Mailing List Archive For incidents@securityfocus.com Nov 2002 By Thread

• Re[2]: Spoofed RFC1918 Network Source Addresses... Security Consultant (Mon Nov 18 2002 - 18:15:04 EST)
• Re: Bad protocol version identification '^V^C^A' jm (Fri Nov 29 2002 - 19:24:51 EST)
• TCP:80, TCP:1433 squelda 1.0 probe John Sage (Fri Nov 29 2002 - 00:35:07 EST)
• Bad protocol version identification '^V^C^A' Randy Millis (Thu Nov 28 2002 - 11:42:25 EST)
• RE: wu-ftpd attack??? Bojan Zdrnja (Wed Nov 27 2002 - 05:42:17 EST)
• Re: wu-ftpd attack ??? David (Tue Nov 26 2002 - 23:51:25 EST)
• Re: Proxy server hit... Any ideas? Toby Felgenner (Tue Nov 26 2002 - 12:01:43 EST)
• RE: wu-ftpd attack ??? Aaron Lewis (Tue Nov 26 2002 - 15:22:42 EST)
• Re: Help - a possible bot Ryan Yagatich (Tue Nov 26 2002 - 09:52:36 EST)
• Re: Proxy server hit... Any ideas? Valdis.Kletnieks(at)vt.edu (Tue Nov 26 2002 - 12:20:11 EST)
• RE: wu-ftpd attack??? M. den Braber (Tue Nov 26 2002 - 04:04:31 EST)
• Re: wu-ftpd attack ??? Rodrigo Barbosa (Tue Nov 26 2002 - 08:52:51 EST)
• RE: wu-ftpd attack ??? Aaron Lewis (Tue Nov 26 2002 - 09:18:40 EST)
• Re: SMTP harrasment by nie2.infomail.es? jrlpop(at)mail.portland.co.uk (Tue Nov 26 2002 - 02:58:32 EST)
• wu-ftpd attack ??? Aaron D. Lewis (Mon Nov 25 2002 - 12:06:10 EST)
• Re: Compromised FBSD/Apache Charles Blackburn (Mon Nov 25 2002 - 13:20:07 EST)
• Re: Compromised FBSD/Apache Skip Carter (Mon Nov 25 2002 - 13:08:36 EST)
• RE: Compromised FBSD/Apache Boyan Krosnov (Mon Nov 25 2002 - 13:10:16 EST)
• Re: Compromised FBSD/Apache Adam Sampson (Mon Nov 25 2002 - 13:22:30 EST)
• Re: increased attacks on port 2599 gminick (Mon Nov 25 2002 - 18:57:14 EST)
• Re: [CERT] Re: Compromised FBSD/Apache ePAc (Mon Nov 25 2002 - 13:11:22 EST)
• Re: Compromised FBSD/Apache Jose Nazario (Mon Nov 25 2002 - 12:39:26 EST)
• RE: increased attacks on port 2599 H C (Sun Nov 24 2002 - 10:14:05 EST)
• SMTP harrasment by nie2.infomail.es? Hugo van der Kooij (Sat Nov 23 2002 - 07:13:36 EST)
• RE: New scanner? Jason Frey (Sat Nov 23 2002 - 02:02:54 EST)
• RE: Proxy server hit... Any ideas? Jonathan Bloomquist (Fri Nov 22 2002 - 13:45:32 EST)
• Re: Help - a possible bot Moshe Aelion (Fri Nov 22 2002 - 09:15:24 EST)
• RE: FTP and Win2K changed security policy Joswiak, Johnny G. (Fri Nov 22 2002 - 23:06:21 EST)
• RE: Port 1080 Krueger Lawrence (Fri Nov 22 2002 - 09:39:01 EST)
• RE: increased attacks on port 2599 Esler, Joel -- Sytex Contractor (Sat Nov 23 2002 - 17:41:12 EST)
• Re: Help - a possible bot Moshe Aelion (Fri Nov 22 2002 - 09:01:36 EST)
