incidents 2002/07
By Author

Starting: Mon Jul 01 2002 - 09:10:46 PDT
Ending: Wed Jul 31 2002 - 15:47:50 PDT

• Adam Young
  • Another odd scan... (Thu Jul 11 2002 - 18:56:35 PDT)
• Alexander Bochmann
  • Re: Apache Worm / ddos (Mon Jul 08 2002 - 09:08:56 PDT)
• Alexandru Balan
  • Re: Bind 9.2.X exploit??? (Fri Jul 26 2002 - 03:19:29 PDT)
• Alfred Huger
  • Announcement (Wed Jul 17 2002 - 13:50:00 PDT)
  • Announcement (Wed Jul 17 2002 - 13:50:00 PDT)
  • Announcement (Wed Jul 17 2002 - 13:50:00 PDT)
  • Announcement (Wed Jul 17 2002 - 13:50:00 PDT)
• Alif The Terrible
  • RE: Re: China Experience ? (Tue Jul 23 2002 - 17:41:37 PDT)
  • Re: Re: China Experience ? (Tue Jul 23 2002 - 17:48:28 PDT)
  • Re: Re: China Experience ? (Tue Jul 23 2002 - 10:24:49 PDT)
• Anton A. Chuvakin
  • Re: Anyone know this rootkit (rootkits?) (Fri Jul 26 2002 - 06:37:03 PDT)
• Bill Barrett
  • Re: Stolen Card Purchases (Wed Jul 10 2002 - 10:34:07 PDT)
• Bill McCarty
  • Re: OpenSSH Attack? (Mon Jul 01 2002 - 17:25:26 PDT)
• Bob DeRosier
  • China Experience ? (Fri Jul 19 2002 - 14:26:30 PDT)
• bonkat_private
  • Re: China Experience ? (Fri Jul 19 2002 - 18:40:36 PDT)
• Brenna Primrose
  • RE: TCP port 139 probes (Wed Jul 10 2002 - 10:39:43 PDT)
• Brooke, O'neil (EXP)
  • RE: Lessons Learned from the MPAA's use of DCMA (Fri Jul 12 2002 - 14:40:04 PDT)
  • Lessons Learned from the MPAA's use of DCMA (Thu Jul 11 2002 - 11:18:44 PDT)
• Bubsy
  • Re: Ideas? Port 21 SYNs, slow (Sat Jul 13 2002 - 14:57:17 PDT)
  • Ideas? Port 21 SYNs, slow (Wed Jul 10 2002 - 19:41:08 PDT)
• Buddy Nahay
  • Re: Ideas? Port 21 SYNs, slow (Sun Jul 14 2002 - 23:09:59 PDT)
• bugtraq
  • Re: China Experience ? (Sun Jul 21 2002 - 23:51:01 PDT)
• Bukys, Liudvikas
  • RE: scanning for HTTP proxies, ports 80, 81, 1080, 3128, 4480, 65 88, 8000, 8080, 8081 (Mon Jul 29 2002 - 13:20:48 PDT)
  • scanning for HTTP proxies, ports 80, 81, 1080, 3128, 4480, 6588, 8000, 8080, 8081 (Mon Jul 29 2002 - 11:34:38 PDT)
• Carey, Steve T ISD
  • RE: ftp directory scan (Mon Jul 08 2002 - 08:33:46 PDT)
• Chris Brenton
  • Re: China Experience ? (Wed Jul 24 2002 - 00:15:36 PDT)
  • Re: Re: China Experience ? (Tue Jul 23 2002 - 13:36:16 PDT)
• Christopher Barker
  • RE: Re: China Experience ? (Tue Jul 23 2002 - 18:02:34 PDT)
• Crist J. Clark
  • Protocol 255 (Thu Jul 11 2002 - 14:48:00 PDT)
  • Re: Invalid TCP header flags (Mon Jul 08 2002 - 16:46:17 PDT)
• Curley Mr Eric P
  • RE: China Experience ? (Mon Jul 22 2002 - 10:20:00 PDT)
  • RE: China Experience ? (Mon Jul 22 2002 - 05:22:30 PDT)
  • Code Red and other anomalous activity from 1433 (Thu Jul 11 2002 - 07:25:53 PDT)
  • RE: Stolen Card Purchases (Wed Jul 10 2002 - 08:03:42 PDT)
• Curt Purdy
  • FireDeamon exploit (Fri Jul 19 2002 - 11:21:47 PDT)
• Dan Irwin
