incidents 2002/09
By Thread

Starting: Mon Sep 02 2002 - 11:16:51 PDT
Ending: Mon Sep 30 2002 - 19:15:35 PDT

• Re: Any tcp/608 activity? Johannes Ullrich (Mon Sep 02 2002 - 11:11:53 PDT)
• Strange back-orifice looking scan... Jeff Kell (Wed Sep 04 2002 - 09:08:48 PDT)
  • Re: Strange back-orifice looking scan... KoRe MeLtDoWn (Wed Sep 04 2002 - 14:09:46 PDT)
    • Re: Strange back-orifice looking scan... Jeff Kell (Wed Sep 04 2002 - 19:32:09 PDT)
  • Re: Strange back-orifice looking scan... Neil Dickey (Thu Sep 05 2002 - 10:59:36 PDT)
    • Re: Strange back-orifice looking scan... Scott Nursten (Wed Sep 11 2002 - 04:50:34 PDT)
• RE: Any tcp/608 activity? Garramone, Michael (CCI-Las Vegas) (Wed Sep 04 2002 - 08:30:33 PDT)
  • RE: Any tcp/608 activity? Garramone, Michael (CCI-Las Vegas) (Wed Sep 04 2002 - 16:51:14 PDT)
• new type of formmail probes Russell Fulton (Wed Sep 04 2002 - 19:23:55 PDT)
  • Re: new type of formmail probes sunzi (Thu Sep 05 2002 - 09:58:19 PDT)
  • Re: new type of formmail probes Kerry Thompson (Thu Sep 05 2002 - 14:12:59 PDT)
• Odd sendmail behavior Etaoin Shrdlu (Thu Sep 05 2002 - 11:34:19 PDT)
  • Re: Odd sendmail behavior Michael Katz (Thu Sep 05 2002 - 13:07:29 PDT)
    • Re: Re: Odd sendmail behavior Nigel Frankcom (Thu Sep 05 2002 - 13:32:03 PDT)
      • Re: Odd sendmail behavior Etaoin Shrdlu (Thu Sep 05 2002 - 14:11:51 PDT)
• Q328691 ? Bronek Kozicki (Fri Sep 06 2002 - 12:40:35 PDT)
  • Re: Q328691 ? H C (Fri Sep 06 2002 - 14:09:38 PDT)
    • Re: Q328691 ? Jonathan Rickman (Fri Sep 06 2002 - 14:41:33 PDT)
      • Re: Q328691 ? Nick FitzGerald (Fri Sep 06 2002 - 17:45:23 PDT)
    • Re: Q328691 ? Baribault, Gary (Fri Sep 06 2002 - 14:35:50 PDT)
    • Re: Q328691 ? sunzi (Fri Sep 06 2002 - 19:55:57 PDT)
  • Re: Q328691 ? Joe Blatz (Fri Sep 06 2002 - 14:36:07 PDT)
    • Re: Q328691 ? Jon (Fri Sep 06 2002 - 16:21:15 PDT)
    • Re: Q328691 ? HggdH (Fri Sep 06 2002 - 20:41:01 PDT)
  • Re: Q328691 ? Valdis.Kletnieksat_private (Fri Sep 06 2002 - 15:07:30 PDT)
  • RE: Q328691 ? Byrne, David (Fri Sep 06 2002 - 15:41:50 PDT)
  • Re: Q328691 ? Security (Fri Sep 06 2002 - 16:37:00 PDT)
    • Re: Q328691 ? sunzi (Mon Sep 09 2002 - 08:32:30 PDT)
  • Re: Q328691 ? Bernt Lervik (Sun Sep 08 2002 - 15:19:24 PDT)
    • RE: Q328691 ? Jason Coombs (Mon Sep 09 2002 - 12:38:56 PDT)
  • Re: Q328691 ? Bronek Kozicki (Sat Sep 07 2002 - 01:57:13 PDT)
    • Re: Q328691 ? H C (Sat Sep 07 2002 - 04:27:08 PDT)
  • RE: Q328691 ? Byrne, David (Tue Sep 10 2002 - 10:44:07 PDT)
  • Re: Q328691 ? Kyle Lai (Wed Sep 11 2002 - 01:48:02 PDT)
• Lame website scanner scanning subnets zeno (Fri Sep 06 2002 - 08:03:47 PDT)
• Re: SV: Q328691 ? H C (Sat Sep 07 2002 - 04:44:02 PDT)
  • Re: SV: Q328691 ? jennifer smith (Sun Sep 08 2002 - 19:48:38 PDT)
