incidents 2002/08
By Date

Starting: Thu Aug 01 2002 - 08:24:57 PDT
Ending: Mon Sep 02 2002 - 10:36:51 PDT

• openssh-3.4p1.tar.gz trojaned Edwin Groothuis (Wed Jul 31 2002 - 23:55:51 PDT)
• Trojan located in latest openssh tar files Artur Lindgren (Thu Aug 01 2002 - 04:59:06 PDT)
• Re: Rating Attackers H C (Thu Aug 01 2002 - 06:17:10 PDT)
• Re: Anyone know this rootkit (rootkits?) Conjuror (Thu Aug 01 2002 - 09:08:27 PDT)
• odd traffic on port 80 from win 98 system Russell Fulton (Fri Aug 02 2002 - 02:45:54 PDT)
• RE: [unisog] odd traffic on port 80 from win 98 system Chris Gundersen (Fri Aug 02 2002 - 06:28:10 PDT)
• RE: [unisog] odd traffic on port 80 from win 98 system Darlene Steeper (Fri Aug 02 2002 - 06:30:15 PDT)
• Re: (AUSCERT#c42e2) Re: odd traffic on port 80 from win 98 system - Frethem.K Russell Fulton (Sun Aug 04 2002 - 20:21:55 PDT)
• Honeynet Scan of the Month for August released Anton A. Chuvakin (Mon Aug 05 2002 - 08:54:24 PDT)
• Re: openssh-3.4p1.tar.gz trojaned Przemyslaw Frasunek (Mon Aug 05 2002 - 02:37:24 PDT)
• RE: Scanning Port UDP 4668 Ken Grossman (Tue Aug 06 2002 - 08:30:55 PDT)
• Re: (AUSCERT#c42e2) Re: odd traffic on port 80 from win 98 system -Frethem.K H C (Tue Aug 06 2002 - 05:32:54 PDT)
• Re: Scanning Port UDP 4668 David Thiel (Tue Aug 06 2002 - 11:30:37 PDT)
• Strange pings from akamai? Jeff Kell (Wed Aug 07 2002 - 20:33:49 PDT)
• re:Strange pings from akamai? Stone, Alex (Thu Aug 08 2002 - 08:31:10 PDT)
• RE: Strange pings from akamai? Rob Keown (Thu Aug 08 2002 - 08:28:41 PDT)
• Re: Strange pings from akamai? Christian Vogel (Thu Aug 08 2002 - 08:58:58 PDT)
• RE: Strange pings from akamai? James Cook (Thu Aug 08 2002 - 09:02:51 PDT)
• Re: Strange pings from akamai? {1-112POX} Customer Care at Akamai (Thu Aug 08 2002 - 10:30:49 PDT)
• Re: Strange pings from akamai? {1-112POX} Glenn Forbes Fleming Larratt (Thu Aug 08 2002 - 11:21:24 PDT)
• large scale distributed scan of port tcp 445 Russell Fulton (Thu Aug 08 2002 - 15:35:32 PDT)
• Re: large scale distributed scan of port tcp 445 Muhammad Faisal Rauf Danka (Thu Aug 08 2002 - 16:53:41 PDT)
• Re: [unisog] Re: large scale distributed scan of port tcp 445 Russell Fulton (Thu Aug 08 2002 - 17:50:49 PDT)
• RE: large scale distributed scan of port tcp 445 Rob Keown (Thu Aug 08 2002 - 16:15:06 PDT)
• RE: large scale distributed scan of port tcp 445 Thomas Cannon (Fri Aug 09 2002 - 09:54:14 PDT)
• RE: large scale distributed scan of port tcp 445 Jim Harrison (SPG) (Fri Aug 09 2002 - 10:10:58 PDT)
• RE: large scale distributed scan of port tcp 445 Jim Harrison (SPG) (Fri Aug 09 2002 - 11:49:36 PDT)
• RE: large scale distributed scan of port tcp 445 Rick Darsey (Fri Aug 09 2002 - 12:56:42 PDT)
• RE: large scale distributed scan of port tcp 445 H C (Fri Aug 09 2002 - 13:20:25 PDT)
