incidents 2002/01
By Date

Starting: Wed Jan 02 2002 - 01:25:48 PST
Ending: Fri Feb 01 2002 - 12:41:42 PST

• ARIS Users Please Read - Upgrade Required Alfred Huger (Wed Jan 02 2002 - 01:10:09 PST)
• Re: Microsoft's Early Xmas Present. Devdas Bhagat (Wed Jan 02 2002 - 07:16:53 PST)
• Re: Microsoft's Early Xmas Present. Steve Stearns (Wed Jan 02 2002 - 09:04:07 PST)
• Re: Microsoft's Early Xmas Present. David Kennedy CISSP (Wed Jan 02 2002 - 21:39:23 PST)
• RE: Microsoft's Early Xmas Present. Cloppert, Michael (Thu Jan 03 2002 - 05:56:31 PST)
• RE: Microsoft's Early Xmas Present. H C (Thu Jan 03 2002 - 08:59:03 PST)
• Re: Microsoft's Early Xmas Present. John Sage (Thu Jan 03 2002 - 09:01:14 PST)
• Re: Microsoft's Early Xmas Present. Ryan Russell (Thu Jan 03 2002 - 09:44:52 PST)
• Re: Microsoft's Early Xmas Present. Valdis.Kletnieksat_private (Thu Jan 03 2002 - 12:00:31 PST)
• RE: Microsoft's Early Xmas Present. H C (Thu Jan 03 2002 - 11:22:39 PST)
• RE: Microsoft's Early Xmas Present. Eric Jon Rostetter (Thu Jan 03 2002 - 11:04:54 PST)
• Re: Microsoft's Early Xmas Present. Brett Glass (Thu Jan 03 2002 - 11:10:23 PST)
• Dead Thread - Microsoft's Early Xmas Present. Jensenne Roculan (Thu Jan 03 2002 - 12:28:18 PST)
• Monkeybrains.net and badtrans compromise information Joe-Clifton (Fri Jan 04 2002 - 06:57:42 PST)
• RE: Monkeybrains.net and badtrans compromise information Ken Pfeil (Fri Jan 04 2002 - 09:12:52 PST)
• RE: Monkeybrains.net and badtrans compromise information Williams Jon (Fri Jan 04 2002 - 10:32:37 PST)
• RE: Monkeybrains.net and badtrans compromise information van Wyk, Ken (Fri Jan 04 2002 - 11:37:41 PST)
• RE: Monkeybrains.net and badtrans compromise information Ken Pfeil (Fri Jan 04 2002 - 12:49:45 PST)
• RE: Monkeybrains.net and badtrans compromise information Michael Graham (Fri Jan 04 2002 - 13:04:20 PST)
• RE: Monkeybrains.net and badtrans compromise information Slighter, Tim (Fri Jan 04 2002 - 13:29:19 PST)
• RE: Monkeybrains.net and badtrans compromise information Brian McWilliams (Fri Jan 04 2002 - 14:02:05 PST)
• RE: Monkeybrains.net and badtrans compromise information Nick FitzGerald (Fri Jan 04 2002 - 15:28:44 PST)
• Spoofed scans Richard Arends (Sun Jan 06 2002 - 03:41:11 PST)
• Re: Spoofed scans James (Sun Jan 06 2002 - 16:47:07 PST)
• RE: Spoofed scans Philip Wagenaar (Sun Jan 06 2002 - 17:04:57 PST)
• RE: Spoofed scans Bojan Zdrnja (Mon Jan 07 2002 - 05:06:23 PST)
• Re: Spoofed scans James (Sun Jan 06 2002 - 17:30:15 PST)
• Re: Spoofed scans Richard Arends (Mon Jan 07 2002 - 05:11:59 PST)
• Re: Spoofed scans Gideon Lenkey (Sun Jan 06 2002 - 17:57:49 PST)
• Re: Spoofed scans Crist J. Clark (Sun Jan 06 2002 - 22:22:34 PST)
• Strange connection attempts Andrea Efstathiou (Mon Jan 07 2002 - 08:48:41 PST)
• Re: Spoofed scans Will Aoki (Mon Jan 07 2002 - 11:04:00 PST)
• RE: Strange connection attempts Cloppert, Michael (Tue Jan 08 2002 - 05:35:48 PST)
