Security Incidents: by date

238 messages starting May 29 00 and ending Jun 30 00
Date index | Thread index | Author index


Monday, 29 May

POP3 (110) Port Scans, New Exploit? Crist J. Clark
Re: Attacks on port 25 Jon Williams
Fwd: Trojan Horse Probe Report ALW14534 () AOL COM

Tuesday, 30 May

Re: Microsoft version.binding us now? Fernando Cardoso
Re: invalid icmp in linux? Max Gribov
Re: Microsoft version.binding us now? Klaus Steding-Jessen
Increase in activity from China Bill Pennington
Re: Attacks on port 25 Rhino Bond
Re: Microsoft version.binding us now? Thijs Eilander
spoofed syn flooding Brad Spengler
Looking for a good paper on SWATCH James Kelty
Re: Looking for a good paper on SWATCH James Kelty
Re: afs3 exploit?? Cold Fire

Wednesday, 31 May

Re: Increase in activity from China bonk () WEBCHAT CHATSYSTEMS COM

Thursday, 01 June

Re: afs3 exploit?? Charles Clancy
Re: Microsoft version.binding us now? Bill Marquette
linuxconf scans from KR Infrastructure Dept.
Re: Strange Happenings @Home Mark Tinberg
(no subject) Henri J. Schlereth
Re: POP3 (110) Port Scans, New Exploit? Chip Mefford
Re: Increase in activity from China Russell Fulton
Re: Strange Happenings @Home Chris Wilson
Re: Microsoft version.binding us now? Bill Marquette
Re: Strange Happenings @Home Greg A. Woods

Friday, 02 June

Re: afs3 exploit?? Sebastian Ip
TCP Scans to port 21656 Federico Grau
Re: Microsoft version.binding us now? Richard Bejtlich

Saturday, 03 June

Re: Microsoft version.binding us now? Tom Kee
Scan of the Week continued Lance Spitzner

Monday, 05 June

very strange scan patterns Joe H
port 65535 and protocol 171 !? Jürgen Bauer
Re: very strange scan patterns John Kristoff
Sub-7 Khan, Mansoor
update on scans of tcp 12345 AUSCERT#36349 Russell Fulton
What is this guy doing? Josh Burroughs

Wednesday, 07 June

Re: Port 109 Scans Fredrik Ostergren
Port-scans from visited web-sites? Peter Bates
Protocol 54 M J
Re: very strange scan patterns Ejovi Nuwere
hacked @home with logs and info.. nmorgowicz () RALCOIND COM

Thursday, 08 June

Re: What is this guy doing? Sebastien Reister
Re: update on scans of tcp 12345 AUSCERT#36349 Rune Kristian Viken
Re: Sub-7 James Stevenson
FW: Sub-7 Abel Wisman
AW: What is this guy doing? Peter Roth
Port 6347 Dante Mercurio
Re: Sub-7 Matthew F. Caldwell
Re: Port-scans from visited web-sites? Joe McAlerney
Re: update on scans of tcp 12345 AUSCERT#36349 Shaw Terwilliger
How to read port scans Phil Curran
Re: hacked @home with logs and info.. Shadow Boxer
unknown trojan (attached) Jeremy L. Gaddis
Re: Sub-7 PARKIN, MICHAEL (PBI)
Re: How to read port scans Jose Nazario
Re: What is this guy doing? Greg A. Woods
hacked @home **update** Nick Morgowicz
Re: How to read port scans Renato Murilo Langona
Re: Port-scans from visited web-sites? Greg A. Woods
Re: How to read port scans Bryan Scaringe
Re: update on scans of tcp 12345 AUSCERT#36349 Bryan Scaringe
Re: Port 6347 Paris, Bill
Re: Port 6347 Brian Macke
Re: Sub-7 nine
UDP Port 2078 Dundo
Re: How to read port scans Mark Kovach
Re: update on scans of tcp 12345 AUSCERT#36349 orestes () DORIAN 2Y NET
Re: How to read port scans spaceork
Anyone know more about this? Brett Glass
Re: update on scans of tcp 12345 AUSCERT#36349 Keith Owens
FW-1 log analysis tool Chew Poh Chang (CAPL)
New KAK worm distribution out Roy Wilson

Friday, 09 June

Strange scans - inquisitive question Paul Rogers
/dev/^Madereet Sean Marin
Re: FW: Sub-7 Brooke, O'Neil
Re: hacked @home with logs and info.. Randy Mclean
Re: Port 6347 Henry F. Marquardt