  • RE: TCP port 139 probes (Tue Jul 09 2002 - 16:20:34 PDT)
• Dave Mitchell
  • Re: Apache Worm / ddos (Thu Jul 11 2002 - 01:41:17 PDT)
• David Baker
  • Possible System Compromise (Tue Jul 09 2002 - 11:57:54 PDT)
• David Carmean
  • Packet suckers? (Mon Jul 29 2002 - 12:53:04 PDT)
  • Re: Bind 9.2.X exploit??? (Fri Jul 26 2002 - 09:14:35 PDT)
• David Conrad
  • Re: Bind 9.2.X exploit??? (Thu Jul 25 2002 - 10:56:31 PDT)
  • Re: Bind 9.2.X exploit??? (Thu Jul 25 2002 - 08:44:41 PDT)
• David Jacoby
  • Re: Can anyone identify this backdoor? (Thu Jul 11 2002 - 04:05:02 PDT)
  • Re: Can anyone identify this backdoor? (Thu Jul 11 2002 - 03:26:18 PDT)
• dbroggyat_private
  • Re: Compromized Windows NT machine? (Fri Jul 26 2002 - 09:55:41 PDT)
• Erick Arturo Perez Huemer
  • RE: Can anyone identify this backdoor? (Wed Jul 10 2002 - 22:53:11 PDT)
• euan
  • Re: China Experience ? (Tue Jul 23 2002 - 17:10:50 PDT)
  • Re: China Experience ? (Tue Jul 23 2002 - 14:49:13 PDT)
• faded
  • Re: scanning for HTTP proxies, ports 80, 81, 1080, 3128, 4480, 6588, 8000, 8080, 8081 (Mon Jul 29 2002 - 12:45:40 PDT)
• Frank Knobbe
  • Re: Compromized Windows NT machine? (Fri Jul 26 2002 - 21:01:31 PDT)
• GabyHornikat_private
  • Compromized Windows NT machine? (Fri Jul 26 2002 - 02:08:55 PDT)
  • Re: Scanning Port UDP 4668 (Tue Jul 23 2002 - 01:11:20 PDT)
• George M. Garner Jr.
  • RE: TCP 1025 scanning worm? (Fri Jul 19 2002 - 07:20:11 PDT)
• george.wasgattat_private
  • RE: Anyone seen this before? (Wed Jul 03 2002 - 09:48:54 PDT)
• Golden_Eternity
  • RE: Apache Worm / ddos (Mon Jul 08 2002 - 09:00:39 PDT)
  • RE: Seeing Chuncked content (Mon Jul 08 2002 - 09:26:14 PDT)
• Graham, Randy (RAW)
  • RE: Code Red and other anomalous activity from 1433 (Thu Jul 11 2002 - 12:56:09 PDT)
• Green, Art
  • RE: Stolen Card Purchases (Wed Jul 10 2002 - 10:58:17 PDT)
• Greg Reber
  • RE: Stolen Card Purchases (Tue Jul 09 2002 - 18:43:03 PDT)
• gs-list
  • Unknown/Weird Traffic? (Sun Jul 14 2002 - 12:56:04 PDT)
• H C
  • Re: Scanning Port UDP 4668 (Tue Jul 23 2002 - 10:18:34 PDT)
  • Re: diagnose compromise on NT (Mon Jul 22 2002 - 10:37:21 PDT)
  • Re: Scanning Port UDP 4668 (Mon Jul 22 2002 - 10:29:51 PDT)
  • re: TCP 1025 scanning worm? (Thu Jul 18 2002 - 11:36:35 PDT)
  • RE: TCP port 139 probes (Wed Jul 10 2002 - 10:39:55 PDT)
  • Re: Possible System Compromise (Tue Jul 09 2002 - 16:27:26 PDT)
  • Re: TCP port 139 probes (Tue Jul 09 2002 - 16:20:16 PDT)
  • Re: Anyone seen this before? (Tue Jul 02 2002 - 16:28:37 PDT)
• Hank Leininger
  • RE: ftp.bitchx.org's ircii-pana-1.0c19.tar.gz is backdoored (Mon Jul 01 2002 - 19:54:45 PDT)
  • ftp.bitchx.org's ircii-pana-1.0c19.tar.gz is backdoored (Mon Jul 01 2002 - 08:42:34 PDT)
