NEOHAPSIS - Peace of Mind Through Integrity and Insight

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com

Neohapsis > Archives > Incidents> 2003-06

217 messages sorted by: [ author ] [ date ] [ thread ]

Starting: Mon Jun 02 2003 - 17:32:51 CDT
Ending: Mon Jun 30 2003 - 15:43:17 CDT

A question for the list...
- Raistlin (Mon Jun 02 2003 - 03:49:42 CDT)
Announcement: SecurityFocus Pen-Test and Firewalls Focus Areas
- Dan Hanson (Tue Jun 03 2003 - 12:04:42 CDT)
Anyone else seeing a spike in SSHd scans?
- Dave Laird (Sun Jun 29 2003 - 12:03:09 CDT)
- p00pinstable.net (Sun Jun 29 2003 - 11:12:19 CDT)
- Dave Laird (Sat Jun 28 2003 - 17:05:51 CDT)
Attack(s) caught by Okena
- Marcus Gavel (Wed Jun 11 2003 - 09:07:57 CDT)
- Chris Fussell (Tue Jun 10 2003 - 16:39:26 CDT)
- Dimitri Limanovski (Tue Jun 10 2003 - 09:53:06 CDT)
AW: Strange CONNECT entries in apache logs
- Stefan Allemann (Mon Jun 09 2003 - 11:55:50 CDT)
bad IP traffic
- operator (Wed Jun 11 2003 - 07:52:16 CDT)
chkrootkit and LKM?
- Tim Greer (Sat Jun 21 2003 - 17:22:43 CDT)
- Andrew Ruef (Thu Jun 19 2003 - 22:34:59 CDT)
- Tim Greer (Wed Jun 18 2003 - 11:21:45 CDT)
- Valdis.Kletnieksvt.edu (Tue Jun 17 2003 - 23:39:53 CDT)
- Rob Shein (Wed Jun 18 2003 - 02:47:44 CDT)
- Blade Runner (Tue Jun 17 2003 - 14:47:52 CDT)
- Adam Sampson (Tue Jun 17 2003 - 02:27:09 CDT)
- Janus N. (Tue Jun 17 2003 - 00:20:06 CDT)
- Guille -bisho- (Tue Jun 17 2003 - 00:15:34 CDT)
- Nathan Dornquast (Mon Jun 16 2003 - 23:14:25 CDT)
- Tim Greer (Mon Jun 16 2003 - 21:34:20 CDT)
- Ali-Reza Anghaie (Mon Jun 16 2003 - 20:26:42 CDT)
- Janus N. (Mon Jun 16 2003 - 09:59:21 CDT)
Dameware Malcode? Is anyone aware of it?
- John Costa (Fri Jun 06 2003 - 11:09:53 CDT)
- John Costa (Thu Jun 05 2003 - 21:30:43 CDT)
- Nick Jacobsen (Thu Jun 05 2003 - 13:15:11 CDT)
- John Ives (Thu Jun 05 2003 - 11:43:58 CDT)
- morning_wood (Thu Jun 05 2003 - 11:43:36 CDT)
- Flory D Jeffrey Contractor 59MDSS/MSISI (Thu Jun 05 2003 - 11:05:39 CDT)
- John (Wed Jun 04 2003 - 13:31:34 CDT)
DoS "Probing" on one of our hosts
- Stone, Alexander (Mon Jun 30 2003 - 12:59:02 CDT)
- Harlan Carvey (Mon Jun 30 2003 - 12:14:27 CDT)
- Christopher Kunz (Mon Jun 30 2003 - 11:47:31 CDT)
- Christopher Kunz (Mon Jun 30 2003 - 11:47:14 CDT)
- Christopher Kunz (Mon Jun 30 2003 - 11:47:50 CDT)
- Christopher Kunz (Mon Jun 30 2003 - 11:34:28 CDT)
- Cook, Christopher S. (Mon Jun 30 2003 - 11:12:26 CDT)
- Donald Voss (Mon Jun 30 2003 - 10:57:40 CDT)
- King, Brian (Mon Jun 30 2003 - 10:21:22 CDT)
- Keith T. Morgan (Mon Jun 30 2003 - 10:04:32 CDT)
- Edward Balas (Mon Jun 30 2003 - 09:37:03 CDT)
- Chris Calvert (Mon Jun 30 2003 - 08:32:01 CDT)
- Christopher Kunz (Mon Jun 30 2003 - 02:37:09 CDT)
- Harlan Carvey (Sun Jun 29 2003 - 18:27:03 CDT)
