Diaries by Keyword - SANS Internet Storm Center

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Handler on Duty: Jesse La Grew

Threat Level: green

Date	Author	Title
SERIAL PORTS
2011-01-24	Rob VandenBrink	Where have all the COM Ports Gone? - How enumerating COM ports led to me finding a “misplaced” Microsoft tool
SERIAL
2024-02-28/a>	Johannes Ullrich	Exploit Attempts for Unknown Password Reset Vulnerability
2023-05-14/a>	Guy Bruneau	VMware Aria Operations addresses multiple Local Privilege Escalations and a Deserialization issue
2022-09-07/a>	Johannes Ullrich	PHP Deserialization Exploit attempt
2019-06-19/a>	Johannes Ullrich	Critical Actively Exploited WebLogic Flaw Patched CVE-2019-2729
2019-04-25/a>	Rob VandenBrink	Unpatched Vulnerability Alert - WebLogic Zero Day
2018-11-05/a>	Johannes Ullrich	Struts 2.3 Vulnerable to Two Year old File Upload Flaw
2015-11-09/a>	John Bambenek	ICYMI: Widespread Unserialize Vulnerability in Java
2011-01-24/a>	Rob VandenBrink	Where have all the COM Ports Gone? - How enumerating COM ports led to me finding a “misplaced” Microsoft tool
PORTS
2024-04-25/a>	Jesse La Grew	Does it matter if iptables isn't running on my honeypot?
2022-10-31/a>	Rob VandenBrink	NMAP without NMAP - Port Testing and Scanning with PowerShell
2019-03-09/a>	Guy Bruneau	A Comparison Study of SSH Port Activity - TCP 22 & 2222
2018-12-16/a>	Guy Bruneau	Random Port Scan for Open RDP Backdoor
2016-05-26/a>	Xavier Mertens	Keeping an Eye on Tor Traffic
2013-03-03/a>	Richard Porter	Uptick in MSSQL Activity
2011-01-24/a>	Rob VandenBrink	Where have all the COM Ports Gone? - How enumerating COM ports led to me finding a “misplaced” Microsoft tool
2009-01-21/a>	Raul Siles	Traffic increase for port UDP/8247
2008-05-26/a>	Marcus Sachs	Port 1533 on the Rise
2008-04-27/a>	Marcus Sachs	What's With Port 20329?
2008-04-10/a>	Deborah Hale	DSLReports Being Attacked Again

SERIAL PORTS

SERIAL

PORTS