Saturday, 10 June

Re: update on scans of tcp 12345 AUSCERT#36349 Luke Dudney
Re: FW-1 log analysis tool Lance Spitzner
Re: Port-scans from visited web-sites? Erich Meier
Re: Anyone know more about this? Brett Glass
** New DDoS / Trojan ** nine
Re: INCIDENTS Digest - 8 Jun 2000 to 9 Jun 2000 (#2000-109) Martin H Hoz-Salvador
Re: unknown trojan (attached) Brandon Kittler
Re: unknown trojan (attached) Jeremy L. Gaddis

Sunday, 11 June

unknown trojan (update) Jeremy L. Gaddis
Re: FW-1 log analysis tool Kenneth Ish
Account probing for spam relay. Lance Spitzner
tcp ping scan to broadcast addresses Russell Fulton
scan log Max Gribov
Re: Strange scans - inquisitive question Valdis Kletnieks
port 12345 scanning Luke Dudney

Monday, 12 June

Re: Account probing for spam relay. Fernando Cardoso
Re: Strange scans - inquisitive question Paul Rogers
Re: Account probing for spam relay. Paul L Schmehl
Re: ** New DDoS / Trojan ** David Endler
Re: ** New DDoS / Trojan ** Pierre Vandevenne
Re: unknown trojan (attached) Doug Kahler
Re: ** New DDoS / Trojan ** nine
Re: unknown trojan (attached) (fwd) David Brumley
an attack that shut off my dsl Max Gribov
Re: Account probing for spam relay. Kurt Weiske
Re: scan log Russell Fulton
Re: scan log Jason Witty
Re: Anyone know more about this? Matt Jacobi

Tuesday, 13 June

Re: unknown trojan (attached) Nick FitzGerald
Re: scan log Paul Rogers
[ISN] Video Trojan hoax scares up publicity for security firm Kunz, Peter
Biggest Incident This Week: Missing Hard Drives at Los Alamos Dante Mercurio
.:: 14x :: Information :: New DDoS/Trojan ::. Erik Tayler

Wednesday, 14 June

IRC connect through apache ???? arhuman () HOTMAIL COM
Re: Biggest Incident This Week: Missing Hard Drives at Los Alamos Joe Dark
Re: Biggest Incident This Week: Missing Hard Drives at Los Alamos Benjamin Setnick
Re: scan log Ex Machina
Re: an attack that shut off my dsl Eduardo Cruz
Re: Biggest Incident This Week: Missing Hard Drives at Los Alamos Kee Hinckley
Which DoS ? Eric LeBlanc
Re: scan log Valdis Kletnieks
foreign HTTP requests Vladimir Ivaschenko

Thursday, 15 June

Re: IRC connect through apache ???? Eric Vyncke
R: New DoS attack Raistlin
Re: Biggest Incident This Week: Missing Hard Drives at Los Alamos Slam
Re: .:: 14x :: Information :: New DDoS/Trojan ::. Lic. Rodolfo Gonzalez Gonzalez
Re: an attack that shut off my dsl Max Gribov
Re: foreign HTTP requests Daniel Dočekal
Re: scan log Russell Fulton
Re: Biggest Incident This Week: Missing Hard Drives at Los Alamos Eric the Fruitbat
(no subject) Anonymous
Which DoS ? [Updated] Eric LeBlanc

Friday, 16 June

Re: foreign HTTP requests Pavel Kankovsky
Re: foreign HTTP requests Nicolas GREGOIRE
Re: Biggest Incident This Week: Missing Hard Drives at Los Alamos Daniel K. Boyd
Re: Biggest Incident This Week: Missing Hard Drives at Los Alamos Eric Johnson
Re: Biggest Incident This Week: Missing Hard Drives at Los Alamos Pierre Vandevenne
Re: Biggest Incident This Week: Missing Hard Drives at Los Alamos Ejovi Nuwere
Re: foreign HTTP requests Daniel Docekal
Re: Help for writing a kernel module. mgribov () KPLAB COM
Re: Which DoS ? [Updated] Patrick Oonk

Saturday, 17 June

"Quova.net" (Exodus downstream customer) Missouri FreeNet Administration
was: Portscan detected from your machine Jens Hektor
Re: Portscan detected from your machine Koh Kok Yung

Sunday, 18 June

t0rn, backdoors and a busy cracker. Russ Spooner
FTP Access Probe? Frank Knobbe.