• RE: Spoofed scans Paul M. Tiedemann (Mon Jan 07 2002 - 16:53:08 PST)
• Attacks against IIS servers using ServU FTP Torbjorn Wictorin (Tue Jan 08 2002 - 02:24:52 PST)
• port 20480 Calhoun, Heath (Tue Jan 08 2002 - 06:30:18 PST)
• Re: Spoofed scans Dave Ryan (Tue Jan 08 2002 - 08:08:30 PST)
• RE: Spoofed scans Gideon Lenkey (Tue Jan 08 2002 - 09:23:05 PST)
• unidentified DNS attack David Wilburn (Tue Jan 08 2002 - 13:08:02 PST)
• how often do 0-days REALLY happen? leon (Tue Jan 08 2002 - 15:53:51 PST)
• Re: how often do 0-days REALLY happen? Greg Francis (Tue Jan 08 2002 - 16:41:07 PST)
• Re: how often do 0-days REALLY happen? Ryan Russell (Tue Jan 08 2002 - 16:43:21 PST)
• Re: how often do 0-days REALLY happen? Michal Zalewski (Tue Jan 08 2002 - 17:13:08 PST)
• Attacking every host in the path? Mike Lewinski (Tue Jan 08 2002 - 18:45:02 PST)
• RE: how often do 0-days REALLY happen? leon (Tue Jan 08 2002 - 17:59:34 PST)
• Re: how often do 0-days REALLY happen? Gamble (Tue Jan 08 2002 - 19:51:58 PST)
• Re: Attacking every host in the path? Bugtraq Mailing Lists (Tue Jan 08 2002 - 22:01:41 PST)
• RE: how often do 0-days REALLY happen? Ofir Arkin (Tue Jan 08 2002 - 22:02:08 PST)
• Re: unidentified DNS attack quentynat_private (Wed Jan 09 2002 - 02:24:01 PST)
• Re: Attacks against IIS servers using ServU FTP Matt Scarborough (Wed Jan 09 2002 - 07:10:53 PST)
• Large ICMP Packets with strange payload Brennan Bakke (Wed Jan 09 2002 - 03:35:57 PST)
• RE: Spoofed scans Joshua Wright (Wed Jan 09 2002 - 04:52:15 PST)
• Re: how often do 0-days REALLY happen? Randy Taylor (Wed Jan 09 2002 - 09:56:39 PST)
• Machine compromised Jan van Rensburg (Wed Jan 09 2002 - 09:02:35 PST)
• Re: Large ICMP Packets with strange payload Eric Landuyt (Wed Jan 09 2002 - 09:21:04 PST)
• Name that Trojan Nutcase_69 (Wed Jan 09 2002 - 08:30:12 PST)
• Think I've got trouble Katherine Ogden (Wed Jan 09 2002 - 09:00:40 PST)
• RE: Spoofed scans Jose Nazario (Wed Jan 09 2002 - 08:58:38 PST)
• RE: Machine compromised dlaumannat_private (Wed Jan 09 2002 - 13:44:40 PST)
• Re: Attacking every host in the path? Gamble (Wed Jan 09 2002 - 10:20:13 PST)
• Re: Large ICMP Packets with strange payload Russell Fulton (Wed Jan 09 2002 - 14:04:02 PST)
• Re: Machine compromised Gamble (Wed Jan 09 2002 - 13:55:53 PST)
• Re: Think I've got trouble Hugo van der Kooij (Wed Jan 09 2002 - 14:17:19 PST)
• Re: Name that Trojan Hugo van der Kooij (Wed Jan 09 2002 - 14:14:16 PST)
• Re: Name that Trojan Blake Frantz (Wed Jan 09 2002 - 14:26:12 PST)
• RE: Think I've got trouble Andrew Blevins (Wed Jan 09 2002 - 13:48:23 PST)
• Re: Think I've got trouble Nexus (Wed Jan 09 2002 - 13:57:47 PST)
• Re: [Think I've got trouble] Greg Dotoli (Wed Jan 09 2002 - 13:56:22 PST)
• RE: Name that Trojan Kester, Kelly (Wed Jan 09 2002 - 13:53:42 PST)
• RE: Name that Trojan Michael Ward (Wed Jan 09 2002 - 14:21:26 PST)
