Starting: Sun Dec 01 2002 - 22:06:06 CST
Ending: Mon Dec 30 2002 - 17:53:02 CST

• RE: Bad protocol version identification '^V^C^A' Bojan Zdrnja (Sun Dec 01 2002 - 03:15:49 CST)
• Re: Bad protocol version identification '^V^C^A' D.C. van Moolenbroek (Sun Dec 01 2002 - 14:03:25 CST)
• Re: Bad protocol version identification '^V^C^A' Matt Harris (Mon Dec 02 2002 - 08:51:34 CST)
• RE: New scanner? Rob Shein (Sun Dec 01 2002 - 23:09:42 CST)
• Re: TCP:80, TCP:1433 squelda 1.0 probe Joe Stewart (Mon Dec 02 2002 - 07:53:24 CST)
• [Fwd: XSS on ICQ leading to password compromise] Rafael Coninck Teigao (Mon Dec 02 2002 - 10:29:37 CST)
• Re: TCP:80, TCP:1433 squelda 1.0 probe John Sage (Mon Dec 02 2002 - 18:29:30 CST)
• Incident tracking database Danny (Tue Dec 03 2002 - 10:05:51 CST)
• Re: Incident tracking database Paul Gillingwater (Wed Dec 04 2002 - 02:33:42 CST)
• recent rds vuln Study List (Wed Dec 04 2002 - 09:42:59 CST)
• Re: Incident tracking database Chip Mefford (Wed Dec 04 2002 - 06:41:34 CST)
• Re: Incident tracking database Steven Hong (Wed Dec 04 2002 - 08:03:28 CST)
• Re: Incident tracking database james (Wed Dec 04 2002 - 01:55:15 CST)
• Re: Incident tracking database Holger Kipp (Wed Dec 04 2002 - 02:13:37 CST)
• Re: Incident tracking database Russell Fulton (Wed Dec 04 2002 - 20:15:41 CST)
• A small quandary Mahoney, Paul (Wed Dec 04 2002 - 22:30:08 CST)
• Black Ice small segment size FTP attack caused by FX-scanner Curt Wilson (Thu Dec 05 2002 - 17:02:15 CST)
• Re: Incident tracking database Chris Adams (Fri Dec 06 2002 - 00:24:25 CST)
• netbios vuln ohnonono_at_hushmail.com (Fri Dec 06 2002 - 08:50:02 CST)
• RE: A small quandary Jerry Shenk (Fri Dec 06 2002 - 07:35:36 CST)
• RE: A small quandary Rob Shein (Fri Dec 06 2002 - 09:57:06 CST)
• Re: A small quandary H C (Fri Dec 06 2002 - 07:49:11 CST)
• Re: A small quandary Mike Katz (Fri Dec 06 2002 - 12:41:35 CST)
• Does W2k issue an NBNS query automatically following each unsuccessful reverse DNS query? Jack Arenberg (Sat Dec 07 2002 - 10:51:10 CST)
• high activity on port 3061 udp/tcp Marcelo Bartsch (Fri Dec 06 2002 - 15:25:49 CST)
• Spam via proxy listuser (Sat Dec 07 2002 - 11:52:37 CST)
• Re: A small quandary gminick (Sat Dec 07 2002 - 12:27:40 CST)
• EBay Fraud Attempt Logan F.D. Greenlee (Sat Dec 07 2002 - 09:25:29 CST)
• Re: Spam via proxy Christopher X. Candreva (Sun Dec 08 2002 - 21:50:04 CST)
• Re: EBay Fraud Attempt Stephen Friedl (Sun Dec 08 2002 - 22:15:40 CST)
• Re: netbios vuln KoRe MeLtDoWn (Sun Dec 08 2002 - 22:25:03 CST)
• Odd entries in my Security Router logs Julian Young (Mon Dec 09 2002 - 03:37:47 CST)
• Re: Spam via proxy J.Francois (Sun Dec 08 2002 - 22:36:03 CST)
• Re: Spam via proxy Jefferson Ogata (Mon Dec 09 2002 - 10:04:34 CST)
