incidents 2001/07
By Author

Starting: Sun Jul 01 2001 - 06:01:22 PDT
Ending: Tue Jul 31 2001 - 21:05:32 PDT

• Aaron Silver
  • Re: Security Event / Customer Reporting (Sat Jul 14 2001 - 06:58:52 PDT)
  • Re: Abuse Complaint/Postmaster issue (Fri Jul 06 2001 - 09:35:28 PDT)
  • Abuse Complaint/Postmaster issue (Fri Jul 06 2001 - 06:35:20 PDT)
• acz [iSecureLabs]
  • Re: SIRCAM WORM? (Tue Jul 24 2001 - 08:04:14 PDT)
• adam
  • Re: Recent IRC attacks (Thu Jul 12 2001 - 13:26:23 PDT)
• Aj Effin Reznor
  • Re: Code Red and ISS Internet Scanner (Tue Jul 31 2001 - 09:34:26 PDT)
• Akatosh
  • Re: Interesting group of scans (Tue Jul 03 2001 - 13:22:42 PDT)
• aleph1@securityfocus.com
  • Full analysis of the .ida "Code Red" worm. (Wed Jul 18 2001 - 23:17:51 PDT)
  • Initial analysis of the .ida "Code Red" Worm (Tue Jul 17 2001 - 11:43:12 PDT)
• Alfred Huger
  • Code Red (Tue Jul 31 2001 - 21:02:49 PDT)
  • Code Red, anyone? (Tue Jul 31 2001 - 18:31:01 PDT)
  • The sky is falling, or so I am told. (Mon Jul 30 2001 - 15:50:20 PDT)
  • Sec33.com etc. Bad moderation (Sun Jul 29 2001 - 09:48:26 PDT)
  • Subject: New Policy for the Incidents mailing list (Thu Jul 26 2001 - 09:06:00 PDT)
  • New Snort Signatures/ TESO Telnetd Overflow (Tue Jul 24 2001 - 21:30:00 PDT)
  • Beta Testers Needed (Tue Jul 24 2001 - 12:42:13 PDT)
  • Code Red Worm, closing notes (Sun Jul 22 2001 - 18:35:22 PDT)
  • Code Red Worm, closing notes (Sun Jul 22 2001 - 18:35:22 PDT)
  • Code Red Worm, New information (Fri Jul 20 2001 - 12:34:52 PDT)
  • Code Red Worm, New information (Fri Jul 20 2001 - 12:34:52 PDT)
• Alin Bontas
  • telnetd bug (Tue Jul 24 2001 - 11:37:46 PDT)
• Alvin Oga
  • Re: Guess this is a hack attemp (Sun Jul 22 2001 - 17:39:46 PDT)
• Andreas Hasenack
  • Re: Port 119 Scans (Sun Jul 29 2001 - 11:18:52 PDT)
• Antonio Stano
  • Code Red (Thu Jul 19 2001 - 08:14:21 PDT)
• Arthur Donkers
  • Anyone interested in full tcpdump trace of a Code Red breakin ? (Thu Jul 19 2001 - 12:21:31 PDT)
• Bell, James (AZ76)
  • RE: Packets destined for ports 6970 and 6972 (Wed Jul 18 2001 - 13:14:09 PDT)
• bhc2@cornell.edu
  • Re: 27015 probe increase?? (Wed Jul 11 2001 - 14:09:17 PDT)
• Bill Burge
  • Re: .baa0xdd1r?? (Mon Jul 30 2001 - 14:08:48 PDT)
• Bill Robbins
  • cisco local director DOS. (Tue Jul 24 2001 - 08:12:57 PDT)
• Bjorn Djupvik
  • Re: Traffic from microsoft.com ? (Sun Jul 01 2001 - 13:47:12 PDT)
• Blake Frantz
  • Re: Large ISP response to Code Red? (Tue Jul 31 2001 - 08:10:35 PDT)
  • Re: Is this a traceroute? (Thu Jul 26 2001 - 09:31:12 PDT)
  • Re: Unicode Logs with Ping Activity (Tue Jul 10 2001 - 10:39:20 PDT)
• bludclot@hushmail.com
  • Re: Weird UDP trafic (Wed Jul 11 2001 - 15:01:52 PDT)
• Bojan Zdravkovic
  • Re: Jetdirect card Attack??? (Thu Jul 19 2001 - 17:00:42 PDT)
• Bojan Zdrnja
  • RE: strange qmail actions (Fri Jul 13 2001 - 01:46:42 PDT)
• borakovej
  • SIRCAM WORM? (Mon Jul 23 2001 - 13:29:27 PDT)
• Brendan Murphy
  • Re: Jetdirect card Attack??? (Thu Jul 19 2001 - 16:42:29 PDT)
• Brian Eckman
  • Re: JetDirect Card Attack (Mon Jul 23 2001 - 09:52:06 PDT)
• Brian McWilliams