• Re: Machine compromised Petrus Repo (Wed Jan 09 2002 - 14:55:29 PST)
• RE: Think I've got trouble Frank Knobbe (Wed Jan 09 2002 - 18:18:27 PST)
• Remote Shell Trojan b Qualys, Inc. (Wed Jan 09 2002 - 23:09:29 PST)
• new codered worm penetrates content-filtering Chris Russel (Thu Jan 10 2002 - 07:13:39 PST)
• Re: new codered worm penetrates content-filtering Ryan Russell (Thu Jan 10 2002 - 10:11:00 PST)
• RE: new codered worm penetrates content-filtering Shackleford, Dave (Thu Jan 10 2002 - 09:56:19 PST)
• Re: new codered worm penetrates content-filtering Chris Russel (Thu Jan 10 2002 - 10:18:36 PST)
• Re(2): new codered worm penetrates content-filtering Ken Eichman (Thu Jan 10 2002 - 11:10:58 PST)
• RE: new codered worm penetrates content-filtering Robert Gile @Agoura (Thu Jan 10 2002 - 11:06:18 PST)
• Re: Re(2): new codered worm penetrates content-filtering Ryan Russell (Thu Jan 10 2002 - 12:43:23 PST)
• Re: new codered worm penetrates content-filtering Ryan Russell (Thu Jan 10 2002 - 14:42:32 PST)
• Re: new codered worm penetrates content-filtering Michael H. Warfield (Thu Jan 10 2002 - 12:07:38 PST)
• Re: new codered worm penetrates content-filtering Nick FitzGerald (Thu Jan 10 2002 - 17:10:59 PST)
• Windows XP - Still has a Windows NT4 DoS hangover? Bob Fryer (Fri Jan 11 2002 - 01:46:31 PST)
• Re: new codered worm penetrates content-filtering Ryan Russell (Thu Jan 10 2002 - 16:19:28 PST)
• ld.so.preload Root Kit Gideon Lenkey (Thu Jan 10 2002 - 19:11:06 PST)
• Trying to identify UDP DOS/Flood tool Johan Augustsson (Fri Jan 11 2002 - 06:13:00 PST)
• New DNS connection with SYN ACK Jerry Perser (Fri Jan 11 2002 - 08:50:59 PST)
• Re: new codered worm penetrates content-filtering Ryan Russell (Fri Jan 11 2002 - 09:59:05 PST)
• Re: New DNS connection with SYN ACK Richard Arends (Fri Jan 11 2002 - 10:47:17 PST)
• Strange traffic... John Oliver (Fri Jan 11 2002 - 13:46:29 PST)
• Re: Strange traffic... Mark Tinberg (Fri Jan 11 2002 - 20:08:17 PST)
• nasty tripwire report Chester Jankowski (Sun Jan 13 2002 - 09:49:09 PST)
• Matt Wright FormMail Attacks Dmitri Smirnov (Sun Jan 13 2002 - 09:56:55 PST)
• RE: New DNS connection with SYN ACK Dan Hawrylkiw (Sun Jan 13 2002 - 10:56:55 PST)
• RE: New DNS connection with SYN ACK Cloppert, Michael (Mon Jan 14 2002 - 07:21:42 PST)
• Re: nasty tripwire report Gideon Lenkey (Mon Jan 14 2002 - 08:56:22 PST)
• Re: New DNS connection with SYN ACK Nick Drage (Mon Jan 14 2002 - 05:00:56 PST)
• RE: Matt Wright FormMail Attacks Turner, Keith (Mon Jan 14 2002 - 09:40:57 PST)
• Re: Matt Wright FormMail Attacks Mike Lewinski (Mon Jan 14 2002 - 09:30:32 PST)
• RE: New DNS connection with SYN ACK Keith T. Morgan (Mon Jan 14 2002 - 09:30:23 PST)
• RE: Matt Wright FormMail Attacks Christopher X. Candreva (Mon Jan 14 2002 - 10:20:07 PST)
• RE: New DNS connection with SYN ACK Jason Dixon (Mon Jan 14 2002 - 11:31:25 PST)