• what else you can do with worm networks...fun, profit, etc Anton A. Chuvakin (Mon Dec 09 2002 - 12:27:24 CST)
• Re: netbios vuln H C (Mon Dec 09 2002 - 08:12:47 CST)
• Fwd: EBay Fraud Attempt Dave Laird (Mon Dec 09 2002 - 02:30:17 CST)
• Re: EBay Fraud Attempt jlewis_at_lewis.org (Sun Dec 08 2002 - 22:45:22 CST)
• Re: Spam via proxy Volker Tanger (Mon Dec 09 2002 - 04:10:46 CST)
• Re: netbios vuln Nick FitzGerald (Mon Dec 09 2002 - 03:36:51 CST)
• Re: netbios vuln Valdis.Kletnieks_at_vt.edu (Mon Dec 09 2002 - 00:58:48 CST)
• Re: Spam via proxy jlewis_at_lewis.org (Sun Dec 08 2002 - 22:22:25 CST)
• Re: EBay Fraud Attempt Waitman C. Gobble, II (Mon Dec 09 2002 - 00:34:21 CST)
• RE: A small quandary Bojan Zdrnja (Mon Dec 09 2002 - 05:02:48 CST)
• Re: Spam via proxy Joe Stewart (Mon Dec 09 2002 - 07:31:59 CST)
• Re: EBay Fraud Attempt Chris A. Mattingly (Tue Dec 10 2002 - 00:01:52 CST)
• RE: EBay Fraud Attempt Carlo Costanzo (Tue Dec 10 2002 - 00:13:33 CST)
• Re: EBay Fraud Attempt Kee Hinckley (Tue Dec 10 2002 - 00:17:28 CST)
• RE: Odd entries in my Security Router logs Jim Terry (Tue Dec 10 2002 - 04:22:37 CST)
• RE: Odd entries in my Security Router logs Andrews, Jonathan (US - Hermitage) (Tue Dec 10 2002 - 11:17:54 CST)
• RE: EBay Fraud Attempt george.wasgatt_at_insurity.com (Tue Dec 10 2002 - 07:40:15 CST)
• RE: EBay Fraud Attempt OBrien, Brennan (Tue Dec 10 2002 - 09:43:13 CST)
• Re: EBay Fraud Attempt Dave Laird (Tue Dec 10 2002 - 01:58:05 CST)
• RE: Odd entries in my Security Router logs Julian Young (Wed Dec 11 2002 - 02:53:54 CST)
• Re: EBay Fraud Attempt Stephen J. Friedl (Tue Dec 10 2002 - 11:18:43 CST)
• RE: Odd entries in my Security Router logs Julian Young (Tue Dec 10 2002 - 05:28:45 CST)
• RE: EBay Fraud Attempt Chris Gordon (Wed Dec 11 2002 - 11:46:03 CST)
• Re: Odd entries in my Security Router logs Michael Sierchio (Wed Dec 11 2002 - 12:08:49 CST)
• strange attractors or weaknesses in Nimda's prng Russell Fulton (Wed Dec 11 2002 - 03:46:34 CST)
• Re: EBay Fraud Attempt Mark (Wed Dec 11 2002 - 12:19:47 CST)
• Re: Odd entries in my Security Router logs James C. Slora Jr. (Wed Dec 11 2002 - 12:44:47 CST)
• RE: Odd entries in my Security Router logs David Gillett (Wed Dec 11 2002 - 14:59:12 CST)
• DNS help larosa, vjay (Wed Dec 11 2002 - 15:09:49 CST)
• Re: Odd entries in my Security Router logs Valdis.Kletnieks_at_vt.edu (Thu Dec 12 2002 - 11:09:38 CST)
• Re: Odd entries in my Security Router logs HggdH (Wed Dec 11 2002 - 16:11:55 CST)
• Re: Odd entries in my Security Router logs Valdis.Kletnieks_at_vt.edu (Thu Dec 12 2002 - 12:01:33 CST)
• RE: DNS help larosa, vjay (Thu Dec 12 2002 - 13:54:29 CST)
• Re: DNS help Valdis.Kletnieks_at_vt.edu (Thu Dec 12 2002 - 14:05:03 CST)