  • Re: "Code Red" worm questions (Wed Jul 18 2001 - 11:54:14 PDT)
• Bronek Kozicki
  • Re: code red - some questions (Mon Jul 23 2001 - 08:44:42 PDT)
• Bryan Allerdice
  • RE: IIS Directory traversal vulnerability (Wed Jul 25 2001 - 13:19:28 PDT)
  • RE: Packets destined for ports 6970 and 6972 (Wed Jul 18 2001 - 16:07:59 PDT)
• Bryan Andersen
  • Re: possible frontpage exploit? (Mon Jul 16 2001 - 15:59:22 PDT)
• bugtraq
  • Re: .ida Intrusion Attempt (Thu Jul 19 2001 - 08:37:55 PDT)
• Burak DAYIOGLU
  • Re: streams of fragments... (Wed Jul 18 2001 - 05:20:46 PDT)
• Captain James T Kirk
  • Re: Weird UDP trafic (Wed Jul 11 2001 - 14:15:44 PDT)
• cg
  • 27015 probe increase?? (Tue Jul 10 2001 - 12:10:38 PDT)
• Charles_Ebinger@Lenox.com
  • Re: Mail Issue (Mon Jul 30 2001 - 11:44:50 PDT)
• Chip McClure
  • RE: Guess this is a hack attemp (Sun Jul 22 2001 - 14:09:26 PDT)
  • Re: Http scanning for cgi based mail-relays. (Wed Jul 18 2001 - 14:02:21 PDT)
• Chris Freeze
  • Re: HTTP connections (Thu Jul 19 2001 - 16:38:23 PDT)
• Chris Hobbs
  • Re: MISC Large ICMP Packet (Thu Jul 26 2001 - 09:52:10 PDT)
  • MISC Large ICMP Packet (Thu Jul 26 2001 - 07:12:46 PDT)
• Chris Keladis
  • Re: "Code Red" worm questions (Wed Jul 18 2001 - 10:37:04 PDT)
• Christian Kuhtz
  • Re: Large ISP response to Code Red? (Mon Jul 30 2001 - 17:45:50 PDT)
• Cisco Systems Product Security Incident Response Team
  • UPDATED: Cisco Security Advisory: "Code Red" Worm - Customer Impact (Tue Jul 31 2001 - 13:00:00 PDT)
• Colby Rice
  • 'Code Red' list. (Fri Jul 20 2001 - 07:54:17 PDT)
  • RE: 'Code Red' list. (Fri Jul 20 2001 - 09:26:04 PDT)
  • RE: .ida Intrusion Attempt (Thu Jul 19 2001 - 10:29:25 PDT)
  • The Code Red list GROWS! (Thu Jul 19 2001 - 13:37:18 PDT)
• corecode
  • Re: Full analysis of the .ida "Code Red" worm. (Thu Jul 19 2001 - 11:09:07 PDT)
• Crist Clark
  • IPP (631/tcp) Scans (Mon Jul 23 2001 - 17:25:58 PDT)
  • Re: Deny IP spoof from 255.255.255.255 (Fri Jul 06 2001 - 13:49:06 PDT)
  • Re: Deny IP spoof from 255.255.255.255 (Fri Jul 06 2001 - 10:50:40 PDT)
• Curt Purdy
  • RE: TCP Src 5635: what is it? (Tue Jul 10 2001 - 10:02:24 PDT)
• Curt Wilson
  • Deny IP spoof from 255.255.255.255 (Thu Jul 05 2001 - 14:58:24 PDT)
• Daniel Martin
  • Re: "datapool is a DoS attacks kit" message (Sun Jul 22 2001 - 18:22:11 PDT)
• dave.goldsmith@intelsat.com
  • Possible CodeRed Connection Attempts (Fri Jul 20 2001 - 05:42:13 PDT)
• David Bernick
  • ANOTHER possible Windows problem? (Fri Jul 20 2001 - 13:15:21 PDT)
• David E. Weekly
  • Other China Hack Attempts Concurrent With Code Red (Thu Jul 19 2001 - 21:03:06 PDT)
• David Hickman
  • Re: Large ISP response to Code Red? (Tue Jul 31 2001 - 08:49:13 PDT)
• David Kennedy CISSP
  • Re: Vulernability in /cgi-bin/shopper.exe? (Fri Jul 27 2001 - 00:30:56 PDT)
• David Luyer
  • Re: Http scanning for cgi based mail-relays. (Wed Jul 18 2001 - 22:09:09 PDT)
• Dean Cunningham
  • TCP port 6346 (Mon Jul 30 2001 - 22:44:04 PDT)
  • New version of Code Red? (Tue Jul 24 2001 - 15:02:25 PDT)
  • RE: Jetdirect card Attack???--Followup (Thu Jul 19 2001 - 17:59:29 PDT)
