SecurityFocus Incidents
By Author

186 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

---

Starting: 02/02/03
Ending: 02/27/03

• Alberto Cozer
  • Re: Web Defacement (02/17/03)
• Alexander Reelsen
  • webserver probes for php detection (02/13/03)
• Alfred Huger
  • Summary of the responses (4 line ad) (02/13/03)
  • The 4 line ad at the bottom of this post.. (02/13/03)
• Alif The Terrible
  • Re: FW: Packets from 255.255.255.255(80) (was: Packet from port 80 wi th spoofed microsoft.com ip) (02/06/03)
• Anders Reed Mohn
  • RE: ALEVRIUS! (02/11/03)
  • RE: ALEVRIUS! (02/07/03)
• Anders Thulin
  • Re: Weird Profile in Documents and Settings (02/21/03)
  • Re: ICMP Destination Unreachable, Administratively Prohibited (02/14/03)
• Andy Bastien
  • Re: email address probes (02/07/03)
  • email address probes (02/05/03)
• Anthony Kim
  • Re: ICMP Destination Unreachable, Administratively Prohibited (02/14/03)
• Austin Ehlers
  • RE: Weird Profile in Documents and Settings (02/22/03)
• Axel Beckert - ecos gmbh
  • Re: email address probes (02/06/03)
• Baklarz, Ron
  • RE: Increased Kuang2 activity (02/10/03)
• bob
  • Re: ICQ problem. (02/22/03)
• Bojan Zdrnja
  • Re: Weird Windows logon attempts (02/24/03)
• Boyan Krosnov
  • RE: FTP/Port 1038 (02/04/03)
• Brad Arlt
  • Re: email address probes (02/07/03)
  • Re: email address probes (02/05/03)
• Brad Griffin
  • RE: www.nopop.net (02/17/03)
• Brenna Primrose
  • RE: Suspicious file on Desktop (02/10/03)
• Carmen Tache
  • RE: Weird apache logs (02/26/03)
• Chris Brenton
  • Re: ICMP Destination Unreachable, Administratively Prohibited (02/14/03)
• Christian Vogel
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (02/04/03)
• Christopher Hummert
  • RE: Weird Profile in Documents and Settings (02/22/03)
• Christopher Lyon
  • S4T4N1C Web Defacement (02/13/03)
• Chuck Swiger
  • Re: logfiles of openssl-0.9.6e + GET_CLIENT_HELLO exploit... (02/12/03)
  • logfiles of openssl-0.9.6e + GET_CLIENT_HELLO exploit... (02/11/03)
• D.C. van Moolenbroek
  • Re: More /sumthin (02/27/03)
• Dan Hanson
  • Incident Focus Area Article Announcement (02/26/03)
  • Dead thread -- Distributed spam-based DoS in progress (02/20/03)
  • Incidents list administrivia and introductions... (02/16/03)
• Dan Harpold
  • RE: Web server crashed, now is trying to contact an IP by port 80 every morning. (02/25/03)
  • Web server crashed, now is trying to contact an IP by port 80 every morning. (02/24/03)
• Dan Perez
  • RE: S4T4N1C Web Defacement (02/13/03)
• Dave Aitel
  • Re: Scans on TCP port 135 (02/21/03)
• Dave Hart
  • RE: Distributed spam-based DoS in progress (02/19/03)
  • RE: Distributed spam-based DoS in progress (02/18/03)
• Dave Laird
  • Re: email address probes (02/06/03)
  • Fwd: Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (01/31/03)
• davec@skooter.net
  • RE: Increased Kuang2 activity (02/10/03)
• David Gillett
  • RE: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (01/31/03)
• David Hodges
  • Re: ftp server compromised (02/13/03)
• Denis Dimick
  • RE: ftp server compromised (02/13/03)
• Eric Greenberg