    • Re: SV: Q328691 ? H C (Mon Sep 09 2002 - 06:16:16 PDT)
• Re: All versions of windows infected? Axel Pettinger (Sat Sep 07 2002 - 01:03:21 PDT)
• [Full-Disclosure] remote kernel exploits? andy_mnat_private (Sun Sep 08 2002 - 04:43:49 PDT)
  • Re: [Full-Disclosure] remote kernel exploits? Azerail (Sun Sep 08 2002 - 05:25:22 PDT)
  • Re: [Full-Disclosure] remote kernel exploits? Azerail (Sun Sep 08 2002 - 05:25:22 PDT)
  • [Full-Disclosure] Re: remote kernel exploits? Jose Nazario (Mon Sep 09 2002 - 08:50:28 PDT)
  • Re: remote kernel exploits? Jose Nazario (Mon Sep 09 2002 - 08:50:28 PDT)
  • [Full-Disclosure] remote kernel exploits? andy_mnat_private (Sun Sep 08 2002 - 04:43:49 PDT)
  • Re: [Full-Disclosure] remote kernel exploits? Azerail (Sun Sep 08 2002 - 05:25:22 PDT)
  • [Full-Disclosure] Re: remote kernel exploits? Stephen (Mon Sep 09 2002 - 19:50:30 PDT)
  • Re: remote kernel exploits? Stephen (Mon Sep 09 2002 - 19:50:30 PDT)
  • [Full-Disclosure] remote kernel exploits? andy_mnat_private (Sun Sep 08 2002 - 04:43:49 PDT)
  • RE: [Full-Disclosure] remote kernel exploits? Blake Frantz (Wed Sep 18 2002 - 08:00:50 PDT)
• remote kernel exploits? andy_mnat_private (Sun Sep 08 2002 - 04:43:49 PDT)
  • RE: remote kernel exploits? Yonatan Bokovza (Tue Sep 10 2002 - 08:40:59 PDT)
    • Re: [Full-Disclosure] RE: remote kernel exploits? Jacques A. Vidrine (Tue Sep 10 2002 - 13:46:27 PDT)
• weird b.cgi HalbaSus (Sun Sep 08 2002 - 08:33:59 PDT)
  • Re: weird b.cgi Roger Thompson (Mon Sep 09 2002 - 14:00:37 PDT)
    • Re: weird b.cgi HalbaSus (Tue Sep 10 2002 - 03:39:44 PDT)
• Possible PHP worm ? Mark Ng (Mon Sep 09 2002 - 07:15:16 PDT)
• Code Red / Nimda Antidote? Clinton Smith (Sun Sep 08 2002 - 18:28:49 PDT)
  • Re: Code Red / Nimda Antidote? Brad Arlt (Mon Sep 09 2002 - 12:20:27 PDT)
  • Re: Code Red / Nimda Antidote? Roger Thompson (Mon Sep 09 2002 - 12:30:04 PDT)
    • Re: Code Red / Nimda Antidote? Johannes Ullrich (Mon Sep 09 2002 - 13:36:20 PDT)
• IH FAQ Shaheem Motlekar (Mon Sep 09 2002 - 08:15:17 PDT)
• prisoner.iana.org Diver8 (Sun Sep 08 2002 - 07:28:04 PDT)
  • RE: prisoner.iana.org David Vincent (Mon Sep 09 2002 - 12:24:01 PDT)
  • RE: prisoner.iana.org Carey, Steve T ISD (Mon Sep 09 2002 - 13:59:16 PDT)
    • Re: prisoner.iana.org kentat_private (Mon Sep 09 2002 - 19:31:58 PDT)
• UDP port 22321 Greg Schmidt (Mon Sep 09 2002 - 14:24:11 PDT)
  • RE: UDP port 22321 Jeremy Junginger (Mon Sep 09 2002 - 14:34:37 PDT)
    • Re: UDP port 22321 David U. (Mon Sep 09 2002 - 16:47:41 PDT)
• UDP flood on port 2001 Arnold Yancha (Mon Sep 09 2002 - 20:05:20 PDT)
  • Re: UDP flood on port 2001 Michael Katz (Tue Sep 10 2002 - 09:36:54 PDT)
    • Re: UDP flood on port 2001 Arnold Yancha (Tue Sep 10 2002 - 20:47:58 PDT)
