04/03 03:50 >>>
    Since January I have logged the following probes of port 17300; is
    this a known?

    -------GMT----
    Jan 4 11:16:20 212.143.36.64:1530 -> 17300
    Jan 4 12:13:05 212.143.36.64:1744 -> 17300
    Jan 21 23:37:58 24.95.177.30:4979 -> 17300
    Jan 26 05:49:46 216.40.195.83:17300 -> 17300
    Jan 29 16:39:20 12.212.35.44:4861 -> 17300
    Feb 15 23:02:22 220.88.89.170:3252 -> 17300
    Feb 15 23:09:08 217.210.222.213:1347 -> 17300
    Feb 15 23:16:16 211.194.95.150:1062 -> 17300
    Feb 21 00:29:12 61.77.241.204:4997 -> 17300
    Feb 21 01:17:22 220.77.194.249:3226 -> 17300
    Feb 21 09:50:25 61.248.164.86:4385 -> 17300
    Feb 27 11:03:55 24.77.128.66:1461 -> 17300
    Mar 1 09:34:03 131.128.137.177:3003 -> 17300
    Mar 26 13:10:26 209.40.101.170:17300 -> 17300
    Apr 10 18:23:42 217.121.239.168:4299 -> 17300
    Apr 13 18:10:14 212.118.6.209:3507 -> 17300
    Apr 13 20:38:01 209.40.97.21:17300 -> 17300
    Apr 14 05:19:10 61.238.101.155:2507 -> 17300
    Apr 14 06:17:51 218.252.139.30:2254 -> 17300

    ----------------------------------------------------------------------------
    Is SPAM over-loading your e-mail server, disk space or bandwidth?
    SurfControl E-Mail Filter is flexible, intelligent and policy-driven
    protection.
    http://www.securityfocus.com/SurfControl-incidents2
    Download your free fully functional
    trial, complete with 30-days of free technical support.
    Stop SPAM before it stops you.
    ----------------------------------------------------------------------------

    ----------------------------------------------------------------------------
    Is SPAM over-loading your e-mail server, disk space or bandwidth?
    SurfControl E-Mail Filter is flexible, intelligent and policy-driven
    protection.
    http://www.securityfocus.com/SurfControl-incidents2
    Download your free fully functional
    trial, complete with 30-days of free technical support.
    Stop SPAM before it stops you.
    ----------------------------------------------------------------------------


  • Next message: vex86@rogers.com: "Re: New trojan? Old trojan with new characteristics? Anyone seenthis?"

    Relevant Pages

    • RE: web monitoring tool
      ... I would tend to agree with>the proponents for a separate dial-up or broadband Internet connection and>a separate PC/laptop to totally isolate this "executive surfing" from your>enterprise network. ... >Is SPAM over-loading your e-mail server, ... >Download your free fully functional trial, complete with 30-days of free technical support. ... SurfControl E-Mail Filter is flexible, ...
      (Security-Basics)
    • RE: Virus problem: Hezhi
      ... Is SPAM over-loading your e-mail server, ... SurfControl E-Mail Filter is flexible, ... protection. ... Download your free fully functional trial, complete with 30-days of free technical support. ...
      (Security-Basics)
    • Re: web monitoring tool
      ... Is SPAM over-loading your e-mail server, ... SurfControl E-Mail Filter is flexible, ... protection. ... Download your free fully functional trial, ...
      (Security-Basics)
    • RE: RE : pb with P2P...
      ... Is SPAM over-loading your e-mail server, ... SurfControl E-Mail Filter is flexible, ... protection. ... Download your free fully functional trial, complete with 30-days of free technical support. ...
      (Security-Basics)
    • RE: Spy Software & Internet/Email Monitoring
      ... Spy Software & Internet/Email Monitoring ... I didn't note who sent the original post on the spyware ... Is SPAM over-loading your e-mail server, ... SurfControl E-Mail Filter is flexible, ...
      (Security-Basics)