• Re: Matt Wright FormMail Attacks jlewisat_private (Mon Jan 14 2002 - 08:49:53 PST)
• RE: Matt Wright FormMail Attacks Pence, Derek A. (Mon Jan 14 2002 - 10:14:49 PST)
• Re: Matt Wright FormMail Attacks Jose Nazario (Mon Jan 14 2002 - 10:23:20 PST)
• RE: Matt Wright FormMail Attacks Jose Nazario (Mon Jan 14 2002 - 10:19:28 PST)
• Re: Matt Wright FormMail Attacks Brannon (Mon Jan 14 2002 - 12:35:45 PST)
• Re: New DNS connection with SYN ACK Patrick Benson (Mon Jan 14 2002 - 12:26:36 PST)
• Unusual DNS requests (not related to previous DNS thread) measlat_private (Mon Jan 14 2002 - 15:37:17 PST)
• Re: Matt Wright FormMail Attacks Michael Hottinger (Mon Jan 14 2002 - 23:04:47 PST)
• Re: New DNS connection with SYN ACK John Hall (Mon Jan 14 2002 - 18:02:58 PST)
• Re: nasty tripwire report Patrick (Tue Jan 15 2002 - 06:44:58 PST)
• Re: Machine compromised Jan van Rensburg (Tue Jan 15 2002 - 03:24:22 PST)
• Re: Unusual DNS requests (not related to previous DNS thread) Ryan Russell (Tue Jan 15 2002 - 10:14:36 PST)
• Re: Unusual DNS requests (not related to previous DNS thread) Greg A. Woods (Tue Jan 15 2002 - 08:57:24 PST)
• Re: Connection Attempts Andrew Simmons (Tue Jan 15 2002 - 09:56:32 PST)
• Re: Trojans that use LDAP Patrick Patterson (Tue Jan 15 2002 - 13:11:00 PST)
• Re: New DNS connection with SYN ACK RainbowHat (Tue Jan 15 2002 - 11:02:02 PST)
• Re: Matt Wright FormMail Attacks Markus Stumpf (Tue Jan 15 2002 - 15:06:24 PST)
• Trojans that use LDAP Gary Porter (Tue Jan 15 2002 - 06:57:56 PST)
• Re: Trojans that use LDAP Hugo van der Kooij (Tue Jan 15 2002 - 15:30:14 PST)
• Comcast.net abuse contact? rootat_private (Wed Jan 16 2002 - 06:20:08 PST)
• RE: Comcast.net abuse contact? Mike Healy (Wed Jan 16 2002 - 09:37:02 PST)
• RE: Comcast.net abuse contact? Misechok Mike J (Wed Jan 16 2002 - 10:04:03 PST)
• Re: Comcast.net abuse contact? Chris Wilkes (Wed Jan 16 2002 - 09:24:05 PST)
• Re: Comcast.net abuse contact? Tom Laermans (Wed Jan 16 2002 - 13:06:42 PST)
• Re: nasty tripwire report David Worth (Wed Jan 16 2002 - 13:22:45 PST)
• Re: Trojans that use LDAP GeekSpookyat_private (Wed Jan 16 2002 - 20:10:51 PST)
• FW: Hack - DNS cache poisoning resurfacing on MS DNS? Vidovic,Zvonimir,VEVEY,GL-IS/CIS (Thu Jan 17 2002 - 06:32:10 PST)
• Re: FW: Hack - DNS cache poisoning resurfacing on MS DNS? David Ulevitch (Thu Jan 17 2002 - 09:00:13 PST)
• RE: Comcast.net abuse contact? Mike Healy (Thu Jan 17 2002 - 11:53:01 PST)
• dtspcd probes toward Solaris machines Scott Fendley (Thu Jan 17 2002 - 15:48:21 PST)
• Re: Unusual DNS requests (not related to previous DNS thread) measlat_private (Thu Jan 17 2002 - 18:22:52 PST)
• Re: Unusual DNS requests (not related to previous DNS thread) Greg A. Woods (Thu Jan 17 2002 - 20:12:19 PST)
• RE: dtspcd probes toward Solaris machines James C. Slora Jr. (Fri Jan 18 2002 - 05:55:30 PST)
