SecurityFocus Incidents
By Author

225 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

---

Starting: 06/02/03
Ending: 06/30/03

• .:[ Death Star]:.
  • RE: War Dial on my PBX (06/26/03)
• Aaron Cheek
  • Re: UDP/41170 (06/18/03)
  • SNMP search for printers? (06/18/03)
• adam
  • Re: strange cmd.exe access (05/31/03)
• Adam Sampson
  • Re: chkrootkit and LKM? (06/17/03)
• alaric_at_alaricsecurity.com
  • UDP/41170 (06/17/03)
• Alex 'CAVE' Cernat
  • Re: FW: File Folders Own Changed (06/05/03)
• Alex Lambert
  • Re: KazaaLite 2.0.2 Build 1 (06/04/03)
• Ali-Reza Anghaie
  • Re: chkrootkit and LKM? (06/17/03)
• Altheide, Cory B.
  • RE: Request for Raw Data (06/10/03)
• Anders Reed Mohn
  • Re: sdbot variant and WS 55808 activity (06/20/03)
  • Re: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) (06/17/03)
  • Re: strange traffic on UDP port 53 (06/12/03)
• Andrew Ruef
  • RE: chkrootkit and LKM? (06/20/03)
• Andy Streule
  • RE: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log f ile...) (06/20/03)
• Angelz
  • Re: IRC botnets (06/10/03)
• ATD
  • Re: Scan from Philipine Center on Transnational Crime (06/24/03)
• Axel Pettinger
  • Re: possible new irc worm (06/28/03)
• Becky
  • Re: possible new irc worm (06/28/03)
• Blade Runner
  • Re: chkrootkit and LKM? (06/17/03)
• Boulineau Danny C Contractor 33 IOS/DOOO
  • Request for Raw Data (06/10/03)
• Brad
  • Re: Unusual registry entries (06/20/03)
• Brad Bemis
  • RE: Request for Raw Data (06/10/03)
  • RE: Help with an odd log file... (06/04/03)
• Brian Collins
  • port 5248 (06/27/03)
• Brian Taylor
  • FW: Hmm....901 (06/03/03)
• btraquer_at_att.net
  • Unusual registry entries (06/19/03)
• Chris Calvert
  • Re: DoS "Probing" on one of our hosts (06/30/03)
• Chris Ess
  • Re: possible new irc worm (06/29/03)
  • Re: possible new irc worm (06/28/03)
• Chris Fussell
  • RE: Attack(s) caught by Okena (06/10/03)
• Chris Reining
  • Re: SNMP search for printers? (06/18/03)
• christian houle
  • SNMP search for printers? (06/18/03)
• Christine Kronberg
  • Re: Strange CONNECT entries in apache logs (06/12/03)
  • Re: Strange CONNECT entries in apache logs (06/12/03)
  • Re: Strange CONNECT entries in apache logs (06/09/03)
• Christopher Kunz
  • Re: DoS "Probing" on one of our hosts (06/30/03)
  • Re: DoS "Probing" on one of our hosts (06/30/03)
  • Re: DoS "Probing" on one of our hosts (06/30/03)
  • Re: DoS "Probing" on one of our hosts (06/30/03)
  • Re: DoS "Probing" on one of our hosts (06/30/03)
  • DoS "Probing" on one of our hosts (06/29/03)
• Cook, Christopher S.
  • RE: DoS "Probing" on one of our hosts (06/30/03)
• Cotter, Joe
  • RE: War Dial on my PBX (06/25/03)
• Curt Wilson
  • Re: Request for Raw Data (06/11/03)
  • Re: Hmm....901 (06/03/03)
• Cushing, David
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] (06/02/03)
• cvonancken
  • Re: Hmm....901 (06/03/03)
• Dale Fay
  • Re: Japanese "IPv6" group allocating for IPv4 spamming? (06/06/03)
• Dan Hanson
  • SecurityFocus Article Announcements (3) (06/11/03)
  • Announcement: SecurityFocus Pen-Test and Firewalls Focus Areas (06/03/03)
• Dan Perez
  • RE: Windows 2k rootkit incident, files zipped for your pleasure. (06/13/03)
• Darryl Luff
  • Re: Strange CONNECT entries in apache logs (06/11/03)
• Dave Killion
  • RE: SNMP search for printers? (06/18/03)
• Dave Laird
  • Re: Anyone else seeing a spike in SSHd scans? (06/29/03)
  • Re: Anyone else seeing a spike in SSHd scans? (06/29/03)
• Dave Phelps
  • Re: War Dial on my PBX (06/25/03)
• David Barnett