• RE: DNS help Tom Arseneault (Thu Dec 12 2002 - 15:24:40 CST)
• RE: DNS help Faron.Golden_at_Gunter.AF.mil (Thu Dec 12 2002 - 15:58:41 CST)
• Re: DNS help Valdis.Kletnieks_at_vt.edu (Thu Dec 12 2002 - 11:17:35 CST)
• Rooted, .haos on system Damian Gerow (Thu Dec 12 2002 - 17:50:22 CST)
• Logs: Many hits with source port of 80 Byrne Ghavalas (Fri Dec 13 2002 - 04:05:56 CST)
• Terminal Services / TsInternetUser [RMC-RUFLVP4] Romulo M. Cholewa (Sat Dec 14 2002 - 16:37:03 CST)
• Win2k Audit Logs - What happened here? Johnny Walker (Sun Dec 15 2002 - 20:50:57 CST)
• Re: Logs: Many hits with source port of 80 Valdis.Kletnieks_at_vt.edu (Mon Dec 16 2002 - 10:01:45 CST)
• Re: Many hits with source port of 80 Maxime Ducharme (Mon Dec 16 2002 - 11:01:57 CST)
• RE: Logs: Many hits with source port of 80 James C Slora Jr (Mon Dec 16 2002 - 07:37:20 CST)
• Re: Logs: Many hits with source port of 80 Russell Fulton (Sun Dec 15 2002 - 20:13:53 CST)
• Re: Logs: Many hits with source port of 80 Byrne Ghavalas (Mon Dec 16 2002 - 08:21:14 CST)
• Re: Logs: Many hits with source port of 80 Joe Stewart (Mon Dec 16 2002 - 09:27:32 CST)
• Re: DNS help Matt Zimmerman (Sun Dec 15 2002 - 16:47:52 CST)
• Re: Rooted, .haos on system Damian Gerow (Mon Dec 16 2002 - 11:38:33 CST)
• Re: Logs: Many hits with source port of 80 Kevin Bowman (Mon Dec 16 2002 - 12:54:03 CST)
• Re: Rooted, .haos on system Damian Gerow (Mon Dec 16 2002 - 12:47:28 CST)
• RE: Win2k Audit Logs - What happened here? george.wasgatt_at_insurity.com (Mon Dec 16 2002 - 13:19:17 CST)
• RE: Logs: Many hits with source port of 80 James C Slora Jr (Mon Dec 16 2002 - 14:29:52 CST)
• Re: Rooted, .haos on system Mattias Hedenskog (Mon Dec 16 2002 - 14:51:17 CST)
• Re: Rooted, .haos on system Mike Katz (Mon Dec 16 2002 - 13:31:23 CST)
• Re: Rooted, .haos on system zeno (Mon Dec 16 2002 - 14:54:02 CST)
• Re: Rooted, .haos on system Carlos Eduardo Pedroza Santiviago (Mon Dec 16 2002 - 14:31:03 CST)
• Re: Rooted, .haos on system zeno (Mon Dec 16 2002 - 15:27:10 CST)
• Re: Rooted, .haos on system Damian Gerow (Mon Dec 16 2002 - 15:36:46 CST)
• Re: Win2k Audit Logs - What happened here? H C (Mon Dec 16 2002 - 15:41:32 CST)
• fswserv.html ???? James-lists (Mon Dec 16 2002 - 16:49:03 CST)
• Iraq Oil worm Stephen Friedl (Mon Dec 16 2002 - 18:04:57 CST)
• Worm on 445/tcp? Scott A.McIntyre (Tue Dec 17 2002 - 01:56:02 CST)
• Re: Rooted, .haos on system Julian Young (Tue Dec 17 2002 - 02:14:00 CST)
• New CIFS (port 445) worm? David Gillett (Tue Dec 17 2002 - 10:30:13 CST)
• Re[2]: Rooted, .haos on system Oliver.C.Rochford CFH (Tue Dec 17 2002 - 02:36:28 CST)
• FW: Lioten Worm 135-139 and 445 Pricher Jeffrey Contr AFCA/GCF (Tue Dec 17 2002 - 11:43:33 CST)