• Re: Compromised FBSD/Apache Thomas C. Meggs (Fri Nov 22 2002 - 11:28:21 EST)
• Re: increased attacks on port 2599 H C (Sat Nov 23 2002 - 09:05:20 EST)
• Re: Proxy server hit... Any ideas? Etaoin Shrdlu (Fri Nov 22 2002 - 10:07:18 EST)
• Re: Proxy server hit... Any ideas? Valdis.Kletnieks(at)vt.edu (Fri Nov 22 2002 - 09:22:45 EST)
• Re: Strange apache logs: CONNECT maila.microsoft.com:25 John Hall (Fri Nov 22 2002 - 15:21:23 EST)
• RE: Proxy server hit... Any ideas? Åke Nordin (Fri Nov 22 2002 - 07:37:10 EST)
• RE: Proxy server hit... Any ideas? Captain James T Kirk (Fri Nov 22 2002 - 08:32:57 EST)
• RE: Proxy server hit... Any ideas? Alvin Oga (Fri Nov 22 2002 - 06:48:18 EST)
• RE: Strange apache logs: CONNECT maila.microsoft.com:25 Andy Coates (Fri Nov 22 2002 - 07:10:39 EST)
• Re: Port 1080 D.Spezialie (Fri Nov 22 2002 - 01:55:56 EST)
• Re: New scanner? Russell Fulton (Thu Nov 21 2002 - 23:28:09 EST)
• Re: Proxy server hit... Any ideas? Valdis.Kletnieks(at)vt.edu (Thu Nov 21 2002 - 23:12:13 EST)
• Re: Proxy server hit... Any ideas? Emeric Miszti (Thu Nov 21 2002 - 19:52:42 EST)
• RE: New scanner? newsletters (Thu Nov 21 2002 - 21:10:41 EST)
• increased attacks on port 2599 Esler, Joel -- Sytex Contractor (Thu Nov 21 2002 - 10:23:14 EST)
• Re: FTP and Win2K changed security policy Johan Augustsson (Wed Nov 20 2002 - 02:29:17 EST)
• Strange apache logs: CONNECT maila.microsoft.com:25 Jeroen Wesbeek (Mon Nov 18 2002 - 04:05:04 EST)
• Re: Compromised FBSD/Apache Micheal Patterson (Wed Nov 20 2002 - 00:32:58 EST)
• RE: Proxy server hit... Any ideas? ZeroBreak (Wed Nov 20 2002 - 20:52:25 EST)
• Strange apache logs: CONNECT maila.microsoft.com:25 Jeroen Wesbeek (Wed Nov 20 2002 - 03:40:13 EST)
• RE: Proxy server hit... Any ideas? Mike Cain (Wed Nov 20 2002 - 10:07:35 EST)
• RE: Fraudulent use of ebay's name Jonathan A. Zdziarski (Wed Nov 20 2002 - 01:01:23 EST)
• RE: Fraudulent use of ebay's name Steve Cody (Tue Nov 19 2002 - 18:45:07 EST)
• More info about found Win2K "rootkit" Bojan Zdrnja (Wed Nov 20 2002 - 10:30:06 EST)
• RE: Proxy server hit... Any ideas? darroch royden (Wed Nov 20 2002 - 07:34:27 EST)
• Re: Compromised FBSD/Apache D.C. van Moolenbroek (Wed Nov 20 2002 - 17:22:44 EST)
• Port 1080 Chris Gross (Wed Nov 20 2002 - 17:56:50 EST)
• Re: FTP and Win2K changed security policy Don Voss (Wed Nov 20 2002 - 12:23:01 EST)
• New scanner? Jeremy (Wed Nov 20 2002 - 10:29:57 EST)
• RE: Proxy server hit... Any ideas? Othenin-Girard Pascal (Wed Nov 20 2002 - 03:16:15 EST)
• Re: Proxy server hit... Any ideas? Valdis.Kletnieks(at)vt.edu (Wed Nov 20 2002 - 11:04:08 EST)