  • RE: HTTP connections (Thu Jul 19 2001 - 18:15:37 PDT)
  • RE: SMTP server (How can I find out the real source of an attack) (Thu Jul 12 2001 - 18:28:12 PDT)
• denis
  • Re: Port 119 Scans (Tue Jul 31 2001 - 10:16:41 PDT)
• Denis Normand
  • sadmind/IIS side effects (Mon Jul 02 2001 - 08:36:07 PDT)
• Desmond Irvine
  • Incident Response (Tue Jul 31 2001 - 08:06:32 PDT)
• Dino
  • ACB8DE69.ipt.aol.com scans (Sat Jul 28 2001 - 05:48:51 PDT)
• Dirk Brockhausen
  • slice3 question (Thu Jul 19 2001 - 16:02:39 PDT)
• Don Hammond
  • Re: Tracking SirCam (Wed Jul 25 2001 - 12:11:39 PDT)
• Doug Nelson
  • Re: Attempted WEB-IIS printer attempt Buffer Overflow (Tue Jul 17 2001 - 08:15:05 PDT)
• dr john halewood
  • Re: GET x HTTP/1.0 (Tue Jul 24 2001 - 08:22:34 PDT)
• Dr SuSE
  • Re: .ida Intrusion Attempt (Thu Jul 19 2001 - 10:24:36 PDT)
• Dug Song
  • Re: streams of fragments... (Wed Jul 18 2001 - 11:51:52 PDT)
• E. Larry Lidz
  • Re: .ida Intrusion Attempt (Fri Jul 20 2001 - 06:53:36 PDT)
• Elliott Perrin
  • Packets destined for ports 6970 and 6972 (Wed Jul 18 2001 - 08:19:38 PDT)
• Eric Chien
  • RE: "Code Red" worm questions (Thu Jul 19 2001 - 04:13:46 PDT)
• ethan preston
  • Re: Security Event / Customer Reporting (Fri Jul 13 2001 - 21:15:26 PDT)
  • Re: Security Event / Customer Reporting (Fri Jul 13 2001 - 21:15:26 PDT)
• Ford Prefect
  • Is this a traceroute? (Wed Jul 25 2001 - 20:31:23 PDT)
• FSS
  • DNS Poisoning? (Wed Jul 25 2001 - 20:56:29 PDT)
• Fulton L. Preston Jr.
  • RE: CodeRed (Thu Jul 19 2001 - 20:25:22 PDT)
• fuzzz
  • RE: Jetdirect card Attack??? (Thu Jul 19 2001 - 20:27:43 PDT)
• fyom
  • Re: RED-CODE WORM PATCH possibly not working ???? (Fri Jul 20 2001 - 15:17:44 PDT)
• gabriel rosenkoetter
  • Re: Why would someone DoS a free-lance writer? (Thu Jul 05 2001 - 22:40:54 PDT)
  • Re: Why would someone DoS a free-lance writer? (Mon Jul 02 2001 - 21:25:55 PDT)
  • Re: Why would someone DoS a free-lance writer? (Sun Jul 01 2001 - 11:08:11 PDT)
• Gamble
  • Re: streams of fragments... (Wed Jul 18 2001 - 08:23:36 PDT)
• Gareth Hastings
  • Guess this is a hack attemp (Sun Jul 22 2001 - 00:46:01 PDT)
• Gary Flynn
  • Re: Tracking SirCam (Wed Jul 25 2001 - 13:31:25 PDT)
  • Re: Jetdirect card Attack???-Final from original poster (Fri Jul 20 2001 - 13:32:09 PDT)
  • Re: Jetdirect card Attack??? (Thu Jul 19 2001 - 17:27:50 PDT)
• Gary Maltzen
  • Re: Mail Issue (Tue Jul 31 2001 - 05:28:33 PDT)
  • Re: Port 119 Scans (Tue Jul 31 2001 - 05:43:28 PDT)
• gattaca@hushmail.com
  • Re: Subject: Unicode Logs with Ping Activity (Tue Jul 10 2001 - 11:56:05 PDT)
• George Bakos
  • (Fwd) RE: logs (Thu Jul 26 2001 - 08:34:15 PDT)
  • Re: weird sequence in packet filter log (Wed Jul 25 2001 - 05:15:20 PDT)
  • Re: Weird UDP trafic (Thu Jul 12 2001 - 17:07:58 PDT)
• Gillard, Paul
  • HTTP connections (Thu Jul 19 2001 - 10:22:36 PDT)
• Glenn Forbes Fleming Larratt
  • Re: Code Red, anyone? (Tue Jul 31 2001 - 19:31:37 PDT)
• Gossi The Dog
  • Advanced IIS unicode scanning? (Fri Jul 06 2001 - 19:22:37 PDT)
• Greg A. Woods
  • Re: Tracking SirCam (Wed Jul 25 2001 - 12:28:11 PDT)
• Greg Owen