  • RE: UDP flood on port 2001 Garbrecht, Frederick (Tue Sep 10 2002 - 10:40:10 PDT)
  • Re: UDP flood on port 2001 KoRe MeLtDoWn (Tue Sep 10 2002 - 14:14:56 PDT)
• possible ssh hack Ver Allan Sumabat (Tue Sep 10 2002 - 03:07:40 PDT)
  • Re: possible ssh hack Alvin Oga (Tue Sep 10 2002 - 09:11:53 PDT)
  • Re: possible ssh hack Adam Bultman (Tue Sep 10 2002 - 09:06:21 PDT)
  • RE: possible ssh hack Loki (Wed Sep 11 2002 - 11:55:05 PDT)
    • RE: possible ssh hack Ver Allan Sumabat (Wed Sep 11 2002 - 20:15:42 PDT)
      • RE: possible ssh hack Michael Osten (Wed Sep 11 2002 - 21:29:25 PDT)
      • Re: possible ssh hack Skip (Wed Sep 11 2002 - 22:16:45 PDT)
      • RE: possible ssh hack Alvin Oga (Wed Sep 11 2002 - 21:38:26 PDT)
      • Re: possible ssh hack Rico Gloeckner (Fri Sep 13 2002 - 02:17:40 PDT)
  • RE: possible ssh hack Loki (Wed Sep 11 2002 - 12:02:51 PDT)
• [Full-Disclosure] RE: remote kernel exploits? Yonatan Bokovza (Tue Sep 10 2002 - 08:40:59 PDT)
  • [Full-Disclosure] RE: remote kernel exploits? Gommers, Joep (Wed Sep 11 2002 - 03:47:18 PDT)
    • Re: [Full-Disclosure] RE: remote kernel exploits? andy_mnat_private (Thu Sep 12 2002 - 01:04:21 PDT)
      • Re: [Full-Disclosure] RE: remote kernel exploits? HalbaSus (Fri Sep 13 2002 - 03:27:20 PDT)
      • Re: [Full-Disclosure] RE: remote kernel exploits? Andrew Thomas (Thu Sep 12 2002 - 18:27:55 PDT)
    • Re: [Full-Disclosure] RE: remote kernel exploits? andy_mnat_private (Thu Sep 12 2002 - 01:04:21 PDT)
    • RE: [Full-Disclosure] RE: remote kernel exploits? Gommers, Joep (Thu Sep 12 2002 - 23:54:50 PDT)
    • Re: [Full-Disclosure] RE: remote kernel exploits? isergevskyat_private (Fri Sep 13 2002 - 07:43:49 PDT)
• What's the tool? (iis, ftp, 57/tcp) Scott A. McIntyre (Wed Sep 11 2002 - 12:35:13 PDT)
• strange output from chkrootkit Raúl Eduardo Millán Villalaz (Thu Sep 12 2002 - 07:50:58 PDT)
  • Re: strange output from chkrootkit zeno (Fri Sep 13 2002 - 05:23:09 PDT)
• [Full-Disclosure] Re: Linux Slapper Worm code KF (Mon Sep 16 2002 - 12:19:37 PDT)
• Re: Linux Slapper Worm code KF (Mon Sep 16 2002 - 12:19:37 PDT)
• RE: [Full-Disclosure] openssl exploit code Arjen De Landgraaf (Mon Sep 16 2002 - 16:42:16 PDT)
  • RE: [Full-Disclosure] openssl exploit code Arjen De Landgraaf (Mon Sep 16 2002 - 16:42:16 PDT)
• Re: slaper trafic james (Mon Sep 16 2002 - 14:49:04 PDT)
  • Re: slaper trafic Denis Dimick (Tue Sep 17 2002 - 06:58:20 PDT)
  • Re: slaper trafic Jeff (Mon Sep 16 2002 - 23:30:12 PDT)
  • Re: slaper trafic Jose Nazario (Tue Sep 17 2002 - 05:32:35 PDT)
  • Re: slaper trafic Michael Katz (Tue Sep 17 2002 - 23:33:30 PDT)
• Interesting packets Jeremy Junginger (Mon Sep 16 2002 - 08:30:48 PDT)
