Previous period

Next period

230 messages starting Jun 01 03 and ending Jun 30 03
Date index | Thread index | Author index

• Re: strange cmd.exe access Valdis . Kletnieks (Jun 01)
  • <Possible follow-ups>
  • Re: strange cmd.exe access H Carvey (Jun 01)
  • Re: strange cmd.exe access adam (Jun 01)
  • RE: strange cmd.exe access Frank Knobbe (Jun 01)
  • RE: strange cmd.exe access MacDougall, Shane (Jun 05)
• Re: A question for the list... morning_wood (Jun 01)
  • Re: A question for the list... ktabic (Jun 01)
    • Re: A question for the list... Raistlin (Jun 02)
• RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] Rob Shein (Jun 01)
  • <Possible follow-ups>
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] John McCracken (Jun 01)
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] Cushing, David (Jun 02)
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] Jay Woody (Jun 02)
  • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] neitherj (Jun 02)
    • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] John McCracken (Jun 02)
      • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] Kevin Holmquist (Jun 03)
      • RE: Dubious e-mail: [Fwd: Dell.com (Password Request)] John McCracken (Jun 03)
• KazaaLite 2.0.2 Build 1 matt (Jun 02)
  • Re: KazaaLite 2.0.2 Build 1 p00p (Jun 03)
  • Re: KazaaLite 2.0.2 Build 1 Jimi Thompson (Jun 04)
    • Re: KazaaLite 2.0.2 Build 1 Alex Lambert (Jun 05)
  • <Possible follow-ups>
  • FW: KazaaLite 2.0.2 Build 1 drake insurance (Jun 04)
• Hmm....901 David Kennedy CISSP (Jun 02)
  • Re: Hmm....901 morning_wood (Jun 03)
  • Re: Hmm....901 Florin Andrei (Jun 06)
  • <Possible follow-ups>
  • FW: Hmm....901 Brian Taylor (Jun 03)
  • Re: Hmm....901 cvonancken (Jun 03)
  • Re: Hmm....901 Curt Wilson (Jun 03)
  • Re: Hmm....901 Jason Falciola (Jun 10)
• Announcement: SecurityFocus Pen-Test and Firewalls Focus Areas Dan Hanson (Jun 03)
• Help with an odd log file... sec_slave (Jun 03)
  • Re: Help with an odd log file... morning_wood (Jun 04)
  • Re: Help with an odd log file... Fabio Panigatti (Jun 05)
    • Re: Help with an odd log file... Fabio Panigatti (Jun 10)
  • <Possible follow-ups>
  • RE: Help with an odd log file... Brad Bemis (Jun 05)
  • Re: Help with an odd log file... sec_slave (Jun 05)
  • RE: Help with an odd log file... Golden Faron P Contr HQ SSG/SWSN (Jun 09)
    • Re(2): Help with an odd log file... Ken Eichman (Jun 09)
  • Re: Help with an odd log file... James C. Slora Jr. (Jun 09)
    • Re(2): Help with an odd log file... Ken Eichman (Jun 10)
      • Re: Help with an odd log file... James C. Slora Jr. (Jun 12)
  • Re: Help with an odd log file... James C. Slora Jr. (Jun 10)
• FW: File Folders Own Changed Faisal (Jun 05)
  • Re: FW: File Folders Own Changed Alex 'CAVE' Cernat (Jun 05)
• Dameware Malcode? Is anyone aware of it? John (Jun 05)
  • Re: Dameware Malcode? Is anyone aware of it? morning_wood (Jun 06)
  • Re: Dameware Malcode? Is anyone aware of it? John Ives (Jun 06)
  • Re: Dameware Malcode? Is anyone aware of it? Nick Jacobsen (Jun 06)
  • <Possible follow-ups>
  • RE: Dameware Malcode? Is anyone aware of it? Flory D Jeffrey Contractor 59MDSS/MSISI (Jun 06)
  • RE: Dameware Malcode? Is anyone aware of it? John Costa (Jun 06)
  • RE: Dameware Malcode? Is anyone aware of it? John Costa (Jun 09)
• strange traffic on UDP port 53 Ronald Belchez (Jun 05)
  • Re: strange traffic on UDP port 53 Valdis . Kletnieks (Jun 06)
    • IRC botnets Dayne Jordan (Jun 09)
      • Re: IRC botnets Angelz (Jun 10)
  • Re: strange traffic on UDP port 53 Rodney Green (Jun 06)
  • RE: strange traffic on UDP port 53 Mike (Jun 06)
    • Re: strange traffic on UDP port 53 Roger A. Grimes (Jun 09)
    • RE: strange traffic on UDP port 53 David Gillett (Jun 09)