- Christopher Kunz (Sun Jun 29 2003 - 15:41:50 CDT)
Dubious e-mail: [Fwd: Dell.com (Password Request)]
- John McCracken (Tue Jun 03 2003 - 17:19:37 CDT)
- Kevin Holmquist (Mon Jun 02 2003 - 18:04:23 CDT)
- John McCracken (Mon Jun 02 2003 - 16:17:35 CDT)
- neitherjWellsFargo.COM (Mon Jun 02 2003 - 13:50:32 CDT)
- Jay Woody (Mon Jun 02 2003 - 11:40:22 CDT)
- Cushing, David (Mon Jun 02 2003 - 08:39:27 CDT)
File Folders Own Changed
- Alex 'CAVE' Cernat (Thu Jun 05 2003 - 09:43:12 CDT)
- Faisal (Wed Jun 04 2003 - 22:39:53 CDT)
File on desktop called "~"
- http-equivexcite.com (Fri Jun 13 2003 - 16:31:24 CDT)
- David McBeth [VMACS] (Fri Jun 13 2003 - 13:41:38 CDT)
- http-equivexcite.com (Thu Jun 12 2003 - 21:47:15 CDT)
- Nick FitzGerald (Thu Jun 12 2003 - 18:35:00 CDT)
- Patrick Nolan (Thu Jun 12 2003 - 17:45:01 CDT)
- Kurt Seifried (Thu Jun 12 2003 - 17:23:16 CDT)
- Sander van Vliet (Thu Jun 12 2003 - 15:45:06 CDT)
- riceup.edu (Thu Jun 12 2003 - 12:33:59 CDT)
Help with an odd log file...
- James C. Slora Jr. (Wed Jun 11 2003 - 20:28:44 CDT)
- Fabio Panigatti (Mon Jun 09 2003 - 11:58:27 CDT)
- James C. Slora Jr. (Sun Jun 08 2003 - 12:41:17 CDT)
- James C. Slora Jr. (Sat Jun 07 2003 - 20:29:27 CDT)
- Golden Faron P Contr HQ SSG/SWSN (Fri Jun 06 2003 - 10:55:25 CDT)
- Fabio Panigatti (Thu Jun 05 2003 - 08:01:35 CDT)
- sec_slavehushmail.com (Wed Jun 04 2003 - 10:24:32 CDT)
- Brad Bemis (Wed Jun 04 2003 - 10:19:03 CDT)
- morning_wood (Tue Jun 03 2003 - 17:54:08 CDT)
- sec_slavehushmail.com (Tue Jun 03 2003 - 16:03:36 CDT)
Help with identifying scan/attack
- Valdis.Kletnieksvt.edu (Sun Jun 15 2003 - 23:48:58 CDT)
- Derrick Teo (Fri Jun 13 2003 - 05:35:43 CDT)
Hmm....901
- Jason Falciola (Mon Jun 09 2003 - 14:45:34 CDT)
- Florin Andrei (Thu Jun 05 2003 - 13:21:33 CDT)
- Curt Wilson (Tue Jun 03 2003 - 13:54:37 CDT)
- cvonancken (Tue Jun 03 2003 - 13:42:46 CDT)
- morning_wood (Tue Jun 03 2003 - 06:18:25 CDT)
- Brian Taylor (Mon Jun 02 2003 - 18:17:40 CDT)
- David Kennedy CISSP (Mon Jun 02 2003 - 02:35:22 CDT)
IANA Reserved IP Source scans 55808
- Taylor, David (Thu Jun 19 2003 - 18:58:37 CDT)
Intrusec 55808 Trojan Analysis
- Philippe Bourgeois (Fri Jun 27 2003 - 07:44:54 CDT)
- Peter Busser (Wed Jun 25 2003 - 02:02:04 CDT)
- David J. Meltzer (Tue Jun 24 2003 - 09:54:52 CDT)
- Valdis.Kletnieksvt.edu (Mon Jun 23 2003 - 20:20:13 CDT)
- gwhy555yahoo.com (Sun Jun 22 2003 - 01:30:26 CDT)
- David J. Meltzer (Fri Jun 20 2003 - 05:59:15 CDT)
- David J. Meltzer (Thu Jun 19 2003 - 15:25:57 CDT)
IRC botnets
- Angelz (Mon Jun 09 2003 - 17:46:36 CDT)
- Dayne Jordan (Fri Jun 06 2003 - 10:52:19 CDT)
ISS "Stumbler" advisory questions
- Joe Stewart (Fri Jun 20 2003 - 09:08:22 CDT)
Japanese "IPv6" group allocating for IPv4 spamming?