  • RE: Interesting packets Semerjian, Ohanes (Mon Sep 16 2002 - 20:19:36 PDT)
    • Re: Interesting packets Marcelo Barbosa Lima (Tue Sep 17 2002 - 17:28:58 PDT)
  • RE: Interesting packets Boyan Krosnov (Tue Sep 17 2002 - 00:13:46 PDT)
• non worm ssl attacks Russell Fulton (Tue Sep 17 2002 - 02:53:38 PDT)
  • Re: [unisog] non worm ssl attacks Christian Wilson (Tue Sep 17 2002 - 07:11:19 PDT)
• Good practicle php attack example zeno (Tue Sep 17 2002 - 11:12:39 PDT)
  • Re: Good practicle php attack example Harald Finnaas (Tue Sep 17 2002 - 22:17:19 PDT)
  • Re: Good practicle php attack example Steven M. Christey (Wed Sep 18 2002 - 19:49:26 PDT)
  • Re: Good practicle php attack example Steven M. Christey (Sat Sep 21 2002 - 15:46:16 PDT)
• Another Nimda attack?? Eugene Chua Yew Gin (Tue Sep 17 2002 - 02:42:37 PDT)
  • Re: Another Nimda attack?? Roger Thompson (Tue Sep 17 2002 - 17:57:15 PDT)
• Win2K Advaned Server compromise report available Curt Wilson (Tue Sep 17 2002 - 08:24:23 PDT)
• Analysis of Modap worm Mario van Velzen (Mon Sep 16 2002 - 16:30:11 PDT)
  • Analysis of Modap worm Mario van Velzen (Mon Sep 16 2002 - 16:30:11 PDT)
  • Re: Analysis of Modap worm Paul Wouters (Tue Sep 24 2002 - 06:27:14 PDT)
• [Full-Disclosure] win2k incident Harshul Nayak (ealcatraz) (Tue Sep 17 2002 - 21:18:41 PDT)
• Huge Autoexec.bat Matthew S Barnes (Sat Sep 14 2002 - 08:53:36 PDT)
  • Re: Huge Autoexec.bat Nick FitzGerald (Tue Sep 17 2002 - 16:35:22 PDT)
  • Re: Huge Autoexec.bat Chris Norris (Wed Sep 18 2002 - 03:27:07 PDT)
• What's on udp/2002 ? Guido Van De Velde (Wed Sep 18 2002 - 05:54:13 PDT)
  • Re: What's on udp/2002 ? rewtat_private (Wed Sep 18 2002 - 11:49:07 PDT)
    • Re: What's on udp/2002 ? Nick FitzGerald (Wed Sep 18 2002 - 14:43:34 PDT)
  • Re: What's on udp/2002 ? Russell Harding (Wed Sep 18 2002 - 14:05:02 PDT)
  • Re: What's on udp/2002 ? Nick FitzGerald (Wed Sep 18 2002 - 12:36:27 PDT)
  • Re: What's on udp/2002 ? Kurt Seifried (Wed Sep 18 2002 - 16:20:00 PDT)
  • Re: What's on udp/2002 ? Johannes Ullrich (Wed Sep 18 2002 - 11:36:22 PDT)
  • RE: What's on udp/2002 ? Matthew F. Caldwell (Wed Sep 18 2002 - 11:36:19 PDT)
  • Re: What's on udp/2002 ? Jose Nazario (Wed Sep 18 2002 - 11:36:06 PDT)
  • Re: What's on udp/2002 ? Guido Van De Velde (Wed Sep 18 2002 - 14:19:54 PDT)
• [Full-Disclosure] Re: Linux Slapper Worm code (removal) KF (Tue Sep 17 2002 - 07:15:44 PDT)
• Thank you all for your responses to "Huge Autoexec.bat" Matthew S Barnes (Wed Sep 18 2002 - 14:58:25 PDT)
• Linux Slapper Worm and Linksys James Williams (Thu Sep 19 2002 - 06:11:56 PDT)
  • Re: Linux Slapper Worm and Linksys Johannes Ullrich (Thu Sep 19 2002 - 08:51:47 PDT)
  • Re: Linux Slapper Worm and Linksys Mike Lewinski (Thu Sep 19 2002 - 09:30:29 PDT)
