Starting: Thu May 02 2002 - 10:24:32 CDT
Ending: Sun Jun 02 2002 - 23:21:02 CDT

• Re: A friend's cable modem Linux machine just got compromised Sam Trenholme (Wed May 01 2002 - 15:39:26 CDT)
• Tuxkit (Optic Kit?) -cracked (/dev/tux) Mark Newby (Thu May 02 2002 - 05:54:25 CDT)
• Re: A friend's cable modem Linux machine just got compromised William N. Zanatta (Thu May 02 2002 - 08:12:45 CDT)
• Honeynet Project -> The Reverse Challenge Lance Spitzner (Wed May 01 2002 - 15:11:14 CDT)
• ssh scans using username 'test' or 'oracle'? Matt Zimmerman (Thu May 02 2002 - 10:14:01 CDT)
• Re: ssh scans using username 'test' or 'oracle'? Will Aoki (Thu May 02 2002 - 12:55:09 CDT)
• 'rooted' NT/2K boxen? H C (Thu May 02 2002 - 12:31:04 CDT)
• Windows Systems Defaced Steve Zenone (Thu May 02 2002 - 15:23:03 CDT)
• Re: 'rooted' NT/2K boxen? H C (Thu May 02 2002 - 15:26:18 CDT)
• Re: 'rooted' NT/2K boxen? zeno (Thu May 02 2002 - 15:06:30 CDT)
• Re: 'rooted' NT/2K boxen? William N. Zanatta (Thu May 02 2002 - 15:57:23 CDT)
• Re: ssh scans using username 'test' or 'oracle'? Matt Zimmerman (Thu May 02 2002 - 15:39:54 CDT)
• Re: 'rooted' NT/2K boxen? Cody Hatch (Thu May 02 2002 - 16:46:41 CDT)
• Re: 'rooted' NT/2K boxen? H C (Thu May 02 2002 - 17:42:39 CDT)
• Re: 'rooted' NT/2K boxen? Cody Hatch (Thu May 02 2002 - 21:30:16 CDT)
• Re: Windows Systems Defaced Stephen W. Thompson (Thu May 02 2002 - 22:00:01 CDT)
• RE: Windows Systems Defaced Steve Zenone (Thu May 02 2002 - 22:23:56 CDT)
• RE: Windows Systems Defaced David Ashwood (Fri May 03 2002 - 06:42:36 CDT)
• RE: Windows Systems Defaced H C (Fri May 03 2002 - 07:28:29 CDT)
• Re: 'rooted' NT/2K boxen? H C (Fri May 03 2002 - 08:54:15 CDT)
• RE: Windows Systems Defaced Brenna Primrose (Fri May 03 2002 - 12:17:47 CDT)
• RE: Windows Systems Defaced Johannes B. Ullrich (Fri May 03 2002 - 13:43:56 CDT)
• World-wide distributed DoS and "warez" bot networks (fwd) Dave Dittrich (Fri May 03 2002 - 12:27:08 CDT)
• info Joe T. (Fri May 03 2002 - 17:26:49 CDT)
• RE: info Loki (Fri May 03 2002 - 17:41:17 CDT)
• Unusual Message log contents Gregory Kane (Mon May 06 2002 - 09:33:49 CDT)
• Re: info W.G. Iyer (Fri May 03 2002 - 19:27:17 CDT)
• Re: info Michel Arboi (Sat May 04 2002 - 03:56:56 CDT)
• Re: 'rooted' NT/2K boxen? KJK::Hyperion (Fri May 03 2002 - 19:24:59 CDT)
• Reverse Challenge - Binary released Lance Spitzner (Sun May 05 2002 - 21:05:46 CDT)
• Re: info Joe T. (Fri May 03 2002 - 20:05:19 CDT)
• RE: info Joe T. (Fri May 03 2002 - 17:59:30 CDT)
• Re: info Jose Nazario (Mon May 06 2002 - 13:25:27 CDT)
• RE: info dlaumannsuntzu.net (Mon May 06 2002 - 16:12:00 CDT)
• netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com Edwards, David (JTS) (Mon May 06 2002 - 19:40:06 CDT)
• RE: info Head of the Councel of Wizards (Tue May 07 2002 - 09:05:13 CDT)
• Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com Rainer Duffner (Tue May 07 2002 - 11:12:09 CDT)
• Publishing Nimda Logs Deus, Attonbitus (Tue May 07 2002 - 11:56:28 CDT)
• Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com H C (Tue May 07 2002 - 12:25:35 CDT)