  • GET x HTTP/1.0 (Mon Jul 23 2001 - 18:19:53 PDT)
• Gregory_DeGennaro@csaa.com
  • RE: Possible CodeRed Connection Attempts (Fri Jul 20 2001 - 07:55:49 PDT)
• H C
  • Re: Network attack from S1 Corporation (Thu Jul 26 2001 - 13:38:28 PDT)
• h8macs@yahoo.com
  • RE: Increase in Sub7 scans (Mon Jul 30 2001 - 10:55:44 PDT)
• Harri Nyman
  • Re: TCP port 6346 (Tue Jul 31 2001 - 10:29:24 PDT)
  • Re: Mail Issue (Mon Jul 30 2001 - 11:51:26 PDT)
• Ian Jones
  • Re: Host Unreachable Scan (Thu Jul 19 2001 - 20:25:13 PDT)
• Ilya Zherebetskiy
  • Re: "Code Red" worm - there MUST be at least two versions. (Mon Jul 23 2001 - 16:30:32 PDT)
• Ivan
  • RE: CodeRed (Thu Jul 19 2001 - 20:30:08 PDT)
• Jacques Exelrud
  • Weird UDP trafic (Tue Jul 10 2001 - 11:00:57 PDT)
• James Edwards
  • Jetdirect card Attack???-Final from original poster (Fri Jul 20 2001 - 10:45:54 PDT)
  • Re: Jetdirect card Attack???--Followup (Thu Jul 19 2001 - 11:09:35 PDT)
  • Jetdirect card Attack??? (Thu Jul 19 2001 - 10:07:09 PDT)
  • SANS Org Website (Fri Jul 13 2001 - 11:16:53 PDT)
• James Pruitt
  • Re: Why would someone DoS a free-lance writer? (Sun Jul 01 2001 - 17:16:32 PDT)
• James T Kirk
  • Re: CodeRed (Fri Jul 20 2001 - 10:18:25 PDT)
• Jason Robertson
  • Unusual IIS decode requests (Sun Jul 29 2001 - 13:59:14 PDT)
  • Attempted WEB-IIS printer attempt Buffer Overflow (Mon Jul 16 2001 - 18:49:51 PDT)
• Jeffery L. Stutzman
  • THE HONEYNET PROJECT: July Scan of the Month (Mon Jul 02 2001 - 10:37:51 PDT)
  • THE HONEYNET PROJECT: July's Scan of the Month (Mon Jul 02 2001 - 06:03:18 PDT)
• Jens Hektor
  • Re: Deny IP spoof from 255.255.255.255 (Fri Jul 06 2001 - 13:26:04 PDT)
  • Re: solaris hack info required (Sun Jul 01 2001 - 23:01:23 PDT)
• jer@privacy.nu
  • Re: Denial of service attack on port 6667 (Thu Jul 12 2001 - 21:15:51 PDT)
• Jeroen Wesbeek
  • RE: Cobalt Scan (Fri Jul 27 2001 - 00:55:46 PDT)
• Jim Forster
  • Re: CRv3? Or some other ida type (Tue Jul 31 2001 - 16:04:32 PDT)
  • Re: New version of Code Red? (Tue Jul 24 2001 - 15:24:53 PDT)
• Jim Zajkowski
  • Re: Possible trojaned wlogon.exe? (Tue Jul 31 2001 - 17:21:30 PDT)
• jlewis@lewis.org
  • Re: GET x HTTP/1.0 (Mon Jul 23 2001 - 21:40:04 PDT)
• Joe Smith
  • Re: IIS Directory traversal vulnerability (Wed Jul 25 2001 - 10:12:01 PDT)
  • .ida Intrusion Attempt (Thu Jul 19 2001 - 09:18:20 PDT)
  • Re: .ida Intrusion Attempt (Thu Jul 19 2001 - 10:55:10 PDT)
• Johannes B. Ullrich
  • RE: "Code Red" worm questions (Wed Jul 18 2001 - 12:10:48 PDT)
• John
  • Re: *BSD Telnetd (Thu Jul 26 2001 - 16:02:03 PDT)
  • *BSD Telnetd (Wed Jul 25 2001 - 16:21:57 PDT)
  • Re: GET x HTTP/1.0 (Tue Jul 24 2001 - 22:02:31 PDT)
• John Jetmore
  • Re: possible frontpage exploit? (Tue Jul 17 2001 - 07:37:01 PDT)
  • possible frontpage exploit? (Mon Jul 16 2001 - 14:23:24 PDT)
• John Marquart
  • Re: Denial of service attack on port 6667 (Thu Jul 12 2001 - 11:38:33 PDT)
• JohnNicholson@aol.com
  • Re: Security Event / Customer Reporting (Mon Jul 16 2001 - 10:51:56 PDT)
• Johnston, Jack
  • RE: Code Red and ISS Internet Scanner (Tue Jul 31 2001 - 11:49:32 PDT)
• Jon O .