  • Correction: www.ethereal.com not www.ethereal.org RE: Suspicious file on Desktop (02/10/03)
  • RE: Suspicious file on Desktop (02/10/03)
• Fitzgerald, John
  • RE: Packets from 255.255.255.255(80) (was: Packet from port 80 wi th spoofed microsoft.com ip) (02/05/03)
  • RE: Packets from 255.255.255.255(80) (was: Packet from port 80 wi th spoofed microsoft.com ip) (02/05/03)
• Frederic Harster
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (02/03/03)
• Geert Kiers
  • ALEVRIUS! (02/06/03)
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (02/02/03)
• Gene Yoo
  • Re: Weird Profile in Documents and Settings (02/21/03)
• Gordon Ewasiuk
  • Questions: LKM, yoyo & rootkits (02/21/03)
• Greg A. Woods
  • Re: email address probes (02/06/03)
• Greg Wiedeman
  • Weird Profile in Documents and Settings (02/20/03)
• Guy Reisenauer
  • Re: Packets from 255.255.255.255(80) (02/02/03)
• H C
  • Re: Weird Windows logon attempts (02/24/03)
  • Re: UDP traffic on Port 52798 (02/13/03)
  • Re: Netbios Name Scans/opaserv worm (02/06/03)
  • Re: DoS Attacks, Detecting the Source, and Service Providers (02/04/03)
• H D Moore
  • Re: /sumthin Revisited (02/01/03)
• Hamid
  • DoS Attacks, Detecting the Source, and Service Providers (02/03/03)
• Harry Hoffman
  • Weird Windows logon attempts (02/24/03)
• HggdH
  • Re: S4T4N1C Web Defacement (02/13/03)
• Holstein, Michael
  • Remote Access Software (Wireless Devices) (02/25/03)
• Hoof Hearted
  • FTP/Port 1038 (02/04/03)
• http-equiv@excite.com
  • Interesting (02/26/03)
• Hugo van der Kooij
  • RE: Distributed spam-based DoS in progress (02/19/03)
  • Re: Distributed spam-based DoS in progress (02/18/03)
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (02/02/03)
• Hulio Cortez
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/31/03)
• Jacco Tunnissen
  • Re: Weird Windows logon attempts (02/24/03)
• james
  • Re: email address probes (02/06/03)
  • Re: DoS Attacks, Detecting the Source, and Service Providers (02/04/03)
• James C Slora Jr
  • RE: Increased Kuang2 activity (02/10/03)
  • RE: Increased Kuang2 activity (02/10/03)
  • RE: ALEVRIUS! (02/07/03)
  • RE: klez variant?? (01/31/03)
• James Kelly
  • RE: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (02/04/03)
• Jasmine
  • Re: Kuang2 strikes again, is it just me? (02/16/03)
• Jason Dixon
  • RE: Increased Kuang2 activity (02/10/03)
  • Increased Kuang2 activity (02/10/03)
• Jeff
  • Re: Kuang2 strikes again, is it just me? (02/16/03)
• Jeff Kell
  • Kuang2 strikes again, is it just me? (02/16/03)
  • Kuang2 on the rise... (02/09/03)
• Jennifer Fountain
  • RE: Increased Kuang2 activity (02/10/03)
• jet
  • Re: logfiles of openssl-0.9.6e + GET_CLIENT_HELLO exploit... (02/12/03)
• Joe Stewart
  • Re: Speedera Ping, was "Packets from 255.255.255.255(80), etc." (02/04/03)
• Joel Tyson
  • RE: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (02/03/03)
  • RE: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (01/31/03)
• Johann Kruse
  • RE: email address probes (02/06/03)
• Johannes Ullrich
  • Re: Kuang2 strikes again, is it just me? (02/16/03)