• RE: large scale distributed scan of port tcp 445 Brian McWilliams (Fri Aug 09 2002 - 12:46:23 PDT)
• RE: large scale distributed scan of port tcp 445 Beau Monday (Fri Aug 09 2002 - 12:47:02 PDT)
• Re: large scale distributed scan of port tcp 445 Gary Flynn (Fri Aug 09 2002 - 13:56:01 PDT)
• Re: large scale distributed scan of port tcp 445 Deus, Attonbitus (Fri Aug 09 2002 - 15:48:00 PDT)
• strange apache log entry nargaat_private (Sat Aug 10 2002 - 09:50:15 PDT)
• Subseven Scans Rob Keown (Sun Aug 11 2002 - 06:42:50 PDT)
• Odd activity. cw (Mon Aug 12 2002 - 01:45:23 PDT)
• Re: Strange pings from akamai? {1-112POX} Customer Care at Akamai (Sun Aug 11 2002 - 21:12:15 PDT)
• Re: Subseven Scans Preston Kutzner (Mon Aug 12 2002 - 09:08:59 PDT)
• RE: Subseven Scans Rob Keown (Mon Aug 12 2002 - 10:03:59 PDT)
• Re: Subseven Scans Ben Lambrey (Mon Aug 12 2002 - 09:32:48 PDT)
• RE: strange apache log entry Kurc, Marcin A. (Mon Aug 12 2002 - 10:33:31 PDT)
• Re: strange apache log entry Axel Beckert (Mon Aug 12 2002 - 09:53:34 PDT)
• Re: Subseven Scans H C (Mon Aug 12 2002 - 11:11:01 PDT)
• Re: Subseven Scans Gene Yoo (Mon Aug 12 2002 - 12:06:10 PDT)
• RE: Subseven Scans H C (Mon Aug 12 2002 - 12:42:00 PDT)
• Re[2]: Subseven Scans Preston Kutzner (Mon Aug 12 2002 - 11:41:35 PDT)
• Re: Subseven Scans Baribault, Gary (Mon Aug 12 2002 - 12:12:30 PDT)
• RE: Subseven Scans Rob Keown (Mon Aug 12 2002 - 12:24:54 PDT)
• Re: Subseven Scans H C (Mon Aug 12 2002 - 13:39:11 PDT)
• FW: Subseven Scans Rob Keown (Mon Aug 12 2002 - 17:40:14 PDT)
• RE: Subseven Scans Robert Buckley (Tue Aug 13 2002 - 03:44:54 PDT)
• Odd scans and stuff bouncing off firewalls Nexus (Tue Aug 13 2002 - 08:57:31 PDT)
• RE: Odd scans and stuff bouncing off firewalls Steve Vawter (Tue Aug 13 2002 - 09:57:33 PDT)
• Re: Odd scans and stuff bouncing off firewalls Craig Billado (Tue Aug 13 2002 - 10:50:21 PDT)
• RE: Subseven Scans H C (Tue Aug 13 2002 - 10:46:49 PDT)
• Re: Odd scans and stuff bouncing off firewalls Greg A. Woods (Tue Aug 13 2002 - 11:54:41 PDT)
• RE: Odd scans and stuff bouncing off firewalls Greg A. Woods (Tue Aug 13 2002 - 12:01:36 PDT)
• RPC scans Jonathan Rickman (Tue Aug 13 2002 - 15:11:10 PDT)
• Re: RPC scans Jonathan Rickman (Tue Aug 13 2002 - 15:33:54 PDT)
• RE: Odd scans and stuff bouncing off firewalls Edwards, David (JTS) (Tue Aug 13 2002 - 17:10:18 PDT)
• RE: Subseven Scans H C (Wed Aug 14 2002 - 11:04:54 PDT)
• RE: Subseven Scans Robert Buckley (Wed Aug 14 2002 - 08:39:19 PDT)
• Increased IIS scans mainly on 66.0.0.0/8 Richard Gilman (Wed Aug 14 2002 - 09:22:49 PDT)
• RE: Subseven Scans; Standardized Reporting Brooke, O'neil (EXP) (Wed Aug 14 2002 - 13:58:37 PDT)
• RE: Subseven Scans Robert Buckley (Thu Aug 15 2002 - 04:42:14 PDT)
• RE: Subseven Scans; Standardized Reporting Dial Joe (Thu Aug 15 2002 - 06:40:37 PDT)
• Standardized Reporting H C (Thu Aug 15 2002 - 06:09:09 PDT)