  • Large ISP response to Code Red? (Mon Jul 30 2001 - 17:21:09 PDT)
  • Wide-scale Code Red Damage Assessment and Report (Sun Jul 22 2001 - 14:50:53 PDT)
  • Wide-scale Code Red Damage Assessment and Report (Sun Jul 22 2001 - 14:50:53 PDT)
• Jon Zobrist
  • Re: code red - c:\notworm (Thu Jul 26 2001 - 09:24:40 PDT)
  • Re: IIS Directory traversal vulnerability (Wed Jul 25 2001 - 14:21:28 PDT)
• Jonathan A. Zdziarski
  • RE: Large ISP response to Code Red? (Tue Jul 31 2001 - 11:57:18 PDT)
  • RE: Large ISP response to Code Red? (Tue Jul 31 2001 - 10:04:59 PDT)
  • Weird Web Requests (Mon Jul 23 2001 - 14:37:03 PDT)
• Jordan K Wiens
  • Re: IIS Directory traversal vulnerability (Wed Jul 25 2001 - 12:31:02 PDT)
  • Re: Unicode Logs with Ping Activity (Tue Jul 10 2001 - 10:05:45 PDT)
  • Re: iis scanning (Mon Jul 02 2001 - 12:24:15 PDT)
  • iis scanning (Mon Jul 02 2001 - 12:09:27 PDT)
• Jose Nazario
  • RE: CRv2 - Questions (Mon Jul 23 2001 - 12:31:49 PDT)
  • Re: streams of fragments... (Wed Jul 18 2001 - 10:10:14 PDT)
• kath
  • Re: Large ISP response to Code Red? (Mon Jul 30 2001 - 21:10:43 PDT)
  • Re: SMTP server (How can I find out the real source of an attack) (Thu Jul 12 2001 - 17:47:04 PDT)
• kawaii
  • Re: Jetdirect card Attack???--Followup (Fri Jul 20 2001 - 06:53:30 PDT)
• Keith.Morgan
  • Sneaky vuln-scanning, vulnerable list generation (Fri Jul 27 2001 - 10:08:34 PDT)
  • Telnet scans (Wed Jul 25 2001 - 07:06:45 PDT)
  • RE: .ida Intrusion Attempt (Thu Jul 19 2001 - 10:58:25 PDT)
• Kelvin
  • Re: Network attack from S1 Corporation (Thu Jul 26 2001 - 16:54:39 PDT)
  • Re: Network attack from S1 Corporation (Thu Jul 26 2001 - 12:20:09 PDT)
  • Network attack from S1 Corporation (Wed Jul 25 2001 - 11:35:23 PDT)
  • Proxy-Based .ida / .idq scanning tool available (Fri Jul 20 2001 - 11:18:31 PDT)
• Ken Eichman
  • Code Red worm address generator pattern (Fri Jul 20 2001 - 12:34:47 PDT)
  • Re: Possible CodeRed Connection Attempts (Fri Jul 20 2001 - 08:12:01 PDT)
  • Re: Possible CodeRed Connection Attempts (Fri Jul 20 2001 - 08:12:01 PDT)
  • Forwarded: Re: Possible CodeRed Connection Attempts (Fri Jul 20 2001 - 08:15:56 PDT)
  • Re(2): Strange web traffic (Tue Jul 17 2001 - 12:49:28 PDT)
• Kester, Kelly
  • RE: TCP probe on port 35540 from port 1 (Thu Jul 26 2001 - 09:52:45 PDT)
• Kheos ml
  • Re: .ida Intrusion Attempt (Thu Jul 19 2001 - 20:27:09 PDT)
• Kris Carlier
  • Re: Large ISP response to Code Red? (Tue Jul 31 2001 - 09:53:54 PDT)
  • Re: ANOTHER possible Windows problem? (Sun Jul 22 2001 - 04:40:47 PDT)
• Kyle R Maxwell
  • Re: .ida Intrusion Attempt (Fri Jul 20 2001 - 09:55:36 PDT)
• L. Christopher Paul
  • Re: Correction: Re: tcpdump traces of CodeRed (lab environment) (Fri Jul 27 2001 - 05:43:20 PDT)
  • Correction: Re: tcpdump traces of CodeRed (lab environment) (Thu Jul 26 2001 - 04:56:27 PDT)
  • Re: Code Red packet dumps. (Mon Jul 23 2001 - 11:03:38 PDT)
• Lance Spitzner
  • Re: .baa0xdd1r?? (Mon Jul 30 2001 - 13:08:17 PDT)
  • Honeynet Project -> Know Your Enemy: Statistics (Tue Jul 24 2001 - 18:57:16 PDT)
• lcp@bofh.sh
  • tcpdump traces of CodeRed (lab environment) (Wed Jul 25 2001 - 04:42:14 PDT)
• Lee Evans
  • Re: IIS Directory traversal vulnerability (Thu Jul 26 2001 - 01:25:27 PDT)
  • IIS Directory traversal vulnerability (Wed Jul 25 2001 - 02:34:33 PDT)
• Lindsay
  • RE: HTTP connections (Sun Jul 22 2001 - 14:26:26 PDT)
• Maher Odeh
  • RE: slice3 question (Sun Jul 22 2001 - 01:52:47 PDT)
• Marc Maiffret
  • RE: Full analysis of the .ida "Code Red" worm. (Thu Jul 19 2001 - 16:14:15 PDT)
  • RE: "Code Red" worm questions (Wed Jul 18 2001 - 13:30:41 PDT)
  • RE: "Code Red" worm questions (Wed Jul 18 2001 - 10:46:53 PDT)
• Markus Kern