    • Re: Linux Slapper Worm and Linksys Pavel Lozhkin (Fri Sep 20 2002 - 04:35:22 PDT)
• [Full-Disclosure] Fwd: Save a bug, jail a blackhat gobblesat_private (Thu Sep 19 2002 - 10:29:19 PDT)
  • [Full-Disclosure] Fwd: Save a bug, jail a blackhat gobblesat_private (Thu Sep 19 2002 - 12:47:32 PDT)
• [Full-Disclosure] Fwd: iM 313373 gIvE mE wArEz d00d! gobblesat_private (Thu Sep 19 2002 - 13:22:22 PDT)
  • [Full-Disclosure] Fwd: iM 313373 gIvE mE wArEz d00d! gobblesat_private (Thu Sep 19 2002 - 13:35:58 PDT)
  • [Full-Disclosure] Fwd: iM 313373 gIvE mE wArEz d00d! gobblesat_private (Thu Sep 19 2002 - 13:41:46 PDT)
• new IIS worm? (rcp lsass.exe) Christian Mock (Sat Sep 21 2002 - 11:17:48 PDT)
  • Re: new IIS worm? (rcp lsass.exe) Björn Wallentinus (Sun Sep 22 2002 - 16:18:14 PDT)
  • Re: new IIS worm? (rcp lsass.exe) Michael Thompson (Sun Sep 22 2002 - 17:25:30 PDT)
    • Re: new IIS worm? (rcp lsass.exe) Nick FitzGerald (Mon Sep 23 2002 - 10:32:25 PDT)
  • Re: new IIS worm? (rcp lsass.exe) Mike Lewinski (Sun Sep 22 2002 - 18:27:29 PDT)
    • Re: new IIS worm? (rcp lsass.exe) Lasse Sundström (Mon Sep 23 2002 - 11:20:24 PDT)
  • Re: new IIS worm? (rcp lsass.exe) Nick FitzGerald (Sun Sep 22 2002 - 17:34:34 PDT)
  • Re: new IIS worm? (rcp lsass.exe) Mike Lewinski (Sun Sep 22 2002 - 23:31:01 PDT)
  • Re: new IIS worm? (rcp lsass.exe) pjat_private (Mon Sep 23 2002 - 03:26:52 PDT)
  • RE: new IIS worm? (rcp lsass.exe) Bellenger, Bruno (Paris) (Mon Sep 23 2002 - 10:50:00 PDT)
    • Slapper worm DoS james (Tue Sep 24 2002 - 08:39:42 PDT)
  • Re: new IIS worm? (rcp lsass.exe) Mike Lewinski (Tue Sep 24 2002 - 08:56:16 PDT)
    • Re: new IIS worm? (rcp lsass.exe) Eloy A. Paris (Tue Sep 24 2002 - 11:54:22 PDT)
  • RE: new IIS worm? (rcp lsass.exe) Mark Challender (Tue Sep 24 2002 - 09:11:57 PDT)
  • Re: new IIS worm? (rcp lsass.exe) zeno (Tue Sep 24 2002 - 11:28:48 PDT)
    • Re: new IIS worm? (rcp lsass.exe) James Williams (Tue Sep 24 2002 - 13:52:03 PDT)
    • RE: new IIS worm? (rcp lsass.exe) Ben Timby (Tue Sep 24 2002 - 16:07:58 PDT)
    • Re: new IIS worm? (rcp lsass.exe) sunzi (Tue Sep 24 2002 - 17:51:24 PDT)
    • Re: new IIS worm? (rcp lsass.exe) Nick FitzGerald (Wed Sep 25 2002 - 01:02:38 PDT)
    • Re: new IIS worm? (rcp lsass.exe) Christoph Puppe (Wed Sep 25 2002 - 02:17:29 PDT)
  • Re: new IIS worm? (rcp lsass.exe) zeno (Tue Sep 24 2002 - 13:48:02 PDT)
  • RE: new IIS worm? (rcp lsass.exe) John Campbell (Tue Sep 24 2002 - 14:08:57 PDT)
  • RE: new IIS worm? (rcp lsass.exe) Dostie, Joe (Tue Sep 24 2002 - 14:28:27 PDT)
  • RE: new IIS worm? (rcp lsass.exe) webbiat_private (Tue Sep 24 2002 - 21:23:30 PDT)
  • RE: new IIS worm? (rcp lsass.exe) John Campbell (Tue Sep 24 2002 - 14:41:28 PDT)
  • Re: new IIS worm? (rcp lsass.exe) zeno (Tue Sep 24 2002 - 14:07:55 PDT)