      • RE: strange traffic on UDP port 53 Greg A. Woods (Jun 10)
      • RE: strange traffic on UDP port 53 David Gillett (Jun 10)
      • RE: strange traffic on UDP port 53 Greg A. Woods (Jun 10)
    • Re: strange traffic on UDP port 53 Valdis . Kletnieks (Jun 09)
  • <Possible follow-ups>
  • RE: strange traffic on UDP port 53 Quarantine (Jun 10)
  • Re: strange traffic on UDP port 53 Ronald Belchez (Jun 11)
    • Re: strange traffic on UDP port 53 Anders Reed Mohn (Jun 12)
• Japanese "IPv6" group allocating for IPv4 spamming? Jay D. Dyson (Jun 06)
  • Re: Japanese "IPv6" group allocating for IPv4 spamming? Robert Hajime Lanning (Jun 09)
  • Re: Japanese "IPv6" group allocating for IPv4 spamming? Dale Fay (Jun 09)
• Strange CONNECT entries in apache logs Rajkumar S (Jun 09)
  • Re: Strange CONNECT entries in apache logs Tomasz Onyszko (Jun 09)
  • Re: Strange CONNECT entries in apache logs Paul Wilson (Jun 10)
  • Re: Strange CONNECT entries in apache logs Christine Kronberg (Jun 10)
    • Re: Strange CONNECT entries in apache logs OSCAR (Jun 11)
      • Re: Strange CONNECT entries in apache logs Christine Kronberg (Jun 12)
      • Re: Strange CONNECT entries in apache logs OSCAR (Jun 12)
    • Re: Strange CONNECT entries in apache logs Darryl Luff (Jun 11)
  • Re: Strange CONNECT entries in apache logs Thomas Jensen (Jun 11)
    • Re: Strange CONNECT entries in apache logs Christine Kronberg (Jun 12)
      • Re: Strange CONNECT entries in apache logs Thomas Jensen (Jun 12)
  • <Possible follow-ups>
  • Re: Strange CONNECT entries in apache logs OSCAR (Jun 12)
  • Re: Strange CONNECT entries in apache logs OSCAR (Jun 12)
  • Re: Strange CONNECT entries in apache logs Thomas Jensen (Jun 13)
• Odd windows ICMP... any ideas what this is? ted klugman (Jun 09)
  • Re: Odd windows ICMP... any ideas what this is? Ryan Yagatich (Jun 10)
    • Re: Odd windows ICMP... any ideas what this is? Raistlin (Jun 16)
  • Re: Odd windows ICMP... any ideas what this is? Mika Boström (Jun 10)
  • RE: Odd windows ICMP... any ideas what this is? Eugene Borukhovich (Jun 10)
  • <Possible follow-ups>
  • Re: Odd windows ICMP... any ideas what this is? Jonathan Clark (Jun 10)
• AW: Strange CONNECT entries in apache logs Stefan Allemann (Jun 10)
  • Re: Strange CONNECT entries in apache logs John Lampe (Jun 10)
    • Re: Strange CONNECT entries in apache logs p00p (Jun 11)
• Attack(s) caught by Okena Dimitri Limanovski (Jun 10)
  • RE: Attack(s) caught by Okena Chris Fussell (Jun 11)
  • <Possible follow-ups>
  • RE: Attack(s) caught by Okena Marcus Gavel (Jun 11)
• Request for Raw Data Boulineau Danny C Contractor 33 IOS/DOOO (Jun 11)
  • <Possible follow-ups>
  • RE: Request for Raw Data Brad Bemis (Jun 11)
  • RE: Request for Raw Data Altheide, Cory B. (Jun 11)
  • RE: Request for Raw Data dknapp (Jun 11)
  • RE: Request for Raw Data Rosado, Rafael (Rafael) (Jun 11)
  • Re: Request for Raw Data Curt Wilson (Jun 11)
  • Re: Request for Raw Data DBoulineau (Jun 12)
• bad IP traffic operator (Jun 11)
• SecurityFocus Article Announcements (3) Dan Hanson (Jun 11)
• Odd SYN packet spoofed sources Golden Faron P Contr HQ SSG/SWSN (Jun 11)
• nscd poisoning? Michael Loftis (Jun 12)
• Windows 2k rootkit incident, files zipped for your pleasure. Drew Weaver (Jun 12)
  • Re: Windows 2k rootkit incident, files zipped for your pleasure. John Ives (Jun 12)
  • RE: Windows 2k rootkit incident, files zipped for your pleasure. Dan Perez (Jun 13)
  • <Possible follow-ups>
  • Re: Windows 2k rootkit incident, files zipped for your pleasure. defaillance (Jun 13)
• Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) Ken Eichman (Jun 12)
  • Re: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) Fabio Panigatti (Jun 13)