  • War Dial on my PBX (06/25/03)
• David Gillett
  • RE: strange traffic on UDP port 53 (06/09/03)
  • RE: strange traffic on UDP port 53 (06/06/03)
• David J. Meltzer
  • RE: Intrusec 55808 Trojan Analysis (06/24/03)
  • Intrusec 55808 Trojan Analysis (06/20/03)
  • Intrusec 55808 Trojan Analysis (06/19/03)
• David Kennedy CISSP
  • Hmm....901 (06/02/03)
• David McBeth [VMACS]
  • RE: File on desktop called "~" (06/13/03)
• Dayne Jordan
  • IRC botnets (06/06/03)
• DBoulineau
  • Re: Request for Raw Data (06/12/03)
• defaillance_at_hushmail.com
  • Re: Windows 2k rootkit incident, files zipped for your pleasure. (06/13/03)
• Derrick Teo
  • Help with identifying scan/attack (06/13/03)
• digigal11_at_hushmail.com
  • RE: sdbot variant and WS 55808 activity (06/20/03)
• Dimitri Limanovski
  • Attack(s) caught by Okena (06/10/03)
• dknapp_at_calpoly.edu
  • RE: Request for Raw Data (06/11/03)
• Donald Voss
  • RE: DoS "Probing" on one of our hosts (06/30/03)
• drake insurance
  • FW: KazaaLite 2.0.2 Build 1 (06/04/03)
• Drew Weaver
  • RE: Windows 2k rootkit incident (06/13/03)
  • Windows 2k rootkit incident, files zipped for your pleasure. (06/12/03)
• Earl Hood
  • Questionable UDP traffic received by firewall (06/25/03)
• Edward Balas
  • Re: DoS "Probing" on one of our hosts (06/30/03)
• Eugene Borukhovich
  • RE: Odd windows ICMP... any ideas what this is? (06/10/03)
• exon
  • Re: SNMP search for printers? (06/18/03)
  • Re: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) (06/18/03)
• Fabio Pa***tti
  • Traffic with 55808 tcp windows size: news. (06/26/03)
  • Re: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) (06/13/03)
  • Re: Help with an odd log file... (06/09/03)
  • Re: Help with an odd log file... (06/05/03)
• Faisal
  • FW: File Folders Own Changed (06/05/03)
• Florin Andrei
  • Re: Hmm....901 (06/05/03)
• Flory D Jeffrey Contractor 59MDSS/MSISI
  • RE: Dameware Malcode? Is anyone aware of it? (06/05/03)
• Frank Knobbe
  • RE: strange cmd.exe access (05/31/03)
• Golden Faron P Contr HQ SSG/SWSN
  • odd RST packets with 55808 (06/19/03)
  • One observed pattern of Win 55808 packets (06/19/03)
  • Odd SYN packet spoofed sources (06/11/03)
  • RE: Help with an odd log file... (06/06/03)
• Greg A. Woods
  • RE: strange traffic on UDP port 53 (06/09/03)
  • RE: strange traffic on UDP port 53 (06/09/03)
• Guille -bisho-
  • Re: chkrootkit and LKM? (06/17/03)
• gwhy555_at_yahoo.com
  • Re: Intrusec 55808 Trojan Analysis (06/22/03)
• H Carvey
  • Re: sdbot variant and WS 55808 activity (06/19/03)
  • Re: strange cmd.exe access (05/31/03)
• Harlan Carvey
  • RE: DoS "Probing" on one of our hosts (06/30/03)
  • re: DoS "Probing" on one of our hosts (06/30/03)
• http-equiv_at_excite.com
  • Re: File on desktop called "~" (06/13/03)
  • Re: File on desktop called "~" (06/13/03)
• James C. Slora Jr.
  • Re: strange logs -- tcp port 16166 (06/26/03)
  • Re: Help with an odd log file... (06/12/03)
  • Re: Help with an odd log file... (06/08/03)
  • Re: Help with an odd log file... (06/08/03)
• James C. Slora, Jr.
  • RE: strange logs -- tcp port 16166 (06/25/03)
  • RE: sdbot variant and WS 55808 activity (06/19/03)
• Janus N.
  • Re: chkrootkit and LKM? (06/17/03)
  • chkrootkit and LKM? (06/16/03)
• Jasmine
  • Re: Unusual registry entries (06/20/03)
• Jason Falciola
  • Re: Hmm....901 (06/09/03)
• Jay Woody
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] (06/02/03)
• Jeff Kell
  • Re: SNMP search for printers? (06/19/03)
• Jerry Shenk
  • RE: strange logs -- tcp port 16166 (06/25/03)