  • RE: new IIS worm? (rcp lsass.exe) Gaydosh, Adam (Wed Sep 25 2002 - 12:40:03 PDT)
  • RE: new IIS worm? (rcp lsass.exe) Bax.Plemonsat_private (Thu Sep 26 2002 - 05:07:07 PDT)
  • RE: new IIS worm? (rcp lsass.exe) David LeBlanc (Thu Sep 26 2002 - 13:24:09 PDT)
  • RE: new IIS worm? (rcp lsass.exe) Dallas Jordan (Tue Sep 24 2002 - 14:20:19 PDT)
  • Re: new IIS worm? (rcp lsass.exe) Muhammad Faisal Rauf Danka (Thu Sep 26 2002 - 22:38:03 PDT)
• New variants of Slapper worm using UDP ports other than 2002 today -- 1978 and 4156 -- (and they were apparently active yesterday as well) H. Morrow Long (Sun Sep 22 2002 - 13:10:05 PDT)
  • Re: New variants of Slapper worm using UDP ports other than 2002 today -- 1978 and 4156 -- (and they were apparently active yesterday as well) Tom Sands (Mon Sep 23 2002 - 08:22:32 PDT)
• "Worm riders" on 4156? Anton Chuvakin, Ph.D., GCIA (Mon Sep 23 2002 - 15:55:09 PDT)
• slapper worm varient "cinik" James P. Kinney III (Tue Sep 24 2002 - 16:02:01 PDT)
  • Re: slapper worm varient "cinik" Anton A. Chuvakin (Wed Sep 25 2002 - 11:38:30 PDT)
    • Re: slapper worm varient "cinik" Mark (Thu Sep 26 2002 - 08:16:26 PDT)
      • Re: slapper worm varient "cinik" James P. Kinney III (Thu Sep 26 2002 - 08:35:03 PDT)
• New worm? Norbert Bollow (Tue Sep 24 2002 - 15:16:41 PDT)
• Modap Worm Infection and Subsequent Scanning Gordon Chamberlin (Wed Sep 25 2002 - 08:44:36 PDT)
  • Re: Modap Worm Infection and Subsequent Scanning Glenn Forbes Fleming Larratt (Wed Sep 25 2002 - 21:06:19 PDT)
    • Re: Modap Worm Infection and Subsequent Scanning Valdis.Kletnieksat_private (Fri Sep 27 2002 - 06:19:12 PDT)
• Port 11890 Scott Nursten (Thu Sep 26 2002 - 05:19:42 PDT)
• AIM-based worm? Troy Ablan (Thu Sep 26 2002 - 12:51:47 PDT)
  • RE: AIM-based worm? webbiat_private (Fri Sep 27 2002 - 04:16:29 PDT)
  • Re: AIM-based worm? Adam Young (Fri Sep 27 2002 - 04:46:32 PDT)
  • RE: AIM-based worm? Ralph Emery (Fri Sep 27 2002 - 06:36:11 PDT)
  • RE: AIM-based worm? MH Michael Hammer (5304) (Fri Sep 27 2002 - 06:08:56 PDT)
  • Re: AIM-based worm? De Velopment (Fri Sep 27 2002 - 08:53:46 PDT)
    • Re: AIM-based worm? Troy Ablan (Fri Sep 27 2002 - 13:48:47 PDT)
      • Re: AIM-based worm? Midkaemia (Sun Sep 29 2002 - 15:06:32 PDT)
  • RE: AIM-based worm? x x (Fri Sep 27 2002 - 07:14:46 PDT)
    • Re: AIM-based worm? skipperat_private (Sat Sep 28 2002 - 04:10:34 PDT)
  • RE: AIM-based worm? Ron Yount (Fri Sep 27 2002 - 08:22:03 PDT)
• [Full-Disclosure] Buffer Overrun in SmartHTML Interpreter Could Allow Code Executio n (Q324096) Bharadwaj, Maninder (Fri Sep 27 2002 - 06:07:51 PDT)
• VS: slapper worm varient "cinik" Toni Heinonen (Fri Sep 27 2002 - 06:25:36 PDT)