    • Re: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) Mike (Jun 16)
      • Re: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) Anders Reed Mohn (Jun 17)
      • RE: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) Jim Butterworth (Jun 18)
      • Re: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) Michael H. Warfield (Jun 18)
      • Re: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...) exon (Jun 18)
• File on desktop called "~" rice (Jun 12)
  • Re: File on desktop called "~" Sander van Vliet (Jun 12)
    • Re: File on desktop called "~" Patrick Nolan (Jun 13)
  • Re: File on desktop called "~" Kurt Seifried (Jun 13)
  • Re: File on desktop called "~" Nick FitzGerald (Jun 13)
  • RE: File on desktop called "~" David McBeth [VMACS] (Jun 13)
  • <Possible follow-ups>
  • Re: File on desktop called "~" http-equiv () excite com (Jun 13)
  • Re: File on desktop called "~" http-equiv () excite com (Jun 16)
• RE: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log f ile...) Konigsberg, Bob J. (Jun 13)
  • <Possible follow-ups>
  • RE: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log f ile...) Taylor, David (Jun 18)
• RE: Windows 2k rootkit incident Drew Weaver (Jun 13)
• Re: Windows 2k rootkit incident, files zipped for your pleasure. Karl Larsson (Jun 13)
• Help with identifying scan/attack Derrick Teo (Jun 13)
  • Re: Help with identifying scan/attack Valdis . Kletnieks (Jun 16)
• chkrootkit and LKM? Janus N. (Jun 16)
  • Re: chkrootkit and LKM? Ali-Reza Anghaie (Jun 16)
    • Re: chkrootkit and LKM? Janus N. (Jun 17)
    • Re: chkrootkit and LKM? Blade Runner (Jun 17)
      • Re: chkrootkit and LKM? Valdis . Kletnieks (Jun 18)
  • Re: chkrootkit and LKM? Tim Greer (Jun 17)
    • RE: chkrootkit and LKM? Rob Shein (Jun 18)
      • Re: chkrootkit and LKM? Tim Greer (Jun 18)
      • RE: chkrootkit and LKM? Andrew Ruef (Jun 21)
      • Re: chkrootkit and LKM? Tim Greer (Jun 23)
  • Re: chkrootkit and LKM? Nathan Dornquast (Jun 17)
  • Re: chkrootkit and LKM? Guille -bisho- (Jun 17)
  • Re: chkrootkit and LKM? Adam Sampson (Jun 17)
• Wierd Profile in Document Settings L Whiteside (Jun 16)
  • Re: Wierd Profile in Document Settings Tim Recher (Jun 17)
• UDP/41170 alaric (Jun 17)
  • <Possible follow-ups>
  • Re: UDP/41170 Aaron Cheek (Jun 17)
• SNMP search for printers? Aaron Cheek (Jun 17)
  • Re: SNMP search for printers? Chris Reining (Jun 18)
  • Re: SNMP search for printers? exon (Jun 18)
  • <Possible follow-ups>
  • SNMP search for printers? christian houle (Jun 18)
    • Re: SNMP search for printers? morning_wood (Jun 18)
  • RE: SNMP search for printers? Dave Killion (Jun 18)
  • RE: SNMP search for printers? Johnson, Greg (Jun 19)
    • Re: SNMP search for printers? Jeff Kell (Jun 19)
• sdbot variant and port 55808 activity Joe Stewart (Jun 18)
  • Re: sdbot variant and port 55808 activity Michael H. Warfield (Jun 18)
  • <Possible follow-ups>
  • RE: sdbot variant and port 55808 activity Kester, Kelly (Jun 21)
• One observed pattern of Win 55808 packets Golden Faron P Contr HQ SSG/SWSN (Jun 18)
• Re: sdbot variant and WS 55808 activity Richard Ginski (Jun 19)
  • <Possible follow-ups>
  • Re: sdbot variant and WS 55808 activity H Carvey (Jun 19)
  • RE: sdbot variant and WS 55808 activity James C. Slora, Jr. (Jun 19)
    • Re: sdbot variant and WS 55808 activity Anders Reed Mohn (Jun 21)
  • RE: sdbot variant and WS 55808 activity digigal11 (Jun 21)
• odd RST packets with 55808 Golden Faron P Contr HQ SSG/SWSN (Jun 19)
• FW: IANA Reserved IP Source scans 55808 Taylor, David (Jun 19)
• Unusual registry entries btraquer (Jun 19)
  • Re: Unusual registry entries Brad (Jun 21)
  • Re: Unusual registry entries Jasmine (Jun 21)
• [Snort-users] bad IP traffic Willi Web (Jun 20)