- Dale Fay (Fri Jun 06 2003 - 11:18:46 CDT)
- Robert Hajime Lanning (Fri Jun 06 2003 - 14:13:55 CDT)
KazaaLite 2.0.2 Build 1
- Alex Lambert (Wed Jun 04 2003 - 10:02:59 CDT)
- Jimi Thompson (Tue Jun 03 2003 - 22:05:44 CDT)
- drake insurance (Wed Jun 04 2003 - 02:21:10 CDT)
- p00pinstable.net (Mon Jun 02 2003 - 20:20:01 CDT)
- matt (Mon Jun 02 2003 - 06:55:23 CDT)
kuag2 again?
- John Smaction (Sun Jun 22 2003 - 03:37:20 CDT)
nscd poisoning?
- Michael Loftis (Thu Jun 12 2003 - 00:15:50 CDT)
odd RST packets with 55808
- Golden Faron P Contr HQ SSG/SWSN (Thu Jun 19 2003 - 15:56:38 CDT)
Odd SYN packet spoofed sources
- Golden Faron P Contr HQ SSG/SWSN (Wed Jun 11 2003 - 13:04:34 CDT)
Odd windows ICMP... any ideas what this is?
- Raistlin (Fri Jun 13 2003 - 16:28:14 CDT)
- Eugene Borukhovich (Mon Jun 09 2003 - 21:59:24 CDT)
- Mika Boström (Mon Jun 09 2003 - 14:52:54 CDT)
- Ryan Yagatich (Mon Jun 09 2003 - 12:39:26 CDT)
- Jonathan Clark (Mon Jun 09 2003 - 13:01:54 CDT)
- ted klugman (Mon Jun 09 2003 - 11:04:38 CDT)
One observed pattern of Win 55808 packets
- Golden Faron P Contr HQ SSG/SWSN (Wed Jun 18 2003 - 17:05:28 CDT)
port 5248
- Brian Collins (Thu Jun 26 2003 - 22:50:33 CDT)
possible new irc worm
- Chris Ess (Sat Jun 28 2003 - 18:18:55 CDT)
- Axel Pettinger (Sat Jun 28 2003 - 16:23:25 CDT)
- Paolo Monti (Sat Jun 28 2003 - 14:10:04 CDT)
- Chris Ess (Sat Jun 28 2003 - 00:52:16 CDT)
- rewteghetto.ca (Fri Jun 27 2003 - 23:00:14 CDT)
- Becky (Fri Jun 27 2003 - 22:54:40 CDT)
- ZSisic (Fri Jun 27 2003 - 14:44:23 CDT)
Questionable UDP traffic received by firewall
- Earl Hood (Wed Jun 25 2003 - 16:58:06 CDT)
Re(2): Help with an odd log file...
