Previous period

Next period

219 messages starting Sep 30 00 and ending Oct 31 00
Date index | Thread index | Author index

• Proxy server object cache poisoning? Abe Getchell (Sep 30)
  • <Possible follow-ups>
  • Re: Proxy server object cache poisoning? Brvenik, Jason (Oct 02)
• Re: Interesting reply Crist Clark (Sep 30)
  • <Possible follow-ups>
  • Re: Interesting reply H Carvey (Sep 30)
  • Re: Interesting reply Forrester, Mike (Oct 11)
    • Re: Interesting reply Gary Flynn (Oct 12)
      • Re: Interesting reply Mikael Gripenstedt (Oct 13)
  • Re: Interesting reply H Carvey (Oct 13)
  • Re: Interesting reply Keith Pachulski (Oct 16)
    • Re: Interesting reply Rick Ballard (Oct 16)
      • Re: Interesting reply Aj Effin ReznoR (Oct 24)
  • Re: Interesting reply Forrester, Mike (Oct 19)
  • Re: Interesting reply Narins, Joshua (Oct 19)
  • Re: Interesting reply Forrester, Mike (Oct 20)
  • Re: Interesting reply Turpin, Jason (Oct 25)
    • Re: Interesting reply Aj Effin ReznoR (Oct 25)
    • Re: TCP connections to port 1024 - DDoS? Neil Long (Oct 26)
      • Re: TCP connections to port 1024 - DDoS? Arrigo Triulzi (Oct 27)
• Re: Strange FTP traffic... Rik van Riel (Sep 30)
  • Re: Strange FTP traffic... Pluto (Oct 10)
  • <Possible follow-ups>
  • Re: Strange FTP traffic... Erik Tayler (Sep 30)
• some recent action: ftpd sweeps, 9704/tcp checks, sub7 2.1 Jose Nazario (Oct 02)
• TCP 27374 from network 24? Glenn Forbes Fleming Larratt (Oct 02)
  • Re: TCP 27374 from network 24? George Bakos (Oct 03)
  • <Possible follow-ups>
  • Re: TCP 27374 from network 24? Boris Badenov (Oct 06)
• Re: [[INCIDENTS] TCP 27374 from network 24?] anti hack (Oct 03)
• New email virus? [Free eurocalculator!!!] Rik van Riel (Oct 03)
• No 'Last Login:' info from bash? Kris Boutilier (Oct 04)
  • Re: No 'Last Login:' info from bash? Nate Carlson (Oct 04)
  • Re: No 'Last Login:' info from bash? Pavel Kankovsky (Oct 04)
  • Re: No 'Last Login:' info from bash? George Bakos (Oct 04)
• @Home Nederland - port scans are OK Jude (Oct 04)
  • Re: @Home Nederland - port scans are OK Edwin ten Brink (Oct 04)
    • Re: @Home Nederland - port scans are OK Philipp Buehler (Oct 05)
  • Re: @Home Nederland - port scans are OK Harry Behrens (Oct 04)
• port question Vincent Williams (Oct 04)
  • Re: port question spiff (Oct 04)
  • <Possible follow-ups>
  • Re: port question Sykes, LaShawn (Oct 04)
• An ICMP Type 3 Signature Stephen P. Berry (Oct 04)
  • Re: An ICMP Type 3 Signature Russell Fulton (Oct 10)
  • Re: An ICMP Type 3 Signature Steffen Dettmer (Oct 11)
  • <Possible follow-ups>
  • Re: An ICMP Type 3 Signature Donald McLachlan (Oct 05)
    • Re: An ICMP Type 3 Signature Stephen P. Berry (Oct 10)
  • Re: An ICMP Type 3 Signature Donald McLachlan (Oct 10)
    • Re: An ICMP Type 3 Signature Stephen P. Berry (Oct 11)
  • Re: An ICMP Type 3 Signature Jay Random (Oct 11)
    • Re: An ICMP Type 3 Signature George Bakos (Oct 13)
  • Re: An ICMP Type 3 Signature Jay Random (Oct 17)
    • Re: An ICMP Type 3 Signature George Bakos (Oct 19)
• pimpshiz / put i.txt Rewt, Kit (Oct 04)
  • Re: pimpshiz / put i.txt Jonathan Rickman (Oct 04)
  • <Possible follow-ups>
  • Re: pimpshiz / put i.txt Steve (Oct 05)