  • RE: strange logs -- tcp port 16166 (06/25/03)
• Jiang Peng
  • strange logs -- tcp port 16166 (06/25/03)
• Jim Butterworth
  • RE: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) (06/18/03)
• Jimi Thompson
  • Re: KazaaLite 2.0.2 Build 1 (06/04/03)
• jlewis_at_lewis.org
  • speaking of rootkits (06/28/03)
• Joe Blatz
  • Scan from Philipine Center on Transnational Crime (06/22/03)
• Joe Stewart
  • ISS "Stumbler" advisory questions (06/20/03)
  • sdbot variant and winsize 55808 activity (06/19/03)
  • sdbot variant and winsize 55808 activity (06/18/03)
  • sdbot variant and port 55808 activity (06/18/03)
• John
  • Dameware Malcode? Is anyone aware of it? (06/04/03)
• John Costa
  • RE: Dameware Malcode? Is anyone aware of it? (06/06/03)
  • RE: Dameware Malcode? Is anyone aware of it? (06/06/03)
• John Ives
  • Re: Windows 2k rootkit incident, files zipped for your pleasure. (06/12/03)
  • Re: Dameware Malcode? Is anyone aware of it? (06/05/03)
• John Lampe
  • Re: Strange CONNECT entries in apache logs (06/11/03)
• John McCracken
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] (06/04/03)
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] (06/02/03)
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] (05/31/03)
• John Smaction
  • kuag2 again? (06/22/03)
• Johnson, Greg
  • RE: SNMP search for printers? (06/19/03)
• Jonathan Clark
  • Re: Odd windows ICMP... any ideas what this is? (06/09/03)
• Justin Pryzby
  • Re: strange logs -- tcp port 16166 (06/27/03)
• Karl Larsson
  • Re: Windows 2k rootkit incident, files zipped for your pleasure. (06/13/03)
• Keith T. Morgan
  • RE: DoS "Probing" on one of our hosts (06/30/03)
• Ken Eichman
  • Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) (06/12/03)
  • Re(2): Help with an odd log file... (06/09/03)
  • Re(2): Help with an odd log file... (06/09/03)
• Kester, Kelly
  • RE: sdbot variant and port 55808 activity (06/20/03)
• Kevin Holmquist
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] (06/03/03)
• King, Brian
  • RE: DoS "Probing" on one of our hosts (06/30/03)
• Konigsberg, Bob J.
  • RE: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log f ile...) (06/12/03)
• ktabic
  • Re: A question for the list... (06/01/03)
• Kurt Seifried
  • Re: File on desktop called "~" (06/13/03)
• L Whiteside
  • Wierd Profile in Document Settings (06/16/03)
• MacDougall, Shane
  • RE: strange cmd.exe access (06/05/03)
• Marcus Gavel
  • RE: Attack(s) caught by Okena (06/11/03)
• Maria J. Vello
  • RE: War Dial on my PBX (06/25/03)
• matt
  • KazaaLite 2.0.2 Build 1 (06/02/03)
• Michael H. Warfield
  • Re: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) (06/18/03)
  • Re: sdbot variant and port 55808 activity (06/18/03)
• Michael Loftis
  • nscd poisoning? (06/12/03)
• Mika Boström
  • Re: Odd windows ICMP... any ideas what this is? (06/09/03)
• Mike
  • Re: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) (06/13/03)
  • RE: strange traffic on UDP port 53 (06/06/03)
• morning_wood
  • Re: SNMP search for printers? (06/18/03)
  • Re: Dameware Malcode? Is anyone aware of it? (06/05/03)
  • Re: Help with an odd log file... (06/04/03)
  • Re: Hmm....901 (06/03/03)
  • Re: A question for the list... (05/31/03)
• Nathan Dornquast
  • Re: chkrootkit and LKM? (06/17/03)
• neitherj_at_WellsFargo.COM
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] (06/02/03)
• Nick FitzGerald
  • Re: File on desktop called "~" (06/13/03)
• Nick Jacobsen
  • Re: Dameware Malcode? Is anyone aware of it? (06/05/03)
• operator
  • bad IP traffic (06/11/03)