- Ken Eichman (Mon Jun 09 2003 - 14:58:52 CDT)
- Ken Eichman (Mon Jun 09 2003 - 11:11:11 CDT)
Request for Raw Data
- DBoulineau (Thu Jun 12 2003 - 10:09:53 CDT)
- Curt Wilson (Wed Jun 11 2003 - 14:47:21 CDT)
- dknappcalpoly.edu (Wed Jun 11 2003 - 14:35:43 CDT)
- Rosado, Rafael (Rafael) (Wed Jun 11 2003 - 14:25:21 CDT)
- Altheide, Cory B. (Tue Jun 10 2003 - 16:58:57 CDT)
- Brad Bemis (Tue Jun 10 2003 - 16:57:51 CDT)
- Boulineau Danny C Contractor 33 IOS/DOOO (Tue Jun 10 2003 - 16:12:43 CDT)
rooted by blowkit
- raul_aldazhotmail.com (Thu Jun 26 2003 - 17:39:43 CDT)
Scan from Philipine Center on Transnational Crime
- ATD (Mon Jun 23 2003 - 23:11:24 CDT)
- Joe Blatz (Sun Jun 22 2003 - 13:33:03 CDT)
sdbot variant and port 55808 activity
- Kester, Kelly (Fri Jun 20 2003 - 07:52:10 CDT)
- Michael H. Warfield (Wed Jun 18 2003 - 10:51:30 CDT)
- Joe Stewart (Wed Jun 18 2003 - 09:45:08 CDT)
sdbot variant and winsize 55808 activity
- Joe Stewart (Thu Jun 19 2003 - 13:23:01 CDT)
- Joe Stewart (Wed Jun 18 2003 - 11:04:23 CDT)
sdbot variant and WS 55808 activity
- digigal11hushmail.com (Fri Jun 20 2003 - 10:57:14 CDT)
- Anders Reed Mohn (Fri Jun 20 2003 - 04:19:57 CDT)
- James C. Slora, Jr. (Thu Jun 19 2003 - 12:32:53 CDT)
- H Carvey (Thu Jun 19 2003 - 15:32:01 CDT)
- Richard Ginski (Thu Jun 19 2003 - 10:55:49 CDT)
SecurityFocus Article Announcements (3)
- Dan Hanson (Wed Jun 11 2003 - 12:25:02 CDT)
SNMP search for printers?
- Jeff Kell (Thu Jun 19 2003 - 12:18:03 CDT)
- Johnson, Greg (Thu Jun 19 2003 - 07:58:38 CDT)
- morning_wood (Wed Jun 18 2003 - 11:37:08 CDT)
- Dave Killion (Wed Jun 18 2003 - 11:44:50 CDT)
- exon (Wed Jun 18 2003 - 10:28:46 CDT)
- christian houle (Wed Jun 18 2003 - 07:36:31 CDT)
- Chris Reining (Tue Jun 17 2003 - 22:39:10 CDT)
- Aaron Cheek (Tue Jun 17 2003 - 19:49:19 CDT)
speaking of rootkits
- jlewislewis.org (Sat Jun 28 2003 - 12:43:26 CDT)
Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log f ile...)
- Andy Streule (Fri Jun 20 2003 - 05:39:39 CDT)
- Taylor, David (Wed Jun 18 2003 - 05:31:21 CDT)
- Konigsberg, Bob J. (Thu Jun 12 2003 - 14:25:13 CDT)
Spoofed TCP SYNs w/Winsize 55808 (was: Help with an odd log file...)
- Michael H. Warfield (Wed Jun 18 2003 - 10:42:01 CDT)
- exon (Wed Jun 18 2003 - 10:17:00 CDT)
- Jim Butterworth (Tue Jun 17 2003 - 22:06:07 CDT)
- Anders Reed Mohn (Tue Jun 17 2003 - 05:28:43 CDT)
- Mike (Fri Jun 13 2003 - 15:59:57 CDT)
- Fabio Panigatti (Fri Jun 13 2003 - 11:27:11 CDT)
- Ken Eichman (Thu Jun 12 2003 - 12:28:54 CDT)
strange cmd.exe access
- MacDougall, Shane (Wed Jun 04 2003 - 23:22:03 CDT)
Strange CONNECT entries in apache logs
- Thomas Jensen (Thu Jun 12 2003 - 16:09:18 CDT)
- Thomas Jensen (Thu Jun 12 2003 - 15:58:06 CDT)
- Christine Kronberg (Thu Jun 12 2003 - 04:15:03 CDT)
- Christine Kronberg (Thu Jun 12 2003 - 04:05:56 CDT)
- OSCAR (Thu Jun 12 2003 - 07:24:11 CDT)
- OSCAR (Thu Jun 12 2003 - 07:19:32 CDT)