• RE: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com Edwards, David (JTS) (Tue May 07 2002 - 21:50:01 CDT)
• Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com Nick FitzGerald (Tue May 07 2002 - 20:19:27 CDT)
• Re: Publishing Nimda Logs Hugo van der Kooij (Wed May 08 2002 - 01:01:41 CDT)
• Publishing Nimda Logs - Summary Deus, Attonbitus (Wed May 08 2002 - 09:35:12 CDT)
• Re: Publishing Nimda Logs Glenn Forbes Fleming Larratt (Wed May 08 2002 - 10:01:11 CDT)
• Re: Publishing Nimda Logs Rainer Duffner (Wed May 08 2002 - 03:28:40 CDT)
• Re: Publishing Nimda Logs E (Wed May 08 2002 - 06:50:01 CDT)
• Re: Publishing Nimda Logs John Kristoff (Wed May 08 2002 - 05:45:03 CDT)
• Re: Publishing Nimda Logs jlewislewis.org (Wed May 08 2002 - 00:56:58 CDT)
• Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com Rainer Duffner (Wed May 08 2002 - 03:39:13 CDT)
• AW: Publishing Nimda Logs vogthansenet.com (Wed May 08 2002 - 03:26:27 CDT)
• RE: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com Edwards, David (JTS) (Wed May 08 2002 - 00:55:32 CDT)
• Re: Unusual Message log contents Mark Newby (Wed May 08 2002 - 07:13:40 CDT)
• Re: Publishing Nimda Logs Mally Mclane (Wed May 08 2002 - 10:47:05 CDT)
• RE: Publishing Nimda Logs Steve Zenone (Wed May 08 2002 - 13:48:27 CDT)
• Re: Publishing Nimda Logs Richard.Smithpredictive.com (Wed May 08 2002 - 11:38:49 CDT)
• RE: Publishing Nimda Logs Benjamin Tomhave (Wed May 08 2002 - 11:15:18 CDT)
• Re: Publishing Nimda Logs Thomas Frerichs (Wed May 08 2002 - 12:40:24 CDT)
• Re: Publishing Nimda Logs Mally Mclane (Wed May 08 2002 - 13:48:53 CDT)
• Publishing Nimda Logs == BAD IDEA Dug Song (Wed May 08 2002 - 13:27:01 CDT)
• Re: Nimda Infections and code red resurgence Dug Song (Wed May 08 2002 - 16:33:17 CDT)
• Re: Publishing Nimda Logs Justin Shore (Wed May 08 2002 - 13:31:23 CDT)
• RE: Publishing Nimda Logs - Summary Jim Harrison (SPG) (Wed May 08 2002 - 13:39:05 CDT)
• Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com Brian McWilliams (Wed May 08 2002 - 21:25:03 CDT)
• Re: Publishing Nimda Logs Jay D. Dyson (Thu May 09 2002 - 01:25:53 CDT)
• Re: netbuie.exe, scorpionsearch.com and fastcounter.bcentral.com - Wrap up Edwards, David (JTS) (Wed May 08 2002 - 22:15:25 CDT)
• Re: Publishing Nimda Logs == BAD IDEA De Velopment (Wed May 08 2002 - 19:50:25 CDT)
• Dead Thread - Publishing Nimda Logs Jensenne Roculan (Thu May 09 2002 - 11:01:00 CDT)
• Strange "shotgun" scan Ken Hodges (Thu May 09 2002 - 12:30:09 CDT)
• RE: Strange "shotgun" scan McCammon, Keith (Thu May 09 2002 - 13:21:19 CDT)
• RE: Strange "shotgun" scan Larry Thompson (Thu May 09 2002 - 16:40:05 CDT)
• Strange TCP headers pbsarnacThoughtWorks.com (Fri May 10 2002 - 10:40:19 CDT)
• Re: Strange TCP headers Matt Zimmerman (Fri May 10 2002 - 11:17:38 CDT)
• RE: Strange TCP headers Robert Buckley (Fri May 10 2002 - 11:00:32 CDT)
• RE: Strange TCP headers pbsarnacThoughtWorks.com (Fri May 10 2002 - 11:38:14 CDT)
• RE: Strange TCP headers Robert Buckley (Fri May 10 2002 - 12:40:04 CDT)
• RE: Strange TCP headers Dano (Sat May 11 2002 - 01:35:12 CDT)
• Re: Strange TCP headers Michel Arboi (Sat May 11 2002 - 02:32:54 CDT)