• Re: fswserv.html ???? dev (Mon Dec 16 2002 - 17:40:32 CST)
• RE: Worm on 445/tcp? OBrien, Brennan (Tue Dec 17 2002 - 11:31:42 CST)
• Re: New CIFS (port 445) worm? Zen (Tue Dec 17 2002 - 12:03:38 CST)
• Re: fswserv.html ???? james (Tue Dec 17 2002 - 11:36:38 CST)
• Re: Worm on 445/tcp? Scott Fendley (Tue Dec 17 2002 - 11:24:42 CST)
• Re: fswserv.html ???? Adam Bultman (Tue Dec 17 2002 - 12:25:05 CST)
• Re: fswserv.html ???? james (Tue Dec 17 2002 - 13:17:31 CST)
• Re: Worm on 445/tcp? Tom.Gast_at_walgreens.com (Tue Dec 17 2002 - 13:52:55 CST)
• Re: Worm on 445/tcp? Joe Blatz (Tue Dec 17 2002 - 13:50:10 CST)
• Re: Worm on 445/tcp? Stephen J. Friedl (Tue Dec 17 2002 - 14:34:35 CST)
• Re: Worm on 445/tcp? james (Tue Dec 17 2002 - 14:54:45 CST)
• IRC -> smtp worm? Joao Gouveia (Tue Dec 17 2002 - 20:37:08 CST)
• Re: Worm on 445/tcp? Ryan Yagatich (Tue Dec 17 2002 - 19:41:58 CST)
• Re: Worm on 445/tcp? Stephen Friedl (Tue Dec 17 2002 - 19:46:55 CST)
• abuse of open transparent proxies horape_at_tinuviel.compendium.net.ar (Tue Dec 17 2002 - 20:58:29 CST)
• Re: IRC -> smtp worm? Þórhallur Hálfdánarson (Wed Dec 18 2002 - 10:45:51 CST)
• Re: IRC -> smtp worm? H C (Wed Dec 18 2002 - 10:00:37 CST)
• Re: IRC -> smtp worm? Eric Chien (Wed Dec 18 2002 - 12:53:31 CST)
• Re: Worm on 445/tcp? Kyle Lai (Thu Dec 19 2002 - 15:06:28 CST)
• RPAT - Realtime Proxy Abuse Triangulation Stephen Friedl (Fri Dec 20 2002 - 10:17:15 CST)
• hpd, afb, sc, and sn Gordon Chamberlin (Fri Dec 20 2002 - 15:11:31 CST)
• port 3717/udp? Jacek Lipkowski (Fri Dec 20 2002 - 12:23:08 CST)
• Compromised System RH7.3-ICMP-STP-DoS Ron Gedye (Fri Dec 20 2002 - 15:38:20 CST)
• Re: hpd, afb, sc, and sn gminick (Sat Dec 21 2002 - 04:53:33 CST)
• Re: hpd, afb, sc, and sn Greg Barnes (Fri Dec 20 2002 - 16:19:04 CST)
• Re: hpd, afb, sc, and sn Brad Arlt (Fri Dec 20 2002 - 16:28:48 CST)
• TsInternetUser priv. escalation; blank passwords; service passwords Curt Wilson (Mon Dec 23 2002 - 02:05:32 CST)
• RE: hpd, afb, sc, and sn Bojan Zdrnja (Sat Dec 21 2002 - 09:16:27 CST)
• Re: hpd, afb, sc, and sn deadcalm_at_treshna.com (Sun Dec 22 2002 - 21:49:33 CST)
• strange traffic securitynotice_at_cronus.cnicinc.com (Sun Dec 22 2002 - 22:30:31 CST)
• Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second alfaentomega (Mon Dec 23 2002 - 23:33:59 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Kurt Seifried (Tue Dec 24 2002 - 11:58:05 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Mathias Wegner (Tue Dec 24 2002 - 11:21:31 CST)
• Re: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second Pavel Kankovsky (Thu Dec 26 2002 - 09:50:51 CST)
• Re: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second Fyodor (Tue Dec 24 2002 - 13:18:16 CST)