Monday, 19 June

.:: 14x :: Omega Statistics ::. Erik Tayler

Tuesday, 20 June

Re: "Quova.net" (Exodus downstream customer) Rune Kristian Viken
Re: foreign HTTP requests Nicolas GREGOIRE
Re: foreign HTTP requests Sevo Stille
Re: foreign HTTP requests Daniel Dočekal
Re: Quova.net M J
Re: "Quova.net" (Exodus downstream customer) Nicholas de Jong
Re: Quova.net Fabio Bastiglia Oliva
Re: foreign HTTP requests Bjorn Djupvik
Re: Quova.net Valdis Kletnieks
Re: Which DoS ? [Updated] Pluto
Re: Quova.net Brett Glass
Re: Quova.net Hughes, Tim

Wednesday, 21 June

Hacked by the script kiddie - an ordinary netadmin's day Jakub Urbanec
Netbus portscan ( port 12345) lmonin () METACONCEPT COM
scanned - strange! Sir Scriptzalot
Addendum: scanned - strange! Sir Scriptzalot
(forw) Jennifer Granick Audio Interview now online Elias Levy
Connections to port 635 ?? Gunther Stammwitz
Nike Site taken over F_SecurityList Jo
Re: Which DoS ? [Updated] Ian Eure

Thursday, 22 June

Re: foreign HTTP requests Nicolas GREGOIRE
8.2.2-P5 stops answering queries? Daniel Ramirez
Re: Netbus portscan ( port 12345) James T. Perry
Port 7070? PARKIN, MICHAEL (PBI)
Re: Microsoft version.binding us now? Richard Bejtlich
Re: Nike Site taken over Steve
Re: Nike Site taken over Ex Machina
Re: Port 7070? Ryan Russell
Re: "Quova.net" (Exodus downstream customer) Missouri FreeNet Administration
Re: Port 7070? Bill Royds
Re: foreign HTTP requests Vladimir Ivaschenko

Friday, 23 June

Re: 8.2.2-P5 stops answering queries? Kovacs Andrei
Connections to port 635 ?? Klaus Moeller
SV: Hacked by the script kiddie - an ordinary netadmin's day Kim C. Saxvik
Re: foreign HTTP requests Bjorn Djupvik
Re: Connections to port 635 ?? Bill
Re: Nike Site taken over x-empt
stranger ftp kill Max Gribov
Re: Connections to port 635 ?? Ben Laws
Re: Port 7070? Robert Graham
Re: Connections to port 635 ?? Robert Graham
Re: Microsoft version.binding us now? Oliver Friedrichs
Re: stranger ftp kill frank () STUDENT2 RUG AC BE
Re: Nike Site taken over Joel de la Garza
Re: 8.2.2-P5 stops answering queries? jose
Re: "Quova.net" (Exodus downstream customer) Cold Fire

Saturday, 24 June

[OFFTOPIC] Re: 8.2.2-P5 stops answering queries? David Luyer
Re: Nike Site taken over Aviram Jenik
Re: Microsoft version.binding us now? Bill Marquette

Sunday, 25 June

Interesting research paper Alfred Huger
port 1433? Sir Scriptzalot

Monday, 26 June

Re: stranger ftp kill jose
Port 1433 Edwin Concepcion
Re: Nike Site taken over Valdis Kletnieks
Re: port 1433? JD Conley
DOS attack Bogdan Catalin Donici
funky syslog entry klug
Re: stranger ftp kill Ralf G. R. Bergs

Tuesday, 27 June

Re: port 1433? Jason Witty
Unknown traffic Paul Hancock
Permissions Derick Schuetz
Probes for MySQL under Linux? Ralf G. R. Bergs
Re: Nike Site taken over Ballard, James
Re: funky syslog entry Valdis Kletnieks
Re: Permissions Valdis Kletnieks
Re: stranger ftp kill Oliver Friedrichs
Re: Unknown traffic Joe McAlerney
Re: Permissions Jon Lewis
Re: Unknown traffic Osvaldo Janeri Filho
Re: Probes for MySQL under Linux? Tabor J. Wells
Re: Microsoft version.binding us now? John Hall
Re: funky syslog entry Jens Hektor

Wednesday, 28 June

Port scan (106 and 389) Chris Laycock
Re: funky syslog entry Erich Meier
Re: Probes for MySQL under Linux? Al Huger - Mail Account
Re: Unknown traffic desmond irvine
Re: funky syslog entry Sean Michael Whipkey
wuftp exploit Toby Miller
blind forwards Keith McCammon
Compromise and Bind Replacement Scott Brown
Re: wuftp exploit Daniel Jacobowitz
Re: Microsoft version.binding us now? Rune Kristian Viken
Re: Port scan (106 and 389) Fabio Pietrosanti

Thursday, 29 June

Re: funky syslog entry UnixGeek
Re: funky syslog entry Chris West
Was I exploited? Narins, Joshua
Re: funky syslog entry Brian Pontz
Re: blind forwards Laura Taylor
Re: Was I exploited? Russ Spooner
Re: blind forwards Ex Machina
FTP scans Ejovi Nuwere
Re: blind forwards Brock Norvell
Re: blind forwards John Hall

Friday, 30 June

Re: blind forwards David Pick
Re: Was I exploited? Narins, Joshua