• OSCAR
  • Re: Strange CONNECT entries in apache logs (06/12/03)
  • Re: Strange CONNECT entries in apache logs (06/12/03)
  • Re: Strange CONNECT entries in apache logs (06/12/03)
  • Re: Strange CONNECT entries in apache logs (06/11/03)
• p00p_at_instable.net
  • Re: Anyone else seeing a spike in SSHd scans? (06/29/03)
  • Re: Strange CONNECT entries in apache logs (06/11/03)
  • Re: KazaaLite 2.0.2 Build 1 (06/03/03)
• Paolo Monti
  • Re: possible new irc worm (06/28/03)
• Patrick Nolan
  • Re: File on desktop called "~" (06/13/03)
• Paul Wilson
  • Re: Strange CONNECT entries in apache logs (06/09/03)
• Peter Busser
  • Re: Intrusec 55808 Trojan Analysis (06/25/03)
• Philippe Bourgeois
  • Re: Intrusec 55808 Trojan Analysis (06/27/03)
• Quarantine
  • RE: strange traffic on UDP port 53 (06/09/03)
• Raistlin
  • Re: Odd windows ICMP... any ideas what this is? (06/13/03)
  • Re: A question for the list... (06/02/03)
• Rajkumar S
  • Strange CONNECT entries in apache logs (06/06/03)
• raul_aldaz_at_hotmail.com
  • rooted by blowkit (06/27/03)
• rewt_at_eghetto.ca
  • Re: possible new irc worm (06/28/03)
• rice_at_up.edu
  • File on desktop called "~" (06/12/03)
• Richard Ginski
  • Re: sdbot variant and WS 55808 activity (06/19/03)
• Rob Shein
  • RE: chkrootkit and LKM? (06/18/03)
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] (05/31/03)
• Robert Hajime Lanning
  • Re: Japanese "IPv6" group allocating for IPv4 spamming? (06/06/03)
• Rodney Green
  • Re: strange traffic on UDP port 53 (06/05/03)
• Roger A. Grimes
  • Re: strange traffic on UDP port 53 (06/06/03)
• Ronald Belchez
  • Re: strange traffic on UDP port 53 (06/11/03)
  • strange traffic on UDP port 53 (06/04/03)
• Rosado, Rafael (Rafael)
  • RE: Request for Raw Data (06/11/03)
• Ryan Yagatich
  • Re: Odd windows ICMP... any ideas what this is? (06/09/03)
• Sander van Vliet
  • Re: File on desktop called "~" (06/12/03)
• sec_slave_at_hushmail.com
  • Re: Help with an odd log file... (06/04/03)
  • Help with an odd log file... (06/03/03)
• Stefan Allemann
  • AW: Strange CONNECT entries in apache logs (06/09/03)
• Stone, Alexander
  • RE: DoS "Probing" on one of our hosts (06/30/03)
• Taylor, David
  • FW: IANA Reserved IP Source scans 55808 (06/20/03)
  • RE: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log f ile...) (06/18/03)
• tcleary2_at_csc.com.au
  • Re: strange logs -- tcp port 16166 (06/26/03)
• ted klugman
  • Odd windows ICMP... any ideas what this is? (06/09/03)
• Thomas Jensen
  • Re: Strange CONNECT entries in apache logs (06/12/03)
  • Re: Strange CONNECT entries in apache logs (06/12/03)
  • Re: Strange CONNECT entries in apache logs (06/11/03)
• Tim Greer
  • Re: chkrootkit and LKM? (06/22/03)
  • Re: chkrootkit and LKM? (06/18/03)
  • Re: chkrootkit and LKM? (06/17/03)
• Tim Recher
  • Re: Wierd Profile in Document Settings (06/17/03)
• Tomasz Onyszko
  • Re: Strange CONNECT entries in apache logs (06/09/03)
• Valdis.Kletnieks_at_vt.edu
  • Re: Intrusec 55808 Trojan Analysis (06/24/03)
  • Re: chkrootkit and LKM? (06/18/03)
  • Re: Help with identifying scan/attack (06/16/03)
  • Re: strange traffic on UDP port 53 (06/07/03)
  • Re: strange traffic on UDP port 53 (06/05/03)
  • Re: strange cmd.exe access (05/31/03)
• Volker Tanger
  • Re: War Dial on my PBX (06/25/03)
• ZSisic
  • possible new irc worm (06/27/03)

Last message date: 06/30/03
Archived on: 06/30/03 CEST

---

225 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint

www.derkeiler.com  > Mailing-Lists  > securityfocus  > incidents  > 2003-06