  • Re: pimpshiz / put i.txt Larimer, Jon (ISSAtlanta) (Oct 05)
  • Re: pimpshiz / put i.txt Tony Turk (Oct 06)
    • Re: pimpshiz / put i.txt Jason Witty (Oct 06)
      • Re: pimpshiz / put i.txt Steve (Oct 10)
  • Re: pimpshiz / put i.txt Cashdollar, Larry (Oct 10)
  • Re: pimpshiz / put i.txt Abe Getchell (Oct 11)
• eurocalculator.exe analised a bit more Rik van Riel (Oct 04)
• Port 9088 Todd Meister (Oct 04)
  • Re: Port 9088 George Bakos (Oct 04)
    • Re: Port 9088 Todd Meister (Oct 05)
      • Re: Port 9088 Erik Tayler (Oct 06)
  • Re: Port 9088 Christopher Tresco (Oct 04)
    • Re: Port 9088 Todd Meister (Oct 04)
  • <Possible follow-ups>
  • Re: Port 9088 Peter Foreman (Oct 06)
• Strange activity to a laptop? LOS Ralph (Oct 05)
  • Re: Strange activity to a laptop? Stefan Wagner (Oct 06)
  • <Possible follow-ups>
  • Re: Strange activity to a laptop? Johnson, Greg (Oct 06)
  • Re: Strange activity to a laptop? Lastname, Firstname (Oct 06)
  • Re: Strange activity to a laptop? Frank Knobbe (Oct 08)
  • Re: Strange activity to a laptop? Jay Random (Oct 11)
  • Re: Strange activity to a laptop? Stephen Quigg (Oct 12)
• Interesting scanning activity George Bakos (Oct 05)
• Re: [Re: [INCIDENTS] TCP 27374 from network 24?] anti hack (Oct 06)
• Smurf attack? Glenn Gillis (Oct 08)
  • Re: Smurf attack? Ryan Russell (Oct 10)
• Lots of scans Chris Laycock (Oct 08)
  • <Possible follow-ups>
  • Re: Lots of scans azimuth (Oct 11)
• What's all this then? Andy Duncan (Oct 08)
• Re: Scans(?) 500->500 from China TJ Jablonowski (Oct 10)
  • <Possible follow-ups>
  • Re: Scans(?) 500->500 from China TJ Jablonowski (Oct 15)
• ISS Security Alert: Widespread incidents of SubSeven DEFCON8 2.1 Backdoor Aleph One (Oct 10)
• TCP port 403 (decap?) James Hoagland (Oct 11)
  • <Possible follow-ups>
  • Re: TCP port 403 (decap?) Robert G. Ferrell (Oct 13)
• Recovering from a penetrator, the easy way Harrington, Perry (Oct 11)
  • Re: Recovering from a penetrator, the easy way Dave Dittrich (Oct 12)
• Port 9704 Derek K. (Oct 11)
  • Re: Port 9704 Harry Behrens (Oct 12)
  • Re: Port 9704 Graeme Fowler (Oct 12)
  • Re: Port 9704 Jose Nazario (Oct 12)
• VirusWall? George Bakos (Oct 11)
  • <Possible follow-ups>
  • Re: VirusWall? Fernando Cardoso (Oct 12)
• Compromised NT box, sniffer and possible backdoor Ron Gula (Oct 12)
  • Re: Compromised NT box, sniffer and possible backdoor Runar Jensen (Oct 13)
• Question about strange ICMP/RAW traffic downstream on my DNS. Julien BREVIERE (Oct 12)
  • Arrowpoint CS-100 atack Thiago Madeira de Lima (Oct 16)
    • Re: Arrowpoint CS-100 atack junior (Oct 17)
• ksyslogd mamo (Oct 13)
  • Re: ksyslogd Misa (Oct 16)
  • <Possible follow-ups>
  • Re: ksyslogd Frazier, Thomas (Oct 16)
• Hacked, Trojaned, and Strange Files. MaZeN (Oct 13)
  • Re: Hacked, Trojaned, and Strange Files. Guillaume Filion (Oct 15)
  • Re: Hacked, Trojaned, and Strange Files. Jonathan Rickman (Oct 16)
  • <Possible follow-ups>
  • Re: Hacked, Trojaned, and Strange Files. Paul Franson (Oct 16)
• new trojan - scanning for open shares ... Philippe Bourcier (Oct 15)
• Connection from unknown Piotr Kurys (Oct 15)
  • Re: Connection from unknown Helmut Springer (Oct 16)
  • Re: Connection from unknown Mike Worman (Oct 24)