• Snake in the grass sfat_private (Sat Sep 28 2002 - 00:14:32 PDT)
  • RE: Snake in the grass list subscriber (Sun Sep 29 2002 - 01:43:43 PDT)
• RE: E-Card Remote Code Execution Scam Jonathan A. Zdziarski (Sat Sep 28 2002 - 02:28:48 PDT)
  • RE: E-Card Remote Code Execution Scam Jason Robertson (Sat Sep 28 2002 - 18:12:00 PDT)
• E-Card Remote Code Execution Scam Jonathan A. Zdziarski (Sat Sep 28 2002 - 02:25:12 PDT)
  • Re: E-Card Remote Code Execution Scam Jeff Jirsa (Sat Sep 28 2002 - 18:10:33 PDT)
  • RE: E-Card Remote Code Execution Scam Fulton Preston (Sat Sep 28 2002 - 18:13:11 PDT)
    • RE: E-Card Remote Code Execution Scam Jonathan A. Zdziarski (Sat Sep 28 2002 - 19:27:36 PDT)
      • RE: E-Card Remote Code Execution Scam Fulton Preston (Sat Sep 28 2002 - 19:54:08 PDT)
  • RE: E-Card Remote Code Execution Scam H.Karrenbeldat_private (Sun Sep 29 2002 - 06:31:52 PDT)
  • Re: E-Card Remote Code Execution Scam Axel Pettinger (Sun Sep 29 2002 - 02:16:58 PDT)
• Unusual volume: UDP:137 probes John Sage (Sun Sep 29 2002 - 16:02:04 PDT)
  • RE: Unusual volume: UDP:137 probes Mark Forsyth (Mon Sep 30 2002 - 01:33:07 PDT)
    • Re: Unusual volume: UDP:137 probes Emeric Miszti (Mon Sep 30 2002 - 08:54:59 PDT)
      • Re: Unusual volume: UDP:137 probes Christopher Albert (Mon Sep 30 2002 - 13:45:39 PDT)
    • RE: Unusual volume: UDP:137 probes Brett Procter (Mon Sep 30 2002 - 05:05:28 PDT)
      • RE: Unusual volume: UDP:137 probes Bamm (Robert) Visscher (Mon Sep 30 2002 - 13:45:19 PDT)
    • RE: Unusual volume: UDP:137 probes fingers (Mon Sep 30 2002 - 08:32:23 PDT)
    • Re: Unusual volume: UDP:137 probes Scott McGee (Mon Sep 30 2002 - 09:43:15 PDT)
      • RE: Unusual volume: UDP:137 probes Joseph R. Gruber (Mon Sep 30 2002 - 14:37:47 PDT)
    • Re: Unusual volume: UDP:137 probes Scott McGee (Mon Sep 30 2002 - 11:27:02 PDT)
  • RE: Unusual volume: UDP:137 probes Mark Forsyth (Mon Sep 30 2002 - 06:09:38 PDT)
• Increase in SSH scans Robert Rich (Mon Sep 09 2002 - 03:14:18 PDT)
  • WinXP integrated packet filtering Maxime Ducharme (Mon Sep 30 2002 - 07:36:14 PDT)
    • Re: WinXP integrated packet filtering Maxime Ducharme (Mon Sep 30 2002 - 14:18:29 PDT)
  • RE: Increase in SSH scans Keith T. Morgan (Mon Sep 30 2002 - 07:29:51 PDT)
• RE: Port 608/trojan/spam Garramone, Michael (CCI-Las Vegas) (Sat Sep 28 2002 - 17:37:38 PDT)
• FW: DNS servers outbound connections. Philip Bartholomew (Mon Sep 30 2002 - 04:40:27 PDT)
• IIS Using Port 1843 Matt Barton (Mon Sep 30 2002 - 14:54:07 PDT)
• Strange random-number.file entries in Apache logs Sam Campbell (Mon Sep 30 2002 - 07:05:08 PDT)

Last message date: Mon Sep 30 2002 - 19:15:35 PDT
Archived on: Mon Sep 30 2002 - 19:15:35 PDT

This archive was generated by hypermail 2b30 : Mon Sep 30 2002 - 19:15:35 PDT