• Re: dtspcd probes toward Solaris machines Lance Spitzner (Fri Jan 18 2002 - 08:55:40 PST)
• Re: dtspcd probes toward Solaris machines Skip Carter (Fri Jan 18 2002 - 09:54:56 PST)
• Re: dtspcd probes toward Solaris machines Nathan W. Labadie (Fri Jan 18 2002 - 10:10:36 PST)
• Re: Trojans that use LDAP Kevin.Reardonat_private (Fri Jan 18 2002 - 11:23:27 PST)
• Re: Trojans that use LDAP Stephen (Fri Jan 18 2002 - 18:36:16 PST)
• Odd connection attempts from many addresses John Bland (Sat Jan 19 2002 - 10:37:51 PST)
• dtspcd compromises Russell Fulton (Sun Jan 20 2002 - 23:26:34 PST)
• Panz root kit quentynat_private (Mon Jan 21 2002 - 10:34:07 PST)
• xsf/xchk Vladimir Ivaschenko (Tue Jan 22 2002 - 08:20:19 PST)
• shaft client to handler? Kyle R Maxwell (Mon Jan 21 2002 - 15:15:56 PST)
• Re: shaft client to handler? Jose Nazario (Tue Jan 22 2002 - 10:48:12 PST)
• Re: shaft client to handler? Neil Dickey (Tue Jan 22 2002 - 11:25:10 PST)
• optic rootkit (was Re: xsf/xchk) Vladimir Ivaschenko (Tue Jan 22 2002 - 13:43:18 PST)
• RE: dtspcd compromises Russell Fulton (Mon Jan 21 2002 - 12:54:30 PST)
• RPC EXPLOIT statdx John Stauffacher (Tue Jan 22 2002 - 18:05:32 PST)
• Re: RPC EXPLOIT statdx Brian (Wed Jan 23 2002 - 09:40:21 PST)
• Re: Panz root kit Andrew Simmons (Wed Jan 23 2002 - 15:33:11 PST)
• Odd string in packet... Grimes, Shawn (NIA/IRP) (Fri Jan 25 2002 - 05:51:54 PST)
• Re: Odd string in packet... Frank de Lange (Fri Jan 25 2002 - 09:01:23 PST)
• Re: Odd connection attempts from many addresses James Hoagland (Fri Jan 25 2002 - 09:27:20 PST)
• Re: Odd connection attempts from many addresses John Bland (Fri Jan 25 2002 - 09:48:49 PST)
• DDoS attack. Daniel F. Chief Security Engineer - (Fri Jan 25 2002 - 10:23:26 PST)
• port 22224?? What the heck Gary Baribault (Fri Jan 25 2002 - 10:46:52 PST)
• Strings of 'EEEE' in pings... Peter Bates (Fri Jan 25 2002 - 11:05:58 PST)
• Re: DDoS attack. Glenn Forbes Fleming Larratt (Fri Jan 25 2002 - 11:04:49 PST)
• Re: DDoS attack. Neil Dickey (Fri Jan 25 2002 - 11:14:48 PST)
• Re: DDoS attack. Daniel F. Chief Security Engineer - (Fri Jan 25 2002 - 12:12:48 PST)
• Re: Strings of 'EEEE' in pings... Chris Keladis (Fri Jan 25 2002 - 13:01:16 PST)
• Re: port 22224?? What the heck John Campbell (Fri Jan 25 2002 - 13:03:46 PST)
• RE: DDoS attack. Boyan Krosnov (Fri Jan 25 2002 - 13:15:01 PST)
• RE: Strings of 'EEEE' in pings... dlaumannat_private (Fri Jan 25 2002 - 15:21:20 PST)
• Re: Odd string in packet... Nick FitzGerald (Fri Jan 25 2002 - 16:43:03 PST)
• DDoS help! Sebastian Ip (Sat Jan 26 2002 - 10:06:46 PST)
• Honeypot challenge you've probably already heard about Mark Symonds (Sat Jan 26 2002 - 17:43:59 PST)
• Re: port 22224?? What the heck Baribault, Gary (Sat Jan 26 2002 - 10:26:06 PST)
• Re: DDoS attack. Bugtraq Mailing Lists (Sun Jan 27 2002 - 10:31:30 PST)
• is this enumeration? Ronneil Camara (Mon Jan 28 2002 - 07:59:54 PST)