  • <Possible follow-ups>
  • [Snort-users] bad IP traffic NC Agent (Jun 20)
  • [Snort-users] bad IP traffic Willi Web (Jun 20)
• RE: Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log f ile...) Andy Streule (Jun 21)
• Intrusec 55808 Trojan Analysis David J. Meltzer (Jun 21)
  • <Possible follow-ups>
  • Intrusec 55808 Trojan Analysis David J. Meltzer (Jun 21)
  • Re: Intrusec 55808 Trojan Analysis gwhy555 (Jun 23)
    • Re: Intrusec 55808 Trojan Analysis Valdis . Kletnieks (Jun 24)
    • RE: Intrusec 55808 Trojan Analysis David J. Meltzer (Jun 24)
      • Re: Intrusec 55808 Trojan Analysis Peter Busser (Jun 25)
  • Re: Intrusec 55808 Trojan Analysis Philippe Bourgeois (Jun 27)
• ISS "Stumbler" advisory questions Joe Stewart (Jun 21)
• [Full-Disclosure] ISS "Stumbler" advisory questions NC Agent (Jun 22)
• Scan from Philipine Center on Transnational Crime Joe Blatz (Jun 23)
  • Re: Scan from Philipine Center on Transnational Crime ATD (Jun 24)
• kuag2 again? John Smaction (Jun 23)
• War Dial on my PBX David Barnett (Jun 24)
  • Re: War Dial on my PBX Dave Phelps (Jun 25)
    • Re: War Dial on my PBX Volker Tanger (Jun 25)
  • <Possible follow-ups>
  • RE: War Dial on my PBX Cotter, Joe (Jun 25)
  • RE: War Dial on my PBX Maria J. Vello (Jun 25)
    • RE: War Dial on my PBX .:[ Death Star]:. (Jun 26)
• strange logs -- tcp port 16166 Jiang Peng (Jun 24)
  • RE: strange logs -- tcp port 16166 Jerry Shenk (Jun 25)
  • <Possible follow-ups>
  • RE: strange logs -- tcp port 16166 James C. Slora, Jr. (Jun 25)
    • RE: strange logs -- tcp port 16166 Jerry Shenk (Jun 25)
      • Re: strange logs -- tcp port 16166 James C. Slora Jr. (Jun 25)
  • Re: strange logs -- tcp port 16166 tcleary2 (Jun 26)
  • Re: strange logs -- tcp port 16166 Justin Pryzby (Jun 27)
• Questionable UDP traffic received by firewall Earl Hood (Jun 25)
• Traffic with 55808 tcp windows size: news. Fabio Panigatti (Jun 26)
• rooted by blowkit raul_aldaz (Jun 27)
  • Re: rooted by blowkit Jay D. Dyson (Jun 28)
    • speaking of rootkits jlewis (Jun 28)
• port 5248 Brian Collins (Jun 27)
• Anyone else seeing a spike in SSHd scans? Jay D. Dyson (Jun 27)
  • Re: Anyone else seeing a spike in SSHd scans? Dave Laird (Jun 28)
    • Re: Anyone else seeing a spike in SSHd scans? p00p (Jun 29)
      • Re: Anyone else seeing a spike in SSHd scans? Dave Laird (Jun 29)
• possible new irc worm ZSisic (Jun 27)
  • Re: possible new irc worm Becky (Jun 27)
  • Re: possible new irc worm rewt (Jun 27)
    • Re: possible new irc worm Chris Ess (Jun 28)
      • Re: possible new irc worm Paolo Monti (Jun 28)
  • Re: possible new irc worm Axel Pettinger (Jun 28)
    • Re: possible new irc worm Chris Ess (Jun 29)
• DoS "Probing" on one of our hosts Christopher Kunz (Jun 29)
  • Re: DoS "Probing" on one of our hosts Chris Calvert (Jun 30)
    • Re: DoS "Probing" on one of our hosts Christopher Kunz (Jun 30)
  • Re: DoS "Probing" on one of our hosts Edward Balas (Jun 30)
    • Re: DoS "Probing" on one of our hosts Christopher Kunz (Jun 30)
  • <Possible follow-ups>
  • re: DoS "Probing" on one of our hosts Harlan Carvey (Jun 30)
    • Re: DoS "Probing" on one of our hosts Christopher Kunz (Jun 30)
      • RE: DoS "Probing" on one of our hosts Donald Voss (Jun 30)
      • Re: DoS "Probing" on one of our hosts Christopher Kunz (Jun 30)
  • RE: DoS "Probing" on one of our hosts Keith T. Morgan (Jun 30)
  • RE: DoS "Probing" on one of our hosts King, Brian (Jun 30)
    • Re: DoS "Probing" on one of our hosts Christopher Kunz (Jun 30)
  • RE: DoS "Probing" on one of our hosts Cook, Christopher S. (Jun 30)
    • RE: DoS "Probing" on one of our hosts Harlan Carvey (Jun 30)
  • RE: DoS "Probing" on one of our hosts Stone, Alexander (Jun 30)

Previous period

Next period