• RE: Strange TCP headers Benjamin Tomhave (Sat May 11 2002 - 12:30:13 CDT)
• Windows Systems Defaced/destroyed, plus Port 3389 attacks Bukys, Liudvikas (Mon May 13 2002 - 11:00:25 CDT)
• Re: [unisog] Windows Systems Defaced/destroyed, plus Port 3389 attacks Chris Wilson (Mon May 13 2002 - 15:33:36 CDT)
• gw.ocg-corp.com netsciencehushmail.com (Mon May 13 2002 - 16:43:28 CDT)
• Re: gw.ocg-corp.com Chip McClure (Mon May 13 2002 - 16:56:00 CDT)
• Re: gw.ocg-corp.com Jordan K Wiens (Mon May 13 2002 - 16:54:58 CDT)
• Re: gw.ocg-corp.com Christian Vogel (Mon May 13 2002 - 17:18:52 CDT)
• Re: gw.ocg-corp.com Will Aoki (Mon May 13 2002 - 17:19:45 CDT)
• Got 'em. (was "Re: gw.ocg-corp.com") Jay D. Dyson (Mon May 13 2002 - 17:43:46 CDT)
• Re: Got 'em. (was "Re: gw.ocg-corp.com") Chip McClure (Mon May 13 2002 - 17:53:39 CDT)
• Re: Got 'em. (was "Re: gw.ocg-corp.com") Hugo van der Kooij (Mon May 13 2002 - 17:57:47 CDT)
• Nimda type attacks with broken GETs Stephen Samuel (Tue May 14 2002 - 00:38:02 CDT)
• Re: Windows Systems Defaced Alphonse MacDonald (Tue May 14 2002 - 15:44:18 CDT)
• explanation of port 1433 scans... Benjamin Tomhave (Thu May 16 2002 - 11:04:07 CDT)
• Re: explanation of port 1433 scans... Matt.Carpenteralticor.com (Thu May 16 2002 - 13:17:36 CDT)
• RE: Windows Systems Defaced/destroyed, plus Port 3389 attacks Skinner, Kit (Fri May 17 2002 - 15:14:04 CDT)
• RE: Windows Systems Defaced/destroyed, plus Port 3389 attacks Deus, Attonbitus (Fri May 17 2002 - 16:31:25 CDT)
• exploited win2k box, not quite sure how: John Jasen (Fri May 17 2002 - 20:05:29 CDT)
• Re: exploited win2k box, not quite sure how: Mike Lewinski (Mon May 20 2002 - 14:13:32 CDT)
• RE: exploited win2k box, not quite sure how: McCammon, Keith (Mon May 20 2002 - 13:39:24 CDT)
• RE: exploited win2k box, not quite sure how: Ron Yount (Mon May 20 2002 - 13:44:54 CDT)
• RE: exploited win2k box, not quite sure how: Butler, Brandon (Mon May 20 2002 - 13:36:52 CDT)
• Re: exploited win2k box, not quite sure how: John Jasen (Mon May 20 2002 - 15:44:00 CDT)
• Re: exploited win2k box, not quite sure how: Scott Fendley (Mon May 20 2002 - 13:47:50 CDT)
• FW: exploited win2k box, not quite sure how: Blake Frantz (Mon May 20 2002 - 14:24:29 CDT)
• Re: exploited win2k box, not quite sure how: rulerpen (Mon May 20 2002 - 13:58:35 CDT)
• Strange scan on 1433 Pavel Lozhkin (Tue May 21 2002 - 08:38:03 CDT)
• Increased connects to Port 1433 Darrin Powell (Tue May 21 2002 - 09:33:07 CDT)
• RE: Increased connects to Port 1433 Lee_FisherNAI.com (Tue May 21 2002 - 10:25:37 CDT)
• RE: Strange scan on 1433 Quarantine (Tue May 21 2002 - 10:22:42 CDT)
• Re: Increased connects to Port 1433 Tracey Losco (Tue May 21 2002 - 10:30:48 CDT)
• RE: Increased connects to Port 1433 Tom Pope (Tue May 21 2002 - 10:42:05 CDT)
• RE: Increased connects to Port 1433 Pour, Matthew (Tue May 21 2002 - 10:21:26 CDT)
• Re: Strange scan on 1433 dr john halewood (Tue May 21 2002 - 10:30:01 CDT)
• RE: Strange scan on 1433 Dias Sgt Kristin F (Tue May 21 2002 - 10:23:03 CDT)
• RE: Increased connects to Port 1433 Keith T. Morgan (Tue May 21 2002 - 10:30:09 CDT)