• Re: DDoS attack. Stanislav N. Vardomskiy (Sun Jan 27 2002 - 20:53:45 PST)
• Lots of scans by SSH-1.0-SSH_Version_Mapper Blake R. Swopes (Mon Jan 28 2002 - 09:53:46 PST)
• UDP port 500 traffic from two clients Chris Wilkes (Mon Jan 28 2002 - 08:27:19 PST)
• Re: DDoS attack. Wichert Akkerman (Mon Jan 28 2002 - 01:52:11 PST)
• Re: DDoS attack. Patrick Oonk (Mon Jan 28 2002 - 10:47:07 PST)
• Re: UDP port 500 traffic from two clients Glen Mehn (Mon Jan 28 2002 - 10:27:01 PST)
• RE: UDP port 500 traffic from two clients McCammon, Keith (Mon Jan 28 2002 - 10:56:32 PST)
• Re: UDP port 500 traffic from two clients Gary Flynn (Mon Jan 28 2002 - 11:33:16 PST)
• Re: UDP port 500 traffic from two clients Hugo van der Kooij (Mon Jan 28 2002 - 13:25:42 PST)
• RE: UDP port 500 traffic from two clients Toni Heinonen (Mon Jan 28 2002 - 13:33:27 PST)
• RE: UDP port 500 traffic from two clients Greg A. Woods (Mon Jan 28 2002 - 16:23:15 PST)
• RE: UDP port 500 traffic from two clients Fernando Cardoso (Tue Jan 29 2002 - 01:48:56 PST)
• RE: UDP port 500 traffic from two clients Greg A. Woods (Tue Jan 29 2002 - 09:47:43 PST)
• DDoS to microsoft sites Mike Lewinski (Tue Jan 29 2002 - 15:23:51 PST)
• RE: DDoS to microsoft sites John Campbell (Tue Jan 29 2002 - 16:03:52 PST)
• Re: DDoS to microsoft sites Bronek Kozicki (Wed Jan 30 2002 - 00:20:31 PST)
• Odd scan Fulton L. Preston Jr. (Tue Jan 29 2002 - 21:06:48 PST)
• Re: DDoS to microsoft sites Hugo van der Kooij (Wed Jan 30 2002 - 00:19:59 PST)
• Re: DDoS to microsoft sites Mike Lewinski (Wed Jan 30 2002 - 07:59:18 PST)
• RE: DDoS to microsoft sites Adcock, Matt (Wed Jan 30 2002 - 09:47:09 PST)
• RE: DDoS to microsoft sites Adcock, Matt (Wed Jan 30 2002 - 09:52:05 PST)
• RE: Odd scan dlaumannat_private (Wed Jan 30 2002 - 10:35:22 PST)
• RE: DDoS to microsoft sites Dave Ockwell-Jenner (Wed Jan 30 2002 - 11:27:39 PST)
• RE: DDoS to microsoft sites H C (Wed Jan 30 2002 - 11:44:22 PST)
• Re: Odd scan sgtphou@fire-eyes.yi.org (Wed Jan 30 2002 - 11:30:27 PST)
• RE: DDoS to microsoft sites Jason Robertson (Wed Jan 30 2002 - 16:58:45 PST)
• Apache 1.3.XX John (Wed Jan 30 2002 - 18:22:04 PST)
• Re: Re: DDoS to microsoft sites Mike Lewinski (Thu Jan 31 2002 - 07:12:00 PST)
• formmail - abuse contact for broadwing.net? Soeren Ziehe (Thu Jan 31 2002 - 04:08:00 PST)
• suspicious packets Michael Anuzis (Wed Jan 30 2002 - 19:39:15 PST)
• New Virus/Worm - Frontpage? Clinton Smith (Wed Jan 30 2002 - 18:46:42 PST)
• Re: formmail - abuse contact for broadwing.net? Jay D. Dyson (Thu Jan 31 2002 - 11:07:45 PST)
• RE: DDoS to microsoft sites (? avenues of attack!) Eaton, Arthur (Thu Jan 31 2002 - 13:08:56 PST)
• Re: [Unusual Network_scan[tcp-6267]] Patrick Benson (Thu Jan 31 2002 - 14:40:04 PST)

Last message date: Fri Feb 01 2002 - 12:41:42 PST
Archived on: Fri Feb 01 2002 - 12:41:50 PST

This archive was generated by hypermail 2b30 : Fri Feb 01 2002 - 12:41:50 PST