SecurityFocus Incidents
By Author

191 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

Starting: 05/01/02
Ending: 05/31/02

Admiraal, J.E. (CDIV)
- RE: strange account in Win2k (05/28/02)
AJ Decker
- RE: strange account in Win2k (05/28/02)
Allen Smith
- Re: Strange scans (05/26/02)
Alphonse MacDonald
- Re: Windows Systems Defaced (05/14/02)
Andreas Wiesmann
- strange .ch scan by 195.141.86.145 (05/25/02)
Bamm (Robert) Visscher
- RE: odd scans? (05/28/02)
- Re: odd scans? (05/24/02)
batz
- Re: Security contacts for cnn,time.com,usatoday,and boston globe needed (05/28/02)
Benjamin Tomhave
- explanation of port 1433 scans... (05/16/02)
- RE: Strange TCP headers (05/11/02)
- RE: Publishing Nimda Logs (05/08/02)
Bill Royds
- RE: Strange scans (05/27/02)
Blake Frantz
- Worms and CScript/WScript (05/21/02)
- RE: Strange scan on 1433 (05/21/02)
- FW: exploited win2k box, not quite sure how: (05/20/02)
Brenna Primrose
- RE: Windows Systems Defaced (05/03/02)
Brett Glass
- Re: odd scans? (05/29/02)
Brian McWilliams
- Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com (05/09/02)
Bukys, Liudvikas
- Windows Systems Defaced/destroyed, plus Port 3389 attacks (05/13/02)
Butler, Brandon
- RE: exploited win2k box, not quite sure how: (05/20/02)
Chip McClure
- Re: Got 'em. (was "Re: gw.ocg-corp.com") (05/14/02)
- Re: gw.ocg-corp.com (05/13/02)
Chris Wilson
- Re: [unisog] Windows Systems Defaced/destroyed, plus Port 3389 attacks (05/13/02)
Christian Vogel
- Re: continues SCAN Proxy attempt (05/24/02)
- Re: gw.ocg-corp.com (05/14/02)
Cody Hatch
- Re: 'rooted' NT/2K boxen? (05/03/02)
- Re: 'rooted' NT/2K boxen? (05/02/02)
Crist J. Clark
- Application Scanning 1033/tcp? (05/31/02)
Dan Cuthbert
- Re: strange account in Win2k (05/28/02)
Daniel Hay
- Re: Compromised Win2000 machine. - Follow UP (05/30/02)
- Re: Compromised Win2000 machine. (05/29/02)
- Compromised Win2000 machine. (05/28/02)
Dano
- RE: Strange TCP headers (05/11/02)
Darrin Powell
- Increased connects to Port 1433 (05/21/02)
Dave Dittrich
- World-wide distributed DoS and "warez" bot networks (fwd) (05/03/02)
David Ashwood
- RE: Windows Systems Defaced (05/03/02)
David LaPorte
- RE: Strange scan on 1433 (05/21/02)
De Velopment
- Re: Publishing Nimda Logs == BAD IDEA (05/09/02)
Deus, Attonbitus
- RE: Strange scan on 1433 (05/21/02)
- RE: Windows Systems Defaced/destroyed, plus Port 3389 attacks (05/17/02)
- Publishing Nimda Logs - Summary (05/08/02)
- Publishing Nimda Logs (05/07/02)
Dias Sgt Kristin F
- RE: Strange scan on 1433 (05/21/02)
dlaumann@suntzu.net
- RE: strange account in Win2k (05/29/02)
- RE: info (05/06/02)
Don Weber
- RE: Compromised Win2000 machine. (05/29/02)
dr john halewood
- Re: Strange scan on 1433 (05/21/02)
Dubber, Drew B
- RE: Worms and CScript/WScript (05/28/02)
Dug Song
- Re: Nimda Infections and code red resurgence (05/08/02)
- Publishing Nimda Logs == BAD IDEA (05/08/02)
E
- Re: Publishing Nimda Logs (05/08/02)
Edwards, David (JTS)
- Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com - Wrap up (05/09/02)
- RE: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com (05/08/02)
- RE: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com (05/08/02)
- netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com (05/07/02)
George Bakos
- Re: Strange scan on 1433 (05/21/02)
ghb the irrepressible
- Re: Compromised Win2000 machine. (05/29/02)
Glenn Forbes Fleming Larratt
- Re: Publishing Nimda Logs (05/08/02)
Gregory Kane
- Unusual Message log contents (05/06/02)
H C
- Re: Re[2]: Compromised Win2000 machine. (05/31/02)
- Re: Compromised Win2000 machine. (05/30/02)