• RE: Strange scan on 1433 David LaPorte (Tue May 21 2002 - 10:23:13 CDT)
• RE: Strange scan on 1433 Ken Pfeil (Tue May 21 2002 - 10:19:00 CDT)
• RE: Strange scan on 1433 Deus, Attonbitus (Tue May 21 2002 - 12:01:48 CDT)
• RE: Strange scan on 1433 James (Tue May 21 2002 - 14:06:51 CDT)
• Re: Strange scan on 1433 Jason Robertson (Tue May 21 2002 - 11:25:04 CDT)
• RE: Strange scan on 1433 Blake Frantz (Tue May 21 2002 - 11:46:49 CDT)
• Re: Strange scan on 1433 Johannes Ullrich (Tue May 21 2002 - 14:26:37 CDT)
• Re: Increased connects to Port 1433 Travis Pugh (Tue May 21 2002 - 13:09:58 CDT)
• Comprise Attack Microsoft SQL servers - new Internet worm Larry.Leibrockbus.utexas.edu (Tue May 21 2002 - 15:36:10 CDT)
• Re: Strange scan on 1433 George Bakos (Tue May 21 2002 - 16:45:29 CDT)
• Worms and CScript/WScript Blake Frantz (Tue May 21 2002 - 16:44:34 CDT)
• Re: Worms and CScript/WScript Ryan Russell (Tue May 21 2002 - 17:07:20 CDT)
• RE: Worms and CScript/WScript verbalmrverbal.com (Tue May 21 2002 - 17:17:37 CDT)
• RE: Worms and CScript/WScript Michael Wright (Tue May 21 2002 - 18:25:47 CDT)
• RE: Worms and CScript/WScript Nick FitzGerald (Wed May 22 2002 - 00:04:30 CDT)
• 1999-2000 oops wirepair (Thu May 23 2002 - 05:52:30 CDT)
• Interesting scan to ports 1999-2000 wirepair (Thu May 23 2002 - 05:46:33 CDT)
• Decrease in 1433 Scans? Matt Barton (Thu May 23 2002 - 11:38:13 CDT)
• Re: Decrease in 1433 Scans? loon (Thu May 23 2002 - 11:59:40 CDT)
• Re: Decrease in 1433 Scans? MIS Department (Thu May 23 2002 - 12:22:24 CDT)
• RE: Decrease in 1433 Scans? Salisko, Rick (Thu May 23 2002 - 12:26:04 CDT)
• RE: Decrease in 1433 Scans? John Campbell (Thu May 23 2002 - 12:30:38 CDT)
• odd scans? Scott, Michael R. (Fri May 24 2002 - 12:16:20 CDT)
• Re: odd scans? Kyle R. Hofmann (Fri May 24 2002 - 13:21:24 CDT)
• Re: odd scans? Matt Zimmerman (Fri May 24 2002 - 14:13:02 CDT)
• continues SCAN Proxy attempt Hugo van der Kooij (Fri May 24 2002 - 15:18:12 CDT)
• Re: odd scans? Bamm (Robert) Visscher (Fri May 24 2002 - 15:34:47 CDT)
• Re: continues SCAN Proxy attempt Christian Vogel (Fri May 24 2002 - 15:47:02 CDT)
• strange .ch scan by 195.141.86.145 Andreas Wiesmann (Sat May 25 2002 - 09:36:29 CDT)
• Re: Strange scans Allen Smith (Sat May 25 2002 - 22:03:43 CDT)
• RE: Worms and CScript/WScript Richard H. Cotterell (Sun May 26 2002 - 09:57:20 CDT)
• GET /proxy-test.php Joe Blatz (Sun May 26 2002 - 12:14:12 CDT)
• RE: odd scans? Smith, Donald  (Sun May 26 2002 - 10:23:51 CDT)
• Re: continues SCAN Proxy attempt Russell Fulton (Sun May 26 2002 - 19:32:12 CDT)
• RE: Strange scans Bill Royds (Sun May 26 2002 - 21:25:06 CDT)
• RE: Worms and CScript/WScript Nick FitzGerald (Sun May 26 2002 - 22:07:00 CDT)
• RE: strange .ch scan by 195.141.86.145 List-Collector (Mon May 27 2002 - 06:42:07 CDT)
• AW: strange .ch scan by 195.141.86.145 Pascal C. Kocher (Tue May 28 2002 - 02:03:32 CDT)
• RE: odd scans? Bamm (Robert) Visscher (Tue May 28 2002 - 10:21:30 CDT)
• Re: GET /proxy-test.php Keyser Soze (Tue May 28 2002 - 10:06:59 CDT)
• RE: Worms and CScript/WScript Richard H. Cotterell (Mon May 27 2002 - 20:38:47 CDT)
• strange account in Win2k Mark Fagan (Tue May 28 2002 - 10:29:37 CDT)