  • Re: Why would someone DoS a free-lance writer? (Tue Jul 03 2001 - 12:17:19 PDT)
  • Re: Why would someone DoS a free-lance writer? (Mon Jul 02 2001 - 07:39:22 PDT)
• Martin Roesch
  • Re: .ida Intrusion Attempt (Thu Jul 19 2001 - 10:11:54 PDT)
• masterp@budlight.com
  • Network Attack on my Home PC. Is it related to Kelvin at SEC33, You be the the judge... (Sat Jul 28 2001 - 12:58:57 PDT)
• Matt Power
  • Re: Initial analysis of the .ida "Code Red" Worm (Wed Jul 18 2001 - 11:23:15 PDT)
• matt sommer
  • Re: telnetd bug (Tue Jul 24 2001 - 12:58:02 PDT)
• McCammon, Keith
  • IIS/FrontPage Script? (Wed Jul 18 2001 - 14:17:41 PDT)
• measl@mfn.org
  • Http scanning for cgi based mail-relays. (Wed Jul 18 2001 - 06:17:03 PDT)
• Michael DeSimone
  • Re: Weird Web Requests (Mon Jul 23 2001 - 21:59:56 PDT)
• Michael Katz
  • Vulernability in /cgi-bin/shopper.exe? (Thu Jul 26 2001 - 12:38:13 PDT)
• Mike Baptiste
  • CRv3? Or some other ida type (Tue Jul 31 2001 - 15:23:33 PDT)
• Mike Batchelor
  • DNS poisoning of naive caches, bigred.com search engine (Tue Jul 17 2001 - 17:52:44 PDT)
  • RE: SMTP server (How can I find out the real source of an attack) (Fri Jul 13 2001 - 10:45:44 PDT)
• Mike Johnson
  • Re: Large ISP response to Code Red? (Tue Jul 31 2001 - 05:39:02 PDT)
• Mike Lewinski
  • Re: Large ISP response to Code Red? (Mon Jul 30 2001 - 19:40:21 PDT)
  • Re: SMTP server (How can I find out the real source of an attack) (Fri Jul 13 2001 - 21:55:03 PDT)
• Mike Peterson
  • Code Red and ISS Internet Scanner (Mon Jul 30 2001 - 06:37:24 PDT)
• MrG
  • SMTP server (How can I find out the real source of an attack) (Thu Jul 12 2001 - 15:53:36 PDT)
• mstockda@dti.net
  • Re: 27015 probe increase?? (Wed Jul 11 2001 - 13:42:30 PDT)
• myrddin_e@hushmail.com
  • Re: Unicode Logs with Ping Activity (Tue Jul 10 2001 - 11:13:16 PDT)
  • Unicode Logs with Ping Activity (Tue Jul 10 2001 - 09:24:50 PDT)
• Nathan W. Labadie
  • Re: "Code Red" worm questions (Wed Jul 18 2001 - 10:13:57 PDT)
• Nick FitzGerald
  • Re: Tracking SirCam (Wed Jul 25 2001 - 15:58:42 PDT)
  • Re: Tracking SirCam (Wed Jul 25 2001 - 15:47:43 PDT)
  • Re: code red - some questions (Mon Jul 23 2001 - 07:16:14 PDT)
  • Re: CRv2 - Questions (Sat Jul 21 2001 - 16:42:58 PDT)
  • Re: SMTP server (How can I find out the real source of an attack (Mon Jul 16 2001 - 16:34:41 PDT)
  • Re: Security Event / Customer Reporting (Fri Jul 13 2001 - 15:44:34 PDT)
• Nick Lehman
  • RE: New version of Code Red? (Tue Jul 24 2001 - 19:43:08 PDT)
• Ofir Arkin
  • Xprobe 0.0.1p1 (Tue Jul 24 2001 - 13:05:05 PDT)
• Opus
  • Re: MISC Large ICMP Packet (Thu Jul 26 2001 - 09:43:34 PDT)
• Pat Moffitt
  • RE: Code Red Worm, New information (Fri Jul 20 2001 - 15:48:59 PDT)
• Patrick Oonk
  • Re: iis scanning (Tue Jul 03 2001 - 04:03:51 PDT)
• Patryk Chmielewski
  • Re: GET x HTTP/1.0 (Tue Jul 24 2001 - 08:08:15 PDT)
• Paul Dokas
  • Recent IRC attacks (Thu Jul 12 2001 - 09:06:55 PDT)
• Paul Gear
  • TCP probe on port 35540 from port 1 (Wed Jul 25 2001 - 14:22:50 PDT)
• Pavel Kankovsky
  • Re: SMTP server (How can I find out the real source of an attack) (Sun Jul 15 2001 - 02:42:00 PDT)
• Penn, Toby (IT.Ops Security Services)
  • Host Unreachable Scan (Thu Jul 19 2001 - 18:00:10 PDT)
• Peter Bates
  • Re: Traffic from microsoft.com ? (Sun Jul 01 2001 - 16:21:02 PDT)
  • Traffic from microsoft.com ? (Sun Jul 01 2001 - 06:01:22 PDT)
• Peter Krawczyk
  • Tracking SirCam (Wed Jul 25 2001 - 09:49:05 PDT)
• Phil Sorber
  • Re: GET x HTTP/1.0 (Mon Jul 23 2001 - 21:40:10 PDT)
• Pluto
  • Re: The sky is falling, or so I am told. (Tue Jul 31 2001 - 04:20:00 PDT)
• Portnoy, Gary
  • RE: GET x HTTP/1.0 (Tue Jul 24 2001 - 08:31:05 PDT)
  • RE: streams of fragments... (Wed Jul 18 2001 - 11:47:09 PDT)
• Powers, James L.