  • Re: Increased Kuang2 activity (02/10/03)
• John Sage
  • Re: port 17300 probe fingerprint analysis (02/18/03)
• Jon Rublack
  • Re: www.nopop.net (02/18/03)
• Jonathan A. Zdziarski
  • RE: More /sumthin (02/26/03)
• Jordan K Wiens
  • Re: Identity theft scam against eBay users (02/11/03)
• Jyri Hovila
  • Re[2]: Weird Profile in Documents and Settings (02/21/03)
• Kee Hinckley
  • Re: Distributed spam-based DoS in progress (02/19/03)
  • Re: email address probes (02/06/03)
  • ZOMBIES_HTTP_GET (02/01/03)
• Kenneth Wilson
  • UDP traffic on Port 52798 (02/13/03)
• Kevin Patz
  • Scans on TCP port 135 (02/20/03)
  • Re: Kuang2 strikes again, is it just me? (02/18/03)
• Klayton Monroe
  • FTimes 3.2.0 Released (02/21/03)
  • WebJob 1.2.3 Released (02/21/03)
• Kurt Seifried
  • Re: Increased Kuang2 activity (02/11/03)
• kyle@kylelai.com
  • mIRC Trojan Variant - port 445 worm/Trojan (02/16/03)
• Levinson, Karl
  • RE: Web server crashed, now is trying to contact an IP by port 80 every morning. (02/25/03)
• Logan F.D. Greenlee
  • RE: Increased Kuang2 activity (02/10/03)
  • RE: Increased Kuang2 activity (02/10/03)
• lsi
  • Re: Web server crashed, now is trying to contact an IP by port 80 every morning. (02/25/03)
• Lucas Zaichkowsky
  • RE: Weird Profile in Documents and Settings (02/21/03)
• Mark E. Donaldson
  • RE: ftp server compromised (02/13/03)
  • RE: Traffic on UDP 1815 (02/12/03)
• Mary McAllister
  • RE: Weird Windows logon attempts (02/26/03)
• Matthew Breitenstine
  • Re: Identity theft scam against eBay users (02/11/03)
• Meritt James
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (02/05/03)
• Michael LaSalvia
  • RE: Suspicious file on Desktop (02/10/03)
• Michel Angelo da Silva Pereira
  • Re: S4T4N1C Web Defacement (02/13/03)
  • Re: S4T4N1C Web Defacement (02/13/03)
• Ned Fleming
  • Re: email address probes (02/06/03)
• Neil Dickey
  • ICMP Destination Unreachable, Administratively Prohibited (02/13/03)
  • Speedera Ping, was "Packets from 255.255.255.255(80), etc." (02/03/03)
• NESTING, DAVID M (SBCSI)
  • RE: Weird apache logs (02/26/03)
• NetSec Analyst
  • RE: ALEVRIUS! (02/08/03)
• Nicholas Weaver
  • The Spread of the Sapphire/Slammer Worm (02/01/03)
• Nick FitzGerald
  • Re: Identity theft scam against eBay users (02/11/03)
  • Re: klez variant?? (02/01/03)
• Pascal Bouchareine
  • www.nopop.net (02/17/03)
• Pat Wilson
  • Re: Packet from port 80 with spoofed microsoft.com ip (01/31/03)
• Patrick Bryant
  • Re: Identity theft scam against eBay users (02/11/03)
  • Re: Identity theft scam against eBay users (02/11/03)
  • Identity theft scam against eBay users (02/10/03)
• Patrick Fish
  • Suspicious file on Desktop (02/10/03)
• Patrick R. Sweeney
  • Re: Weird Profile in Documents and Settings (02/22/03)
• Paul Dokas
  • Re: Kuang2 strikes again, is it just me? (02/17/03)
• PAUL_TAYLOR@qvc.com
  • Re: Suspicious file on Desktop (02/10/03)
• perrieror@ssginfo.montclair.edu
  • RE: FTP/Port 1038 (02/13/03)
• Philipp Hug
  • Re: More /sumthin (02/26/03)
• psion
  • Re: ftp server compromised (02/13/03)