• SQLSnake email account shutdown? Javier Sanchez (Information Systems) (Tue May 28 2002 - 10:34:32 CDT)
• RE: Worms and CScript/WScript Dubber, Drew B (Tue May 28 2002 - 11:13:23 CDT)
• Security contacts for cnn,time.com,usatoday,and boston globe needed zeno (Tue May 28 2002 - 11:15:19 CDT)
• RE: strange account in Win2k AJ Decker (Tue May 28 2002 - 12:56:31 CDT)
• RE: strange account in Win2k Rick Darsey (Tue May 28 2002 - 12:34:24 CDT)
• RE: strange account in Win2k Admiraal, J.E. (CDIV) (Tue May 28 2002 - 12:02:41 CDT)
• Re: strange account in Win2k Maxime Ducharme (Tue May 28 2002 - 15:01:15 CDT)
• Compromised Win2000 machine. Daniel Hay (Tue May 28 2002 - 15:15:25 CDT)
• Re: strange account in Win2k Kevin (Tue May 28 2002 - 16:20:13 CDT)
• Re: Compromised Win2000 machine. H C (Tue May 28 2002 - 16:35:00 CDT)
• RE: Security contacts for cnn,time.com,usatoday,and boston globe needed McCammon, Keith (Tue May 28 2002 - 12:44:21 CDT)
• RE: Compromised Win2000 machine. Kit (Tue May 28 2002 - 16:48:27 CDT)
• Re: Security contacts for cnn,time.com,usatoday,and boston globe needed batz (Tue May 28 2002 - 16:56:54 CDT)
• RE: strange account in Win2k Kit (Tue May 28 2002 - 17:08:16 CDT)
• RE: strange account in Win2k dlaumannsuntzu.net (Tue May 28 2002 - 17:36:52 CDT)
• Re: strange account in Win2k Dan Cuthbert (Tue May 28 2002 - 11:59:25 CDT)
• New Stacheldraht? Robert Buckley (Wed May 29 2002 - 10:14:48 CDT)
• RE: Compromised Win2000 machine. Don Weber (Tue May 28 2002 - 17:56:46 CDT)
• parsing output from tools H C (Tue May 28 2002 - 20:35:05 CDT)
• Re: Compromised Win2000 machine. ghb the irrepressible (Tue May 28 2002 - 22:42:17 CDT)
• RE: strange account in Win2k Mark Fagan (Wed May 29 2002 - 04:23:25 CDT)
• RE: Compromised Win2000 machine. H C (Wed May 29 2002 - 12:11:17 CDT)
• RE: New Stacheldraht? Liston, Kevin C, SOLCM (Wed May 29 2002 - 14:44:31 CDT)
• Re: Compromised Win2000 machine. Daniel Hay (Wed May 29 2002 - 13:05:55 CDT)
• Re: Compromised Win2000 machine. H C (Wed May 29 2002 - 15:37:47 CDT)
• Re: odd scans? Brett Glass (Wed May 29 2002 - 15:47:56 CDT)
• Re: Compromised Win2000 machine. Mark Newby (Wed May 29 2002 - 15:38:00 CDT)
• Re: Compromised Win2000 machine. Patrick Andry (Wed May 29 2002 - 16:05:26 CDT)
• Re: Compromised Win2000 machine. H C (Wed May 29 2002 - 21:09:32 CDT)
• Re: AW: strange .ch scan by 195.141.86.145 Rainer Duffner (Thu May 30 2002 - 13:02:51 CDT)
• Re: Compromised Win2000 machine. - Follow UP Daniel Hay (Thu May 30 2002 - 16:27:41 CDT)
• Re: Re[2]: Compromised Win2000 machine. H C (Fri May 31 2002 - 09:22:42 CDT)
• Re[2]: Compromised Win2000 machine. Joris De Donder (Fri May 31 2002 - 08:55:17 CDT)
• Application Scanning 1033/tcp? Crist J. Clark (Fri May 31 2002 - 16:46:05 CDT)
• Re: Application Scanning 1033/tcp? Ned Lowe (Fri May 31 2002 - 17:54:37 CDT)
• Re: Application Scanning 1033/tcp? Muhammad Faisal Rauf Danka (Fri May 31 2002 - 17:16:04 CDT)
• scanning from WANADOO-CABLE-BD Hugo van der Kooij (Sun Jun 02 2002 - 13:16:32 CDT)

Last message date: Sun Jun 02 2002 - 23:21:02 CDT
Archived on: Sun Jun 02 2002 - 23:21:02 CDT