  • ftp.bitchx.org's ircii-pana-1.0c19.tar.gz is backdoored (Mon Jul 01 2002 - 08:42:34 PDT)
• harston
  • ftp directory scan (Mon Jul 08 2002 - 06:17:58 PDT)
• Henti Smith
  • can't seem to find these tools/rootkit anywhere .. (Tue Jul 09 2002 - 16:14:15 PDT)
• Hornat, Charles
  • RE: diagnose compromise on NT (Mon Jul 22 2002 - 08:53:56 PDT)
• Ian Webb
  • RE: Can anyone identify this backdoor? (Sun Jul 21 2002 - 22:34:56 PDT)
• ilker
  • Bind 9.2.X exploit??? (Wed Jul 24 2002 - 18:05:05 PDT)
• incidents.nospam13@web-cities.net
  • Re: China Experience ? (Mon Jul 22 2002 - 09:40:16 PDT)
• Ingersoll, Jared
  • diagnose compromise on NT (Mon Jul 22 2002 - 04:50:22 PDT)
• james
  • Seeing Chuncked content (Fri Jul 05 2002 - 13:24:24 PDT)
• Jason Coombs
  • RE: Stolen Card Purchases (Wed Jul 10 2002 - 14:11:06 PDT)
• Jason Giglio
  • Re: Ideas? Port 21 SYNs, slow (Thu Jul 11 2002 - 15:15:17 PDT)
• Jensenne Roculan
  • Dead Thread: China Experience? (Wed Jul 24 2002 - 08:48:23 PDT)
  • Vacation Troller, Please Ignore. (Thu Jul 18 2002 - 10:43:06 PDT)
• Jhon Q Doe
  • Re: Can anyone identify this backdoor? (Wed Jul 10 2002 - 19:43:55 PDT)
• Jim Clausing
  • Re: Bind 9.2.X exploit??? (Thu Jul 25 2002 - 10:22:23 PDT)
• Joe Matusiewicz
  • Frethem.K virus (Mon Jul 15 2002 - 09:49:43 PDT)
• Jonathan A. Zdziarski
  • Re: Stolen Card Purchases (Wed Jul 10 2002 - 06:24:16 PDT)
  • Stolen Card Purchases (Tue Jul 09 2002 - 17:24:08 PDT)
• Jonathan Bloomquist
  • Re: Stolen Card Purchases (Tue Jul 09 2002 - 20:11:13 PDT)
• Jose Nazario
  • Re: Another odd scan... (Fri Jul 12 2002 - 15:23:17 PDT)
  • heads up: scanssh modifications made public (Tue Jul 09 2002 - 21:31:34 PDT)
• Joseph
  • Re: Surge of attacks on ports 61127 & 61134 (Thu Jul 25 2002 - 15:05:33 PDT)
  • Surge of attacks on ports 61127 & 61134 (Thu Jul 25 2002 - 11:55:33 PDT)
• Ken Blinco
  • Re: China Experience ? (Tue Jul 23 2002 - 16:16:43 PDT)
• Ken Grossman
  • Scanning Port UDP 4668 (Mon Jul 22 2002 - 06:46:32 PDT)
• kevin.chen
  • Re: Re: China Experience ? (Mon Jul 22 2002 - 20:03:12 PDT)
• kyle.r.maxwellat_private
  • Invalid TCP header flags (Mon Jul 08 2002 - 13:22:21 PDT)
• Lance Spitzner
  • Honeynet Project - Reverse Challenge results (Mon Jul 08 2002 - 05:21:15 PDT)
  • Honeynet Project - SotM and Reverse Challenge (Mon Jul 01 2002 - 06:27:06 PDT)
• lsi
  • RE: Code Red and other anomalous activity from 1433 (Fri Jul 12 2002 - 03:29:14 PDT)
  • Re: can't seem to find these tools/rootkit anywhere .. (Wed Jul 10 2002 - 08:04:07 PDT)
• Lucas
  • RE: Scanning Port UDP 4668 (Mon Jul 22 2002 - 09:36:34 PDT)
• Mark Ruth
  • Re: OpenBSD rootkit (Mon Jul 15 2002 - 23:44:01 PDT)
• Mark Shirley
  • Re: Can anyone identify this backdoor? (Wed Jul 10 2002 - 23:33:59 PDT)
• marko.muncan.mm@bayer-ag.de