- Re: Compromised Win2000 machine. (05/29/02)
- RE: Compromised Win2000 machine. (05/29/02)
- parsing output from tools (05/29/02)
- Re: Compromised Win2000 machine. (05/28/02)
- Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com (05/07/02)
- Re: 'rooted' NT/2K boxen? (05/03/02)
- RE: Windows Systems Defaced (05/03/02)
- Re: 'rooted' NT/2K boxen? (05/03/02)
- Re: 'rooted' NT/2K boxen? (05/02/02)
- 'rooted' NT/2K boxen? (05/02/02)
Head of the Councel of Wizards
- RE: info (05/07/02)
Hugo van der Kooij
- continues SCAN Proxy attempt (05/24/02)
- Re: Got 'em. (was "Re: gw.ocg-corp.com") (05/14/02)
- Re: Publishing Nimda Logs (05/08/02)
James
- RE: Strange scan on 1433 (05/21/02)
Jason Robertson
- Re: Strange scan on 1433 (05/21/02)
- Re: A friend's cable modem Linux machine just got compromised (05/01/02)
Javier Sanchez (Information Systems)
- SQLSnake email account shutdown? (05/28/02)
Jensenne Roculan
- Dead Thread - Publishing Nimda Logs (05/09/02)
Jim Harrison (SPG)
- RE: Publishing Nimda Logs - Summary (05/08/02)
jlewis@lewis.org
- Re: Publishing Nimda Logs (05/08/02)
Joe Blatz
- GET /proxy-test.php (05/26/02)
Joe T.
- RE: info (05/04/02)
- Re: info (05/04/02)
- info (05/04/02)
Johannes B. Ullrich
- RE: Windows Systems Defaced (05/03/02)
Johannes Ullrich
- Re: Strange scan on 1433 (05/21/02)
John Campbell
- RE: Decrease in 1433 Scans? (05/23/02)
John Jasen
- Re: exploited win2k box, not quite sure how: (05/20/02)
- exploited win2k box, not quite sure how: (05/18/02)
John Kristoff
- Re: Publishing Nimda Logs (05/08/02)
Jordan K Wiens
- Re: gw.ocg-corp.com (05/13/02)
Joris De Donder
- Re[2]: Compromised Win2000 machine. (05/31/02)
Jose Nazario
- Re: info (05/06/02)
Justin Shore
- Re: Publishing Nimda Logs (05/08/02)
Keith T. Morgan
- RE: Increased connects to Port 1433 (05/21/02)
Ken Hodges
- Strange "shotgun" scan (05/09/02)
Ken Pfeil
- RE: Strange scan on 1433 (05/21/02)
Kevin
- Re: strange account in Win2k (05/28/02)
Keyser Soze
- Re: GET /proxy-test.php (05/28/02)
Kit
- RE: strange account in Win2k (05/29/02)
- RE: Compromised Win2000 machine. (05/28/02)
KJK::Hyperion
- Re: 'rooted' NT/2K boxen? (05/04/02)
Kyle R. Hofmann
- Re: odd scans? (05/24/02)
Lance Spitzner
- Reverse Challenge - Binary released (05/06/02)
- Honeynet Project -> The Reverse Challenge (05/01/02)
Larry Thompson
- RE: Strange "shotgun" scan (05/09/02)
Larry.Leibrock@bus.utexas.edu
- Comprise Attack Microsoft SQL servers - new Internet worm (05/21/02)
Lee_Fisher@NAI.com
- RE: Increased connects to Port 1433 (05/21/02)
List-Collector
- RE: strange .ch scan by 195.141.86.145 (05/27/02)
Liston, Kevin C, SOLCM
- RE: New Stacheldraht? (05/29/02)
Loki
- RE: info (05/04/02)
loon
- Re: Decrease in 1433 Scans? (05/23/02)
Mally Mclane
- Re: Publishing Nimda Logs (05/08/02)
- Re: Publishing Nimda Logs (05/08/02)
Mark Fagan
- RE: strange account in Win2k (05/29/02)
- strange account in Win2k (05/28/02)
Mark Newby
- Re: Compromised Win2000 machine. (05/29/02)
- Re: Unusual Message log contents (05/08/02)
- Tuxkit (Optic Kit?) -cracked (/dev/tux) (05/02/02)
Matt Barton
- Decrease in 1433 Scans? (05/23/02)
Matt Zimmerman
- Re: odd scans? (05/24/02)
- Re: Strange TCP headers (05/10/02)
- Re: ssh scans using username 'test' or 'oracle'? (05/02/02)
- ssh scans using username 'test' or 'oracle'? (05/02/02)
Matt.Carpenter@alticor.com
- Re: explanation of port 1433 scans... (05/16/02)
Maxime Ducharme
- Re: strange account in Win2k (05/28/02)
McCammon, Keith
- RE: Security contacts for cnn,time.com,usatoday,and boston globe needed (05/28/02)