• Strange traffic (fwd) Michal Zalewski (Oct 15)
• inquiry re: hacker communication methods Jose Nazario (Oct 15)
  • Re: inquiry re: hacker communication methods Missouri FreeNet Administration (Oct 16)
    • incident log software The Picard (Oct 16)
      • Re: incident log software Steve (Oct 17)
  • Re: inquiry re: hacker communication methods Jose Nazario (Oct 16)
• Strange scan in progress Jerry Walsh (Oct 16)
  • Re: Strange scan in progress Marcel de Riedmatten (Oct 16)
• Re: Strange traffic Michal Zalewski (Oct 16)
  • Re: Strange traffic Slawek (Oct 16)
• Is this a new VBS virus (plan colombia) ? Ed Padin (Oct 16)
  • Re: Is this a new VBS virus (plan colombia) ? Steve (Oct 16)
  • <Possible follow-ups>
  • Re: Is this a new VBS virus (plan colombia) ? Brad Griffin (Oct 16)
• Anyone hve any info on this one? Rob Blain (Oct 16)
  • Re: Anyone hve any info on this one? Steve (Oct 16)
  • <Possible follow-ups>
  • Re: Anyone hve any info on this one? Doug Winter (Oct 17)
• Strange ports open Webmaster (Oct 16)
  • Re: Strange ports open George Bakos (Oct 17)
    • Re: Strange ports open NunoTreez (Oct 19)
  • <Possible follow-ups>
  • Re: Strange ports open Robert G. Ferrell (Oct 19)
    • Re: Strange ports open Jose Nazario (Oct 19)
  • Re: Strange ports open George Bakos (Oct 19)
• compromised host, annotated logs Jose Nazario (Oct 17)
• checkps 1.3-pre1 released (root kit detector) Duncan Simpson (Oct 19)
• Issues with Yahoo! Voice Chat Kristy Westphal (Oct 19)
• RedHat 6.2 boxes root'ed, shitc.tgz installed josh (Oct 19)
  • Re: RedHat 6.2 boxes root'ed, shitc.tgz installed Scott Nursten (Oct 20)
  • Re: RedHat 6.2 boxes root'ed, shitc.tgz installed Andreas Östling (Oct 20)
    • Re: RedHat 6.2 boxes root'ed, shitc.tgz installed josh (Oct 24)
    • Re: RedHat 6.2 boxes root'ed, shitc.tgz installed Bill Burge (Oct 24)
  • Re: RedHat 6.2 boxes root'ed, shitc.tgz installed Jeremy Gaddis (Oct 24)
• Re: Arrowpoint CS-100 atack Duquette, John (Oct 19)
  • <Possible follow-ups>
  • Re: Arrowpoint CS-100 atack Albert Saerong (Oct 19)
• Qeustion! Unenge Brian (Oct 19)
  • Re: Qeustion! reb (Oct 19)
  • Re: Qeustion! Steve Stearns (Oct 20)
  • Re: Qeustion! George Bakos (Oct 20)
• What kind of attack? Christopher A. Romp (Oct 19)
  • Re: What kind of attack? Jose Nazario (Oct 19)
  • <Possible follow-ups>
  • Re: What kind of attack? Cashdollar, Larry (Oct 19)
• abusers from multiple domains Mark Robert Williams (Oct 20)
• Strange file I received Vince Vielhaber (Oct 24)
  • Re: Strange file I received Elias Levy (Oct 24)
  • Re: Strange file I received James Cox (Oct 25)
  • <Possible follow-ups>
  • Re: Strange file I received Tomo Radovanovic (Oct 25)
• TCP connections to port 1024 - DDoS? Abe Getchell (Oct 24)
  • Re: TCP connections to port 1024 - DDoS? Mike Lewinski (Oct 25)
    • Re: TCP connections to port 1024 - DDoS? Corey Merchant (Oct 26)
    • Re: TCP connections to port 1024 - DDoS? Dave Dittrich (Oct 26)
      • Re: TCP connections to port 1024 - DDoS? Mike Lewinski (Oct 26)
  • <Possible follow-ups>
  • Re: TCP connections to port 1024 - DDoS? Abe Getchell (Oct 25)
  • Re: TCP connections to port 1024 - DDoS? Turpin, Jason (Oct 25)
    • Re: TCP connections to port 1024 - DDoS? Arrigo Triulzi (Oct 26)