  • Unicode exploits with Serv-U (Mon Jul 22 2002 - 23:14:27 PDT)
• Markus Friedl
  • Re: OpenBSD rootkit (Tue Jul 16 2002 - 02:21:54 PDT)
• Matt Andreko
  • RE: Can anyone identify this backdoor? (Thu Jul 11 2002 - 08:09:28 PDT)
  • Can anyone identify this backdoor? (Wed Jul 10 2002 - 14:58:06 PDT)
• Matt Scarborough
  • Re: Can anyone identify this backdoor? (Thu Jul 11 2002 - 21:25:54 PDT)
• Matthew Rich
  • interesting backdoor (Thu Jul 11 2002 - 13:15:26 PDT)
• McCammon, Keith
  • RE: Odd scan (Sun Jul 21 2002 - 17:38:01 PDT)
• Michael B. Morell
  • Closed thread- Anyone seen this before? (Wed Jul 03 2002 - 11:39:26 PDT)
  • Additional- Anyone seen this before? (Wed Jul 03 2002 - 09:30:12 PDT)
  • RE: Anyone seen this before? (Wed Jul 03 2002 - 07:14:38 PDT)
  • Anyone seen this before? (Tue Jul 02 2002 - 15:04:55 PDT)
• Michael Anuzis
  • Incident Analysis of Compromised OpenBSD3.0 Honeypot (Thu Jul 11 2002 - 09:43:29 PDT)
• Michael Fredericks
  • RE: Code Red and other anomalous activity from 1433 (Thu Jul 11 2002 - 14:53:08 PDT)
• Michael H. Warfield
  • Re: Ideas? Port 21 SYNs, slow (Fri Jul 12 2002 - 16:05:33 PDT)
• Michael Katz
  • Re: ftp directory scan (Mon Jul 08 2002 - 08:44:00 PDT)
• Michal Zalewski
  • Re: Lessons Learned from the MPAA's use of DCMA (Thu Jul 11 2002 - 19:50:18 PDT)
• Mike Hrubes
  • RE: Possible System Compromise (Tue Jul 09 2002 - 13:29:07 PDT)
• Mike Lewinski
  • Re: OpenSSH Attack? (Tue Jul 02 2002 - 11:24:21 PDT)
• Muhammad Faisal Rauf Danka
  • Re: Bind 9.2.X exploit??? (Wed Jul 24 2002 - 23:04:58 PDT)
  • Re: Odd scan (Mon Jul 22 2002 - 05:11:27 PDT)
  • Re: Another odd scan... (Sat Jul 13 2002 - 13:30:10 PDT)
• Nelson Brito
  • RE: ftp.bitchx.org's ircii-pana-1.0c19.tar.gz is backdoored (Mon Jul 01 2002 - 13:53:38 PDT)
• Nick FitzGerald
  • Re: Re: China Experience ? (Tue Jul 23 2002 - 19:22:28 PDT)
  • Re: China Experience ? (Sun Jul 21 2002 - 18:17:04 PDT)
• Patrick Andry
  • Re: Bind 9.2.X exploit??? (Thu Jul 25 2002 - 04:11:00 PDT)
  • Re: diagnose compromise on NT (Mon Jul 22 2002 - 08:05:20 PDT)
• Paul Gear
  • Re: China Experience ? (Mon Jul 22 2002 - 13:14:12 PDT)
• Pavel Kankovsky
  • Conclusion: TCP port 139 probes (Fri Jul 12 2002 - 05:47:59 PDT)
  • RE: TCP port 139 probes (Wed Jul 10 2002 - 02:18:23 PDT)
  • TCP port 139 probes (Tue Jul 09 2002 - 13:21:35 PDT)
• pjat_private
  • Increasing compromises of NT servers with Serv-U and Unicode ? (Thu Jul 25 2002 - 01:51:37 PDT)
• Przemyslaw Frasunek
  • OpenBSD rootkit (Sat Jul 13 2002 - 23:55:07 PDT)
• purdyat_private
  • FireDaemon exploit - part 2 (Thu Jul 25 2002 - 09:12:20 PDT)
• Ray Pompon
  • RE: Stolen Card Purchases (Wed Jul 10 2002 - 09:44:15 PDT)
• Richard Bartlett
  • RE: Can anyone identify this backdoor? (Thu Jul 11 2002 - 15:33:09 PDT)
• Richard Johnson