• RE: Standardized Reporting H C (Thu Aug 15 2002 - 11:58:42 PDT)
• RE: Standardized Reporting Rajiv Dighe (Thu Aug 15 2002 - 11:47:49 PDT)
• RE: Standardized Reporting Brooke, O'neil (EXP) (Thu Aug 15 2002 - 13:35:43 PDT)
• BIND scan from Wanadoo.fr Gary Baribault (Thu Aug 15 2002 - 17:23:30 PDT)
• RE: Standardized Reporting Russell Fulton (Thu Aug 15 2002 - 15:37:20 PDT)
• RE: Standardized Reporting Roman Danyliw (Fri Aug 16 2002 - 07:31:51 PDT)
• RE: Standardized Reporting H C (Fri Aug 16 2002 - 07:00:59 PDT)
• Re: [Whitehat] BIND scan from Wanadoo.fr David Hhn (Fri Aug 16 2002 - 09:21:43 PDT)
• Re: BIND scan from Wanadoo.fr Baribault, Gary (Fri Aug 16 2002 - 09:31:59 PDT)
• Re: BIND scan from Wanadoo.fr WebMasterat_private (Fri Aug 16 2002 - 08:42:09 PDT)
• sql 1433 loves2party420at_private (Fri Aug 16 2002 - 10:42:48 PDT)
• Re: sql 1433 daveat_private (Fri Aug 16 2002 - 11:19:21 PDT)
• Re: BIND scan from Wanadoo.fr Mike Arnold (Fri Aug 16 2002 - 18:30:34 PDT)
• RE: Increased IIS scans mainly on 66.0.0.0/8 - Update Richard Gilman (Mon Aug 19 2002 - 08:19:12 PDT)
• AOL "proxy" behavior? Michael B. Morell (Mon Aug 19 2002 - 12:32:26 PDT)
• RE: Increased IIS scans mainly on 66.0.0.0/8 - Update Richard Gilman (Tue Aug 20 2002 - 06:40:51 PDT)
• RE: Increased IIS scans mainly on 66.0.0.0/8 - Update Russell Fulton (Mon Aug 19 2002 - 14:27:17 PDT)
• (moderator can kill thread) AOL "proxy" behavior? Michael B. Morell (Mon Aug 19 2002 - 14:22:52 PDT)
• Re: AOL "proxy" behavior? Mike Arnold (Mon Aug 19 2002 - 14:18:02 PDT)
• Re: AOL "proxy" behavior? Jeff Jirsa (Mon Aug 19 2002 - 14:08:30 PDT)
• Re: AOL "proxy" behavior? Kurt Seifried (Mon Aug 19 2002 - 21:48:53 PDT)
• Unicode worm? Turner, Keith (Contractor) (Wed Aug 21 2002 - 09:41:31 PDT)
• Re: Unicode worm? John Sage (Wed Aug 21 2002 - 21:01:00 PDT)
• RE: Unicode worm? Larsen, Colin (Wed Aug 21 2002 - 21:26:50 PDT)
• Re: Unicode worm? Dean White (Wed Aug 21 2002 - 22:09:26 PDT)
• Re: Unicode worm? Kurt Seifried (Wed Aug 21 2002 - 22:45:02 PDT)
• RE: Unicode worm? Deus, Attonbitus (Thu Aug 22 2002 - 08:56:44 PDT)
• RE: Unicode worm? Turner, Keith (Contractor) (Thu Aug 22 2002 - 09:12:06 PDT)
• looking for what? portscan 15000/tcp Fabio Pietrosanti (naif) (Fri Aug 23 2002 - 05:08:04 PDT)
• Re: Unicode worm? pjat_private (Fri Aug 23 2002 - 04:43:25 PDT)
• BAD TRAFFIC 0 ttl seren geti (Fri Aug 23 2002 - 06:15:51 PDT)
• Re: Unicode worm? Jonathan Rickman (Thu Aug 22 2002 - 18:50:53 PDT)
• RE: looking for what? portscan 15000/tcp Cushing, David (Fri Aug 23 2002 - 10:46:40 PDT)
• Re: BAD TRAFFIC 0 ttl Kurt Seifried (Fri Aug 23 2002 - 10:21:38 PDT)
• Re: BAD TRAFFIC 0 ttl Jason Dixon (Fri Aug 23 2002 - 10:43:41 PDT)
• Re: BAD TRAFFIC 0 ttl Will Tell (Fri Aug 23 2002 - 12:45:15 PDT)
• Re: looking for what? portscan 15000/tcp Thomas Cannon (Fri Aug 23 2002 - 10:58:14 PDT)