      • Re: TCP connections to port 1024 - DDoS? Peter Gamache (Oct 27)
  • Re: TCP connections to port 1024 - DDoS? Bowman, Kevin (Oct 26)
  • Re: TCP connections to port 1024 - DDoS? Turpin, Jason (Oct 26)
  • Re: TCP connections to port 1024 - DDoS? Dave Dittrich (Oct 27)
  • Re: TCP connections to port 1024 - DDoS? Dave Dittrich (Oct 28)
• Possible Port 1024 DDoS - More Information Abe Getchell (Oct 25)
• Re: I_am_sorry.DOC.pif ejovi nuwere (Oct 25)
• Port 3050? Wolf Knox Seandor La-Vey (Oct 25)
  • Re: Port 3050? David Knaack (Oct 26)
• Increased traffic to tcp port 524 Suzanne . Hernandez (Oct 26)
  • <Possible follow-ups>
  • FW: Increased traffic to tcp port 524 Suzanne . Hernandez (Oct 27)
  • Re: Increased traffic to tcp port 524 Andrew Frith (Oct 27)
  • Re: Increased traffic to tcp port 524 David Knapp (Oct 28)
• Announce: rkscan, a kernel-based rootkit scanner. Stephane Aubert (Oct 26)
  • dos's from simflex.com Jason Storm (Oct 27)
  • <Possible follow-ups>
  • Announce: rkscan, a kernel-based rootkit scanner. Stephane Aubert (Oct 27)
• slow scans for tcp port 524 and 137 Russell Fulton (Oct 26)
  • <Possible follow-ups>
  • Re: slow scans for tcp port 524 and 137 Jens Hektor (Oct 27)
  • slow scans for tcp port 524 and 137 Russell Fulton (Oct 27)
• VPN hijacking Wertheimer, Ishai (Oct 26)
  • Re: VPN hijacking Michael H. Warfield (Oct 27)
  • Re: VPN hijacking ejovi nuwere (Oct 27)
  • Re: VPN hijacking John Duksta (Oct 27)
  • Re: VPN hijacking Ryan Russell (Oct 27)
  • Re: VPN hijacking Neil Sequeira (Oct 27)
  • <Possible follow-ups>
  • Re: VPN hijacking David Desvoigne (Oct 27)
  • Re: VPN hijacking Laumann, Dave (Oct 28)
• 6666/tcp ?? Mike Lee (Oct 26)
  • Re: 6666/tcp ?? Hunter1 (Oct 27)
    • Re: 6666/tcp ?? Mike Lee (Oct 27)
• Info: TCP Connections to port 1024 - DDoS Abe Getchell (Oct 27)
• Slightly OT: Draft Convention of CyberCrime Guillaume Filion (Oct 27)
• IIS Unicode Question Leon Rosenstein (Oct 27)
  • Re: IIS Unicode Question Steve (Oct 28)
  • Re: IIS Unicode Question Critical Watch Bugtraqqer (Oct 31)
• Port 1025 Again Mick (Oct 27)
  • <Possible follow-ups>
  • Port 1025 Again Mick (Oct 28)
• Likely Answer: TCP connections to port 1024 - DDoS? Richard Bejtlich (Oct 27)
• [no subject] Abe Getchell (Oct 27)
  • [no subject] Mike Lewinski (Oct 27)
    • [no subject] John Hall (Oct 28)
    • Re: your mail Nick Phillips (Oct 28)
      • Re: 1024 & DistributedDirector Mike Lewinski (Oct 28)
      • Load Balancing Protocol (was Re: your mail) Crist Clark (Oct 31)
      • Re: Load Balancing Protocol (was Re: your mail) Nick Phillips (Oct 31)
    • QAZ hitting MS Pierre Vandevenne (Oct 28)
  • Re: your mail jerm (Oct 28)
• TCP Port 9704 Scans DmuZ (Oct 28)
  • <Possible follow-ups>
  • Re: TCP Port 9704 Scans Fredrik Ostergren (Oct 31)
• [no subject] Abe Getchell (Oct 28)
  • [no subject] David Knaack (Oct 31)
• big increase in ftp scanning Ian Eure (Oct 31)
• New portmap exploit? Philip Champon (Oct 31)
• Load balancing (was Re: your mail) sthomas (Oct 31)
• interesting POP2/FTP connect pattern Jose Nazario (Oct 31)
• fwd: NMAP/TBIT Brian Kifiak (Oct 31)
• Port 524: compromised machine with ndsd Jens Hektor (Oct 31)

Previous period

Next period