• Re: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second alfaentomega (Fri Dec 27 2002 - 02:52:26 CST)
• RE: strange traffic Rob Shein (Tue Dec 24 2002 - 14:07:16 CST)
• NIMDA - ceased ? - Tomo (Wed Dec 25 2002 - 11:00:00 CST)
• RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second alfaentomega (Fri Dec 27 2002 - 02:44:19 CST)
• Re: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second alfaentomega (Fri Dec 27 2002 - 02:27:47 CST)
• RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second alfaentomega (Fri Dec 27 2002 - 02:36:29 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Stephen Friedl (Tue Dec 24 2002 - 12:33:19 CST)
• RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second Charles.Fasching_at_milestonesystems.com (Thu Dec 26 2002 - 16:47:37 CST)
• RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second Hornat, Charles (Fri Dec 27 2002 - 10:57:50 CST)
• Re: NIMDA - ceased ? - Neil Dickey (Fri Dec 27 2002 - 11:25:35 CST)
• Re: NIMDA - ceased ? - Johannes Ullrich (Fri Dec 27 2002 - 11:12:12 CST)
• Re: NIMDA - ceased ? - Jay D. Dyson (Fri Dec 27 2002 - 11:57:48 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Jay D. Dyson (Fri Dec 27 2002 - 12:21:18 CST)
• Re: NIMDA - ceased ? - Skip Carter (Fri Dec 27 2002 - 11:58:02 CST)
• Re: NIMDA - ceased ? - James C. Slora Jr. (Fri Dec 27 2002 - 12:36:51 CST)
• RE: Random unprivileged TCP ports below 5000 kind-of open for a fraction of a second H C (Fri Dec 27 2002 - 13:35:16 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Kevin Reardon (Fri Dec 27 2002 - 12:55:29 CST)
• Re: NIMDA - ceased ? - Roger Thompson (Fri Dec 27 2002 - 17:47:47 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Jay D. Dyson (Sat Dec 28 2002 - 00:51:09 CST)
• RE: RPAT - Realtime Proxy Abuse Triangulation Rob Shein (Fri Dec 27 2002 - 19:00:16 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Gary Flynn (Sat Dec 28 2002 - 08:46:55 CST)
• RE: RPAT - Realtime Proxy Abuse Triangulation Rob Shein (Mon Dec 30 2002 - 11:45:20 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Greg Barnes (Mon Dec 30 2002 - 13:06:35 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Greg Barnes (Mon Dec 30 2002 - 13:25:07 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Jay D. Dyson (Mon Dec 30 2002 - 13:45:35 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Greg Barnes (Mon Dec 30 2002 - 14:05:54 CST)
• Re: RPAT - Realtime Proxy Abuse Triangulation Syzop (Mon Dec 30 2002 - 15:12:59 CST)
• Virus? Trojan? David Gillett (Mon Dec 30 2002 - 16:03:18 CST)
• Re: Virus? Trojan? Peter Kruse (Mon Dec 30 2002 - 17:42:42 CST)

Last message date: Mon Dec 30 2002 - 17:53:02 CST
Archived on: Mon Dec 30 2002 - 17:53:02 CST