• Re: Compromised FBSD/Apache Hernan Otero (Mon Nov 18 2002 - 08:03:05 EST)
• Re: Proxy server hit... Any ideas? Hugo van der Kooij (Tue Nov 19 2002 - 16:08:43 EST)
• RE: Proxy server hit... Any ideas? Mike Cain (Tue Nov 19 2002 - 16:28:44 EST)
• Re: Fraudulent use of ebay's name carl(at)polymedia.co.uk (Tue Nov 19 2002 - 16:10:46 EST)
• RE: Fraudulent use of ebay's name Rob Shein (Tue Nov 19 2002 - 15:34:39 EST)
• FTP and Win2K changed security policy Bojan Zdrnja (Mon Nov 18 2002 - 06:37:05 EST)
• Re: Help - a possible bot Mally Mclane (Mon Nov 18 2002 - 02:35:08 EST)
• Re: Proxy server hit... Any ideas? Russell Harding (Tue Nov 19 2002 - 16:04:18 EST)
• DeepSight Analyzer 4.0 Announcement Oliver Friedrichs (Mon Nov 18 2002 - 19:40:05 EST)
• Re: Compromised FBSD/Apache Greg A. Woods (Mon Nov 18 2002 - 12:49:09 EST)
• Proxy server hit... Any ideas? Mike Cain (Mon Nov 18 2002 - 09:00:43 EST)
• Fraudulent use of ebay's name Ragnar Paulson (Mon Nov 18 2002 - 12:51:39 EST)
• Re: Compromised FBSD/Apache Benjamin Krueger (Mon Nov 18 2002 - 08:27:20 EST)
• Compromised FBSD/Apache Greg S. Wirth (Sat Nov 16 2002 - 12:11:44 EST)
• Re: 030 igetnet ignkeywords Nick FitzGerald (Sat Nov 16 2002 - 17:34:46 EST)
• Re: Help - a possible bot Emeric Miszti (Sat Nov 16 2002 - 05:59:19 EST)
• Re: Help - a possible bot Nick FitzGerald (Sat Nov 16 2002 - 17:34:46 EST)
• RE: Help - a possible bot Dan Perez (Sat Nov 16 2002 - 03:33:48 EST)
• Re: Help - a possible bot Jon Nelson (Sat Nov 16 2002 - 09:47:00 EST)
• re: Help - a possible bot H C (Sat Nov 16 2002 - 08:10:47 EST)
• Strange Apache logs - maybe DDOS? Christian Schwede (Fri Nov 15 2002 - 04:31:30 EST)
• Help - a possible bot Moshe Aelion (Fri Nov 15 2002 - 15:11:05 EST)
• Re: Port 5552? David Lawson (Wed Nov 13 2002 - 17:41:10 EST)
• Re: 030 ignkeywords igetnet follow up Ryan Yagatich (Thu Nov 14 2002 - 13:48:13 EST)
• RE: Unicode Attack Information Security (Fri Nov 15 2002 - 13:50:46 EST)
• Re: Unicode Attack (FOLLOW UP) Mike Lewinski (Wed Nov 13 2002 - 17:50:36 EST)
• RE: Unicode Attack James C Slora Jr (Thu Nov 14 2002 - 18:19:59 EST)
• RE: Unicode Attack Palmer, Justin (Thu Nov 14 2002 - 12:31:21 EST)
• Re: Yahoo Messenger Stale Sessions BANIER Jeremie (Thu Nov 14 2002 - 08:49:51 EST)
• RE: Yahoo Messenger Stale Sessions John Fitzgerald (Wed Nov 13 2002 - 19:52:42 EST)
• Re: Unicode Attack Nick FitzGerald (Wed Nov 13 2002 - 20:35:18 EST)
• RE: Unicode Attack Information Security (Wed Nov 13 2002 - 13:27:18 EST)
• RE: scans on port 57 Craig, Scott (Wed Nov 13 2002 - 11:06:18 EST)
• RE: scans on port 57 Vince Hillier (Wed Nov 13 2002 - 08:09:00 EST)