- OSCAR (Wed Jun 11 2003 - 21:02:16 CDT)
- Darryl Luff (Tue Jun 10 2003 - 23:05:21 CDT)
- Thomas Jensen (Wed Jun 11 2003 - 02:53:17 CDT)
- p00pinstable.net (Tue Jun 10 2003 - 19:48:52 CDT)
- OSCAR (Tue Jun 10 2003 - 23:51:49 CDT)
- John Lampe (Tue Jun 10 2003 - 18:25:43 CDT)
- Christine Kronberg (Mon Jun 09 2003 - 15:34:50 CDT)
- Paul Wilson (Mon Jun 09 2003 - 11:03:21 CDT)
- Tomasz Onyszko (Mon Jun 09 2003 - 11:00:26 CDT)
- Rajkumar S (Fri Jun 06 2003 - 11:34:50 CDT)
strange logs -- tcp port 16166
- Justin Pryzby (Thu Jun 26 2003 - 21:53:13 CDT)
- tcleary2csc.com.au (Thu Jun 26 2003 - 00:51:03 CDT)
- James C. Slora Jr. (Wed Jun 25 2003 - 18:29:14 CDT)
- Jerry Shenk (Wed Jun 25 2003 - 14:16:37 CDT)
- James C. Slora, Jr. (Wed Jun 25 2003 - 11:20:12 CDT)
- Jerry Shenk (Wed Jun 25 2003 - 06:39:43 CDT)
- Jiang Peng (Tue Jun 24 2003 - 22:00:16 CDT)
strange traffic on UDP port 53
- Anders Reed Mohn (Thu Jun 12 2003 - 03:39:50 CDT)
- Ronald Belchez (Wed Jun 11 2003 - 11:45:46 CDT)
- Greg A. Woods (Mon Jun 09 2003 - 14:11:53 CDT)
- Greg A. Woods (Mon Jun 09 2003 - 11:57:11 CDT)
- David Gillett (Mon Jun 09 2003 - 13:38:08 CDT)
- Quarantine (Mon Jun 09 2003 - 10:55:52 CDT)
- Valdis.Kletnieksvt.edu (Fri Jun 06 2003 - 20:04:03 CDT)
- David Gillett (Fri Jun 06 2003 - 12:35:34 CDT)
- Roger A. Grimes (Fri Jun 06 2003 - 11:47:07 CDT)
- Mike (Fri Jun 06 2003 - 02:39:52 CDT)
- Rodney Green (Thu Jun 05 2003 - 15:19:06 CDT)
- Valdis.Kletnieksvt.edu (Thu Jun 05 2003 - 14:35:37 CDT)
- Ronald Belchez (Wed Jun 04 2003 - 16:13:47 CDT)
Traffic with 55808 tcp windows size: news.
- Fabio Panigatti (Thu Jun 26 2003 - 09:13:37 CDT)
UDP/41170
- Aaron Cheek (Tue Jun 17 2003 - 20:11:04 CDT)
- alaricalaricsecurity.com (Tue Jun 17 2003 - 04:22:53 CDT)
Unusual registry entries
- Jasmine (Fri Jun 20 2003 - 08:59:35 CDT)
- Brad (Thu Jun 19 2003 - 22:25:12 CDT)
- btraqueratt.net (Thu Jun 19 2003 - 15:14:35 CDT)
War Dial on my PBX
- .:[ Death Star]:. (Wed Jun 25 2003 - 23:52:51 CDT)
- Maria J. Vello (Wed Jun 25 2003 - 13:43:00 CDT)
- Volker Tanger (Wed Jun 25 2003 - 11:37:39 CDT)
- Cotter, Joe (Wed Jun 25 2003 - 07:04:12 CDT)
- Dave Phelps (Wed Jun 25 2003 - 01:03:26 CDT)
- David Barnett (Tue Jun 24 2003 - 17:41:25 CDT)
Wierd Profile in Document Settings
- Tim Recher (Tue Jun 17 2003 - 08:05:36 CDT)
- L Whiteside (Mon Jun 16 2003 - 10:54:30 CDT)
Windows 2k rootkit incident
- Drew Weaver (Thu Jun 12 2003 - 18:47:58 CDT)
Windows 2k rootkit incident, files zipped for your pleasure.
- defaillancehushmail.com (Fri Jun 13 2003 - 11:14:47 CDT)
- Dan Perez (Thu Jun 12 2003 - 19:09:46 CDT)
- Karl Larsson (Fri Jun 13 2003 - 02:41:12 CDT)
- John Ives (Thu Jun 12 2003 - 14:58:59 CDT)
- Drew Weaver (Thu Jun 12 2003 - 10:57:23 CDT)

Last message date: Mon Jun 30 2003 - 15:43:17 CDT
Archived on: Mon Jun 30 2003 - 15:43:18 CDT

217 messages sorted by: [ author ] [ date ] [ thread ]