  • RE: ANOTHER possible Windows problem? (Sat Jul 21 2001 - 18:08:52 PDT)
• Rajeev Kumar
  • Re: Weird UDP trafic (Thu Jul 12 2001 - 08:38:57 PDT)
• Raul Dias
  • Re: possible frontpage exploit? (Mon Jul 16 2001 - 15:44:06 PDT)
• Reverend Lola
  • Re: IIS Directory traversal vulnerability (Wed Jul 25 2001 - 12:25:58 PDT)
• Rich Ostergard
  • RE: streams of fragments... (Wed Jul 18 2001 - 15:50:19 PDT)
• Richard Johnson
  • Re: Port 119 Scans (Sun Jul 29 2001 - 11:00:12 PDT)
• rlt
  • TCP Src 5635: what is it? (Tue Jul 10 2001 - 08:11:28 PDT)
• Rob McCauley
  • Re: Large ISP response to Code Red? (Tue Jul 31 2001 - 07:23:11 PDT)
• Ronald Tse
  • Re: CRv2 - Questions (Mon Jul 23 2001 - 21:31:06 PDT)
• Ross Oldbury
  • Re: GET x HTTP/1.0 (Tue Jul 24 2001 - 01:53:36 PDT)
• Royans Tharakan
  • RE: slice3 question (Thu Jul 19 2001 - 17:01:44 PDT)
• Russell Fulton
  • Re: .ida Intrusion Attempt (Thu Jul 19 2001 - 17:48:14 PDT)
  • Re: streams of fragments... (Wed Jul 18 2001 - 15:06:32 PDT)
  • streams of fragments... (Mon Jul 16 2001 - 21:56:50 PDT)
• Ryan McDonnell
  • RE: Weird Web Requests (Tue Jul 24 2001 - 00:43:38 PDT)
• Ryan Russell
  • Re: Peak Activity of Red Worm? (Mon Jul 23 2001 - 13:11:24 PDT)
  • Re: CodeRed (Thu Jul 19 2001 - 23:57:50 PDT)
  • Re: CodeRed (Thu Jul 19 2001 - 20:50:53 PDT)
  • RE: HTTP connections (Thu Jul 19 2001 - 20:17:32 PDT)
  • Re: CodeRed (Thu Jul 19 2001 - 18:08:44 PDT)
  • Re: HTTP connections (Thu Jul 19 2001 - 16:39:35 PDT)
  • Re: Jetdirect card Attack??? (Thu Jul 19 2001 - 17:30:30 PDT)
  • CodeRed (Thu Jul 19 2001 - 14:17:56 PDT)
  • Re: Strange web traffic (Tue Jul 17 2001 - 13:03:39 PDT)
• Ryan W. Maple
  • Cobalt Scan (Thu Jul 26 2001 - 10:04:00 PDT)
• S. Staniford
  • Re: Code Red, anyone? (Tue Jul 31 2001 - 20:06:22 PDT)
• Sander de Rijk
  • RE: ANOTHER possible Windows problem? (Sun Jul 22 2001 - 11:53:50 PDT)
• Sara Brigid Gaffney
  • Re: Why would someone DoS a free-lance writer? (Sun Jul 01 2001 - 15:21:39 PDT)
• sarnold@wirex.com
  • Re: Weird UDP trafic (Wed Jul 11 2001 - 13:44:53 PDT)
• Scott Nursten
  • [Fwd: Re: Strange web traffic] (Tue Jul 17 2001 - 11:46:22 PDT)
  • Strange web traffic (Tue Jul 17 2001 - 11:22:43 PDT)
  • Re: Strange web traffic (Tue Jul 17 2001 - 11:37:57 PDT)
  • Re: TCP Src 5635: what is it? (Thu Jul 12 2001 - 01:58:30 PDT)
• Sean Chittenden
  • BSDi telnetd exploitable... (Fri Jul 27 2001 - 14:34:14 PDT)
• Sean Kelly
  • My list of default.ida connection attempts (Sat Jul 21 2001 - 14:57:46 PDT)
• Sebastian Ip
  • Re: .ida Intrusion Attempt (Thu Jul 19 2001 - 16:34:02 PDT)
• SecLists
  • .baa0xdd1r?? (Mon Jul 30 2001 - 08:48:05 PDT)
• Seth Arnold
  • Re: Large ISP response to Code Red? (Tue Jul 31 2001 - 15:37:08 PDT)
  • Re: Large ISP response to Code Red? (Mon Jul 30 2001 - 17:54:43 PDT)
• Seth Milder
  • Re: GET x HTTP/1.0 (Tue Jul 24 2001 - 08:10:25 PDT)
• SirPsychoSexy
  • Worm or rootkit... (Wed Jul 11 2001 - 04:08:19 PDT)
• sleonard
  • Re: New version of Code Red? (Tue Jul 24 2001 - 22:47:35 PDT)
• Soeren Ziehe
  • Re: code red - c:\notworm (Sun Jul 29 2001 - 08:00:00 PDT)
  • code red - c:\notworm (Thu Jul 26 2001 - 09:38:00 PDT)
  • Re: code red - some questions (Tue Jul 24 2001 - 03:23:00 PDT)
  • code red - some questions (Mon Jul 23 2001 - 05:03:00 PDT)
• Steffen Dettmer
  • Re: CRv2 - Questions (Mon Jul 23 2001 - 02:39:47 PDT)
• Stephen Malenshek