• Re: Unicode Attack Daniel Polombo (Wed Nov 13 2002 - 14:27:41 EST)
• RE: Unicode Attack (FOLLOW UP) Jeremy Junginger (Wed Nov 13 2002 - 12:52:37 EST)
• RE: Yahoo Messenger Stale Sessions David Gillett (Wed Nov 13 2002 - 12:35:11 EST)
• Re: Port 5552? Tijl Schoonenberg (Wed Nov 13 2002 - 11:38:52 EST)
• Re: scans on port 57 John Jørgensen (Wed Nov 13 2002 - 05:01:30 EST)
• Unicode Attack Jeremy Junginger (Wed Nov 13 2002 - 09:51:02 EST)
• RE: Yahoo Messenger Stale Sessions Leonard.Ong(at)nokia.com (Tue Nov 12 2002 - 20:38:58 EST)
• scans on port 57 Ingersoll, Jared (Tue Nov 12 2002 - 08:00:39 EST)
• RE: Ip spoof from 0.0.0.0 Steenbergen, Dennis, Contractor (Tue Nov 12 2002 - 00:51:25 EST)
• RE: Port 5552? Robb, Bev (Tue Nov 12 2002 - 18:18:26 EST)
• Re: 030 igetnet ignkeywords J. Foobar (Tue Nov 12 2002 - 05:39:17 EST)
• new version of aris analyzer? craigwill(at)hush.com (Tue Nov 12 2002 - 18:16:40 EST)
• Re: IIS and leech Ali Gumbs (Mon Nov 11 2002 - 22:30:26 EST)
• RE: ano@ano.com ftpd dip.t-dialin.net Owen McCusker (Tue Nov 12 2002 - 13:29:27 EST)
• RE: 030.com Lombardi, Chris (Mon Nov 11 2002 - 15:59:00 EST)
• Re: 030 igetnet ignkeywords Nick FitzGerald (Tue Nov 12 2002 - 03:56:00 EST)
• RE: Port 5552? Will Munkara-Kerr (Mon Nov 11 2002 - 17:51:52 EST)
• RE: Quick question re FTP activity darroch royden (Mon Nov 11 2002 - 17:17:43 EST)
• 030 ignkeywords igetnet follow up Waitman C. Gobble (Mon Nov 11 2002 - 17:19:34 EST)
• Re: Port 5552? Akkoord voor verzending (Tue Nov 12 2002 - 00:15:47 EST)
• Re: 030 igetnet ignkeywords Waitman C. Gobble (Tue Nov 12 2002 - 09:34:57 EST)
• RE: 030 igetnet ignkeywords Christopher Wagner (Mon Nov 11 2002 - 18:46:13 EST)
• Re: IIS and leech Ken Schaefer (Sun Nov 10 2002 - 19:45:04 EST)
• RE: Ip spoof from 0.0.0.0 Ingersoll, Jared (Mon Nov 11 2002 - 08:29:46 EST)
• Port 5552? Lupe Christoph (Mon Nov 11 2002 - 03:09:05 EST)
• 030 igetnet ignkeywords Waitman C. Gobble (Sun Nov 10 2002 - 22:02:17 EST)
• Re: 030.com Nick FitzGerald (Fri Nov 08 2002 - 16:19:31 EST)
• Re: IIS and leech atrinsig (Sat Nov 09 2002 - 07:26:22 EST)
• RE: 030.com Arnold, Jamie (Fri Nov 08 2002 - 17:17:00 EST)
• RE: Ip spoof from 0.0.0.0 Onsite West Houston (Fri Nov 08 2002 - 19:24:33 EST)
• Quick question re FTP activity Timothy M. Lyons (Sun Nov 10 2002 - 05:20:53 EST)
• RE: ano@ano.com ftpd dip.t-dialin.net Bojan Zdrnja (Fri Nov 08 2002 - 02:42:49 EST)
• Re: Ip spoof from 0.0.0.0 Mike Maxwell (Tue Nov 05 2002 - 11:54:27 EST)
• Re: Ip spoof from 0.0.0.0 Mike Lewinski (Tue Nov 05 2002 - 15:57:56 EST)