  • re: TCP 1025 scanning worm? (Thu Jul 18 2002 - 13:07:39 PDT)
  • TCP 1025 scanning worm? (Wed Jul 17 2002 - 12:37:53 PDT)
• Rob Keown
  • RE: TCP 1025 scanning worm? (Wed Jul 17 2002 - 14:38:48 PDT)
• Roy Sigurd Karlsbakk
  • Exploit in rpc.statd 0.3.3? (Mon Jul 08 2002 - 08:10:56 PDT)
• Russell Fulton
  • observations on recent unicode attacks against IIS servers (Sun Jul 28 2002 - 17:47:24 PDT)
  • Re: Re: China Experience ? (Tue Jul 23 2002 - 15:56:55 PDT)
  • Re: Odd scan (Sun Jul 21 2002 - 13:15:52 PDT)
  • Re: China Experience ? (Fri Jul 19 2002 - 15:04:49 PDT)
• Ryan Russell
  • RE: TCP port 139 probes (Fri Jul 12 2002 - 16:08:40 PDT)
  • Re: Can anyone identify this backdoor? (Thu Jul 11 2002 - 14:12:55 PDT)
• Scott Fendley
  • Re: OpenBSD rootkit (Tue Jul 16 2002 - 08:37:20 PDT)
• Sebastian
  • Re: Bind 9.2.X exploit??? (Thu Jul 25 2002 - 11:28:19 PDT)
• SecurityPortal
  • Re: China Experience ? (Tue Jul 23 2002 - 04:15:28 PDT)
• Sergey Latkin
  • Re: Additional- Anyone seen this before? (Wed Jul 03 2002 - 11:23:47 PDT)
  • Re: Anyone seen this before? (Wed Jul 03 2002 - 08:33:35 PDT)
• shawn merdinger
  • Re: Can anyone identify this backdoor? (Thu Jul 11 2002 - 01:06:51 PDT)
• SilentCreek
  • Re: Anyone know this rootkit (rootkits?) (Thu Jul 25 2002 - 11:28:27 PDT)
• Steve Bougerolle
  • Re: Anyone know this rootkit (rootkits?) (details and files attached) (Fri Jul 26 2002 - 10:05:35 PDT)
  • Anyone know this rootkit (rootkits?) (Thu Jul 25 2002 - 08:26:27 PDT)
• steveg
  • Re: Anyone know this rootkit (rootkits?) (details and files attached) (Fri Jul 26 2002 - 15:01:16 PDT)
• Steven M. Christey
  • Re: China Experience ? (Tue Jul 23 2002 - 15:16:44 PDT)
• Tadas Miniotas
  • Odd scan (Sat Jul 20 2002 - 10:04:20 PDT)
• Thomas Cannon
  • Re: Code Red and other anomalous activity from 1433 (Thu Jul 11 2002 - 13:00:15 PDT)
• Thorsten Schroeder
  • Apache Worm / ddos (Sun Jul 07 2002 - 14:14:56 PDT)
• Toby Miller
  • Rating Attackers (Tue Jul 30 2002 - 17:57:04 PDT)
• Valdis.Kletnieksat_private
  • Re: Rating Attackers (Wed Jul 31 2002 - 15:41:56 PDT)
• Vitaly Osipov
  • Re: Scanning Port UDP 4668 (Tue Jul 23 2002 - 10:02:59 PDT)
• Willsey, Rob (CCI-Omaha)
  • RE: Possible System Compromise (Tue Jul 09 2002 - 14:37:52 PDT)
• Wolf, Glenn
  • RE: Another odd scan... (Fri Jul 12 2002 - 15:13:33 PDT)
• Yaakov Yehudi
  • Re: China Experience ? (Sun Jul 21 2002 - 23:22:18 PDT)
• YAO,TONY (HP-NewZealand,ex1)
  • RE: China Experience ? (Tue Jul 23 2002 - 16:50:14 PDT)
• zeno
  • Re: can't seem to find these tools/rootkit anywhere .. (Wed Jul 10 2002 - 09:25:37 PDT)

Last message date: Wed Jul 31 2002 - 15:47:50 PDT
Archived on: Wed Jul 31 2002 - 15:47:53 PDT

This archive was generated by hypermail 2b30 : Wed Jul 31 2002 - 15:47:53 PDT