• Re: looking for what? portscan 15000/tcp Skip Carter (Fri Aug 23 2002 - 14:34:09 PDT)
• What's going on here? Jackie (Fri Aug 23 2002 - 16:57:28 PDT)
• TCP 6129 - Dameware, TCP 17890 IIS.EXE, SVR1984.exe - Team Liquid Netw3 Security Research (Sat Aug 24 2002 - 02:19:47 PDT)
• RE: What's going on here? NESTING, DAVID M (SBCSI) (Mon Aug 26 2002 - 09:26:10 PDT)
• RE: What's going on here? Yonatan Bokovza (Mon Aug 26 2002 - 08:54:06 PDT)
• Re: What's going on here? wykkydat_private (Mon Aug 26 2002 - 13:24:22 PDT)
• RE: What's going on here? Russell Fulton (Mon Aug 26 2002 - 19:57:38 PDT)
• Anyone seen this? Gary R. Porter (Mon Aug 26 2002 - 14:45:59 PDT)
• Trojan? DDOS Bot? Janusat_private (Tue Aug 27 2002 - 01:22:32 PDT)
• Re: TCP 6129 - Dameware, TCP 17890 IIS.EXE, SVR1984.exe - Team Liquid pjat_private (Tue Aug 27 2002 - 03:57:12 PDT)
• Re: Trojan? DDOS Bot? Mike Parkin (Tue Aug 27 2002 - 11:56:53 PDT)
• Re: Trojan? DDOS Bot? Christopher Cramer (Tue Aug 27 2002 - 11:24:15 PDT)
• Re: Anyone seen this? Bryan D. Payne (Tue Aug 27 2002 - 10:53:05 PDT)
• 2002/udp flood Richard L. Anderson (Tue Aug 27 2002 - 11:47:27 PDT)
• RE: Trojan? DDOS Bot? Brooke, O'neil (EXP) (Tue Aug 27 2002 - 12:02:42 PDT)
• Re: Trojan? DDOS Bot? Richman, Samuel  (Tue Aug 27 2002 - 11:12:20 PDT)
• Re: Trojan? DDOS Bot? Will Tell (Tue Aug 27 2002 - 12:31:19 PDT)
• Re: Trojan? DDOS Bot? Erik Sperling Johansen (Tue Aug 27 2002 - 11:15:48 PDT)
• Re: Trojan? DDOS Bot? Dragos Ruiu (Tue Aug 27 2002 - 04:39:44 PDT)
• Re: Trojan? DDOS Bot? Michael J McCafferty (Tue Aug 27 2002 - 11:31:31 PDT)
• RE: Trojan? DDOS Bot? YAO,TONY (HP-NewZealand,ex1) (Tue Aug 27 2002 - 16:20:47 PDT)
• RE: What's going on here? Hugo van der Kooij (Tue Aug 27 2002 - 13:33:46 PDT)
• Re: 2002/udp flood Mike Nowlin (Tue Aug 27 2002 - 23:03:04 PDT)
• Re: 2002/udp flood Joe Kellner (Tue Aug 27 2002 - 18:27:26 PDT)
• Re: What's going on here? Mark (Wed Aug 28 2002 - 10:34:23 PDT)
• Bots hitting my web server? Adam Bultman (Wed Aug 28 2002 - 13:54:05 PDT)
• Re: What's going on here? wykkydat_private (Thu Aug 29 2002 - 11:21:07 PDT)
• RE: [incidents] Bots hitting my web server? Marco A. Zamora Cunningham (Thu Aug 29 2002 - 10:06:26 PDT)
• RE: Trojan? DDOS Bot? David LeBlanc (Thu Aug 29 2002 - 20:05:19 PDT)
• RE: [incidents] Bots hitting my web server? zcatat_private (Thu Aug 29 2002 - 23:48:19 PDT)
• RE: [incidents] Bots hitting my web server? Rob Keown (Fri Aug 30 2002 - 14:36:33 PDT)
• Any tcp/608 activity? Andrey G. Sergeev (AKA Andris) (Sat Aug 31 2002 - 10:05:30 PDT)
• Re: What's going on here? Valdis.Kletnieksat_private (Fri Aug 30 2002 - 13:38:59 PDT)

Last message date: Mon Sep 02 2002 - 10:36:51 PDT
Archived on: Mon Sep 02 2002 - 10:36:52 PDT

This archive was generated by hypermail 2b30 : Mon Sep 02 2002 - 10:36:52 PDT