• IIS and leech randall perry (Thu Nov 07 2002 - 14:45:00 EST)
• What's up with 3014/tcp? Brian Coyle (Fri Nov 08 2002 - 01:20:39 EST)
• Re: Ip spoof from 0.0.0.0 Hernan Otero (Tue Nov 05 2002 - 07:15:58 EST)
• Re: Ip spoof from 0.0.0.0 David Gillett (Thu Nov 07 2002 - 20:03:57 EST)
• RE: ano@ano.com ftpd dip.t-dialin.net David Gillett (Fri Nov 08 2002 - 12:04:01 EST)
• RE: 030.com DonaldB(at)ecar.org (Fri Nov 08 2002 - 11:42:29 EST)
• Re: Ip spoof from 0.0.0.0 Jason Robertson (Thu Nov 07 2002 - 22:16:46 EST)
• 030.com Waitman C. Gobble (Fri Nov 08 2002 - 10:56:00 EST)
• Re: ano@ano.com ftpd dip.t-dialin.net TOK (Fri Nov 08 2002 - 01:40:09 EST)
• Re: Ip spoof from 0.0.0.0 batz (Thu Nov 07 2002 - 16:28:10 EST)
• RE: Ip spoof from 0.0.0.0 Russell Fulton (Thu Nov 07 2002 - 15:44:17 EST)
• Re: Script I haven't seen? Or human directed? Scott C. Kennedy (Thu Nov 07 2002 - 13:07:14 EST)
• Re: Script I haven't seen? Or human directed? Stephen Friedl (Thu Nov 07 2002 - 12:07:10 EST)
• Re: ano@ano.com ftpd dip.t-dialin.net Valdis.Kletnieks(at)vt.edu (Thu Nov 07 2002 - 13:31:24 EST)
• Re: Ip spoof from 0.0.0.0 Nexus (Wed Nov 06 2002 - 18:53:10 EST)
• Re: ano@ano.com ftpd dip.t-dialin.net Rainer Duffner (Thu Nov 07 2002 - 12:02:49 EST)
• RE: Ip spoof from 0.0.0.0 Omar Herrera (Wed Nov 06 2002 - 19:29:34 EST)
• RE: Script I haven't seen? Or human directed? James C Slora Jr (Thu Nov 07 2002 - 13:37:38 EST)
• Re: ano@ano.com ftpd dip.t-dialin.net Dave Laird (Thu Nov 07 2002 - 11:52:18 EST)
• RE: ano@ano.com ftpd dip.t-dialin.net Rick Darsey (Thu Nov 07 2002 - 08:50:19 EST)
• Script I haven't seen? Or human directed? Keith T. Morgan (Thu Nov 07 2002 - 09:18:13 EST)
• Re: ano@ano.com ftpd dip.t-dialin.net Moo (Wed Nov 06 2002 - 16:44:23 EST)
• RE: Ip spoof from 0.0.0.0 Omar Herrera (Wed Nov 06 2002 - 19:40:37 EST)
• Re: ano@ano.com ftpd dip.t-dialin.net Skip Carter (Wed Nov 06 2002 - 21:19:03 EST)
• Re: ano@ano.com ftpd dip.t-dialin.net Ralf G. R. Bergs (Thu Nov 07 2002 - 02:54:47 EST)
• ano@ano.com ftpd dip.t-dialin.net Owen McCusker (Wed Nov 06 2002 - 16:50:13 EST)
• Re: Ip spoof from 0.0.0.0 Paul Gillingwater (Wed Nov 06 2002 - 14:08:45 EST)
• Re: Ip spoof from 0.0.0.0 Mike Lewinski (Wed Nov 06 2002 - 13:05:46 EST)
• Re: Ip spoof from 0.0.0.0 Crist J. Clark (Wed Nov 06 2002 - 02:14:23 EST)
• Re: Ip spoof from 0.0.0.0 Frank Cheong (Wed Nov 06 2002 - 04:37:52 EST)
• Re: Ip spoof from 0.0.0.0 Pavel Kankovsky (Tue Nov 05 2002 - 19:34:51 EST)
• Re: Port 1975 rogue service H C (Tue Nov 05 2002 - 06:37:20 EST)
• Re: Ip spoof from 0.0.0.0 Mike Lewinski (Tue Nov 05 2002 - 02:15:05 EST)