Within the last 4 days i noticed an increasing activity on port 17300 reffered to the Kuang2 Trojan more info here and here
it first showed up in my honeypot logs (for those who don´t know what a honeypot is , go here
) long before my firewall logs showed similar activity. Actually this is considered an old Trojan ( see above links ) but somehow there still seem to be infected systems ( or again infected ones ) out there.

Yea , There is a IRC-Botnet which infects itself via kuang , the 17300 is either the master or default port.

Hmmm, have ya got any idea, further info where the hell this botnet is connected/located on? (irc-server? )

O hella no, Its like a SD-BOT , it can be any server,everyone can have it.

But with this BOT you need to enable certain aspects of the code to allow it to do such spreading, Sub7/Kuang/Kazza/NB

QUOTE

server : sex0r.ath.cx - irc.clan-game-talk.org channel : #sphere chankey : p1mp login : !auth ownij downld : !download exec : !execute unin. : !Dontuninstall

Its called spybot, guess people are still trying (kuang) lmao