  • Mail Issue (Sun Jul 29 2001 - 19:55:27 PDT)
• steve
  • "datapool is a DoS attacks kit" message (Sun Jul 22 2001 - 14:11:41 PDT)
• Stuart Staniford
  • Re: tcpdump traces of CodeRed (lab environment) (Wed Jul 25 2001 - 10:28:43 PDT)
  • Re: CodeRed: the next generation (Fri Jul 20 2001 - 12:26:43 PDT)
  • Re: CodeRed: the next generation (Fri Jul 20 2001 - 12:26:43 PDT)
  • Re: Code-Red: An analytic model of its spread (Fri Jul 20 2001 - 10:48:30 PDT)
  • Code-Red: An analytic model of its spread (Fri Jul 20 2001 - 00:48:30 PDT)
  • Re: .ida Intrusion Attempt (Thu Jul 19 2001 - 20:48:04 PDT)
• Sven Carstens
  • RE: Cobalt Scan (Mon Jul 30 2001 - 02:55:52 PDT)
• terminator@hha.net
  • CodeRed (Fri Jul 20 2001 - 12:40:47 PDT)
• The Death
  • RE: CRv2 - Questions (Tue Jul 24 2001 - 14:07:24 PDT)
  • RE: CRv2 - Questions (Mon Jul 23 2001 - 08:01:35 PDT)
  • RE: CRv2 - Questions (Sat Jul 21 2001 - 18:38:23 PDT)
  • CRv2 - Questions (Fri Jul 20 2001 - 14:40:31 PDT)
• Thomas M. Ferris
  • Re: Unusual IIS decode requests (Sun Jul 29 2001 - 21:42:52 PDT)
• Thompson, John J
  • Possible trojaned wlogon.exe? (Tue Jul 31 2001 - 11:09:22 PDT)
• Tim Brown
  • Peak Activity of Red Worm? (Mon Jul 23 2001 - 11:19:30 PDT)
• Tim Winders
  • RE: .ida Intrusion Attempt (Thu Jul 19 2001 - 16:43:57 PDT)
• Tobias Diedrich
  • weird sequence in packet filter log (Wed Jul 25 2001 - 07:12:24 PDT)
• Tom Laermans
  • RE: Cobalt Scan (Mon Jul 30 2001 - 11:18:29 PDT)
  • Port 119 Scans (Fri Jul 27 2001 - 13:58:53 PDT)
• Tony Spurlin
  • RE: SIRCAM WORM? (Tue Jul 24 2001 - 08:03:27 PDT)
• Tulchinskiy, Sasha
  • GET /BIBA.IDA (Mon Jul 30 2001 - 09:49:54 PDT)
  • RE: CodeRed (Fri Jul 20 2001 - 06:45:24 PDT)
  • RE: .ida Intrusion Attempt (Thu Jul 19 2001 - 11:19:30 PDT)
• Tyrannis Von Nettesheim
  • Security Event / Customer Reporting (Fri Jul 13 2001 - 08:57:40 PDT)
• Ulrich Keil
  • RE: .ida Intrusion Attempt (Thu Jul 19 2001 - 16:34:03 PDT)
• Valdis.Kletnieks@vt.edu
  • Re: Large ISP response to Code Red? (Mon Jul 30 2001 - 19:36:15 PDT)
  • Re: MISC Large ICMP Packet (Thu Jul 26 2001 - 09:34:40 PDT)
  • Re: SMTP server (How can I find out the real source of an attack) (Thu Jul 12 2001 - 18:59:32 PDT)
• Vern Paxson
  • Re: My list of default.ida connection attempts (Sun Jul 22 2001 - 18:03:24 PDT)
  • Re: My list of default.ida connection attempts (Sun Jul 22 2001 - 13:20:31 PDT)
• Vitaly Osipov
  • Re: Unicode Logs with Ping Activity (Fri Jul 13 2001 - 02:39:28 PDT)
  • Re: Unicode Logs with Ping Activity (Wed Jul 11 2001 - 08:32:11 PDT)
  • Re: Deny IP spoof from 255.255.255.255 (Fri Jul 06 2001 - 08:32:34 PDT)
• vlima@csc.com
  • Denial of service attack on port 6667 (Thu Jul 12 2001 - 06:22:25 PDT)
• w1re p4ir
  • "Code Red" worm questions (Wed Jul 18 2001 - 08:43:59 PDT)
• Wayne Conrad
  • Re: The sky is falling, or so I am told. (Mon Jul 30 2001 - 17:44:51 PDT)
• Wichert Akkerman
  • Re: The sky is falling, or so I am told. (Mon Jul 30 2001 - 16:19:40 PDT)
• Yom, Francis
  • RE: .ida Intrusion Attempt (Thu Jul 19 2001 - 11:08:34 PDT)
• Yotam Rubin
  • Code Red packet dumps. (Mon Jul 23 2001 - 07:13:06 PDT)
• Yuri Demchenko
  • [Fwd: [iodef] IODEF BoF at FIRST13 materials and IODEF work update] (Fri Jul 06 2001 - 10:05:10 PDT)

Last message date: Tue Jul 31 2001 - 21:05:32 PDT
Archived on: Tue Jul 31 2001 - 21:05:33 PDT

This archive was generated by hypermail 2b30 : Tue Jul 31 2001 - 21:05:33 PDT