• Rafael Coninck Teigao
  • Re: ICQ problem. (02/24/03)
• rbelchez@show-net.net
  • ftp server compromised (02/13/03)
• Rev. Kronovohr
  • RE: Increased Kuang2 activity (02/10/03)
• Ricardo Castanho de Oliveira Freitas
  • Re: Web Defacement (02/14/03)
• Richard Rager
  • Re: logfiles of openssl-0.9.6e + GET_CLIENT_HELLO exploit... (02/11/03)
• Rob Shein
  • RE: Weird Profile in Documents and Settings (02/20/03)
  • RE: Kuang2 strikes again, is it just me? (02/16/03)
  • RE: email address probes (02/07/03)
  • RE: ALEVRIUS! (02/07/03)
  • RE: DoS Attacks, Detecting the Source, and Service Providers (02/04/03)
• rocky_scotti@na.dole.com
  • Netbios Name Scans/opaserv worm (02/06/03)
• Rohan Amin
  • Re: Distributed spam-based DoS in progress (02/20/03)
• root@darks
  • Re: logfiles of openssl-0.9.6e + GET_CLIENT_HELLO exploit... (02/12/03)
• Royans Tharakan
  • port 17300 probe fingerprint analysis (02/18/03)
• Russell Fulton
  • Re: Weird Windows logon attempts (02/26/03)
  • Re: ICMP Destination Unreachable, Administratively Prohibited (02/14/03)
• Sahr, Kenneth
  • RE: Traffic on UDP 1815 (02/12/03)
  • Traffic on UDP 1815 (02/11/03)
• Salisko, Rick
  • RE: ALEVRIUS! (02/07/03)
• Scott Harris
  • Re: ano@ano.com ftpd dip.t-dialin.net (02/16/03)
• Security
  • Possible stateful filtering problem? (02/21/03)
• security@imperialdesigns.com
  • Re: S4T4N1C Web Defacement (02/14/03)
• Steve Drees
  • RE: Distributed spam-based DoS in progress (02/19/03)
• Steven Dietz
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (01/31/03)
• Sven Pechler
  • Re: Possible new backdoor: mspx-smss.exe ? (02/26/03)
  • Possible new backdoor: mspx-smss.exe ? (02/21/03)
• Sverre H. Huseby
  • More /sumthin, maybe (02/03/03)
• Terence Runge
  • RE: Weird Windows logon attempts (02/24/03)
• Thiago Madeira de Lima
  • ICQ problem. (02/21/03)
• Thierry Zoller
  • RE: Increased Kuang2 activity (02/11/03)
• Thomas Giudice
  • Re: Identity theft scam against eBay users (02/11/03)
• Tibor Biro
  • Re: ftp server compromised (02/13/03)
• Tim Heagarty
  • RE: Kuang2 strikes again, is it just me? (02/17/03)
• Tom Arseneault
  • RE: Packets from 255.255.255.255(80) (was: Packet from port 80 wi th spoofed microsoft.com ip) (02/03/03)
• Tomasz Papszun
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (01/31/03)
• Transistor Sister
  • Re: Distributed spam-based DoS in progress (02/19/03)
  • Distributed spam-based DoS in progress (02/18/03)
• Travis Read
  • Weird apache logs (02/26/03)
• Trevor Metzger
  • RE: Kuang2 strikes again, is it just me? (02/17/03)
• Valdis.Kletnieks@vt.edu
  • Re: Distributed spam-based DoS in progress (02/18/03)
  • Re: ICMP Destination Unreachable, Administratively Prohibited (02/14/03)
  • Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip) (02/03/03)
• william.miller@gsa.gov
  • Re: port 17300 probe fingerprint analysis (02/19/03)
• zmajd fully
  • Re: Packet from port 80 with spoofed microsoft.com ip (02/04/03)

Last message date: 02/27/03
Archived on: 02/27/03 CET

---

186 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > incidents  > 2003-02