- RE: exploited win2k box, not quite sure how: (05/20/02)
- RE: Strange "shotgun" scan (05/09/02)
Michael Wright
- RE: Worms and CScript/WScript (05/22/02)
Michel Arboi
- Re: Strange TCP headers (05/11/02)
- Re: info (05/04/02)
Mike Lewinski
- Re: exploited win2k box, not quite sure how: (05/20/02)
MIS Department
- Re: Decrease in 1433 Scans? (05/23/02)
netscience@hushmail.com
- gw.ocg-corp.com (05/13/02)
Nick FitzGerald
- RE: Worms and CScript/WScript (05/27/02)
- RE: Worms and CScript/WScript (05/22/02)
- Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com (05/08/02)
Pascal C. Kocher
- AW: strange .ch scan by 195.141.86.145 (05/28/02)
Patrick Andry
- Re: Compromised Win2000 machine. (05/29/02)
Pavel Lozhkin
- Strange scan on 1433 (05/21/02)
pbsarnac@ThoughtWorks.com
- RE: Strange TCP headers (05/10/02)
- Strange TCP headers (05/10/02)
Pour, Matthew
- RE: Increased connects to Port 1433 (05/21/02)
Quarantine
- RE: Strange scan on 1433 (05/21/02)
Rainer Duffner
- Re: AW: strange .ch scan by 195.141.86.145 (05/30/02)
- Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com (05/08/02)
- Re: Publishing Nimda Logs (05/08/02)
- Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com (05/07/02)
Richard H. Cotterell
- RE: Worms and CScript/WScript (05/28/02)
- RE: Worms and CScript/WScript (05/26/02)
Richard.Smith@predictive.com
- Re: Publishing Nimda Logs (05/08/02)
Rick Darsey
- RE: strange account in Win2k (05/28/02)
Robert Buckley
- New Stacheldraht? (05/29/02)
- RE: Strange TCP headers (05/10/02)
- RE: Strange TCP headers (05/10/02)
Ron Yount
- RE: exploited win2k box, not quite sure how: (05/20/02)
rulerpen
- Re: exploited win2k box, not quite sure how: (05/20/02)
Russell Fulton
- Re: continues SCAN Proxy attempt (05/27/02)
- New nimda variant? (05/01/02)
- New nimda variant? (05/01/02)
Ryan Russell
- Re: Worms and CScript/WScript (05/22/02)
Salisko, Rick
- RE: Decrease in 1433 Scans? (05/23/02)
Sam Trenholme
- Re: A friend's cable modem Linux machine just got compromised (05/01/02)
- A friend's cable modem Linux machine just got compromised (05/01/02)
Scott Fendley
- Re: exploited win2k box, not quite sure how: (05/20/02)
Scott, Michael R.
- odd scans? (05/24/02)
Skinner, Kit
- RE: Windows Systems Defaced/destroyed, plus Port 3389 attacks (05/17/02)
Smith, Donald
- RE: odd scans? (05/26/02)
Stephen Samuel
- Nimda type attacks with broken GETs (05/14/02)
Stephen W. Thompson
- Re: Windows Systems Defaced (05/03/02)
Steve Zenone
- RE: Publishing Nimda Logs (05/08/02)
- RE: Windows Systems Defaced (05/03/02)
- Windows Systems Defaced (05/02/02)
Thomas Frerichs
- Re: Publishing Nimda Logs (05/08/02)
Tom Pope
- RE: Increased connects to Port 1433 (05/21/02)
Tracey Losco
- Re: Increased connects to Port 1433 (05/21/02)
Travis Pugh
- Re: Increased connects to Port 1433 (05/21/02)
verbal@mrverbal.com
- RE: Worms and CScript/WScript (05/22/02)
vogt@hansenet.com
- AW: Publishing Nimda Logs (05/08/02)
W.G. Iyer
- Re: info (05/04/02)
Will Aoki
- Re: gw.ocg-corp.com (05/14/02)
- Re: ssh scans using username 'test' or 'oracle'? (05/02/02)
William N. Zanatta
- Re: 'rooted' NT/2K boxen? (05/02/02)
- Re: A friend's cable modem Linux machine just got compromised (05/02/02)
wirepair
- Interesting scan to ports 1999-2000 (05/23/02)
- 1999-2000 oops (05/23/02)
zeno
- Security contacts for cnn,time.com,usatoday,and boston globe needed (05/28/02)
- Re: 'rooted' NT/2K boxen? (05/02/02)

Last message date: 05/31/02
Archived on: 05/31/02 CEST

191 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

SecurityFocus IncidentsBy Author

SecurityFocus Incidents
By Author