SnortSnarf alert page

Source: 128.121.10.67: #1-100

SnortSnarf v021111.1

Signature section (91123)

Top 20 source IPs

Top 20 dest IPs

Looking using input module SnortFileInput, with sources:

/home/rivettmj/snort_alertlog/alert

Earliest: 15:36:55.212523 on 04/24/2003
Latest: 12:34:31.885194 on 05/19/2003

2 different signatures are present for 128.121.10.67 as a source

35 instances of SHELLCODE x86 inc ebx NOOP
121 instances of SHELLCODE x86 NOOP

There are 1 distinct destination IPs in the alerts of the type on this page.

128.121.10.67 Whois lookup at: ARIN RIPE APNIC Geektools

DNS lookup at: Amenesi TRIUMF Princeton

More lookup links: Dshield Sam Spade

Go to: next range, all alerts, overview page

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
04/24-15:36:55.212523 128.121.10.67:119 -> 192.168.1.101:2114
TCP TTL:111 TOS:0x0 ID:2262 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4616FC20  Ack: 0xAA1CF0CB  Win: 0xF958  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
04/24-15:52:52.408811 128.121.10.67:119 -> 192.168.1.101:2386
TCP TTL:111 TOS:0x0 ID:19549 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6AC4459C  Ack: 0xB86C5AA3  Win: 0xFA48  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
04/24-15:52:53.867455 128.121.10.67:119 -> 192.168.1.101:2387
TCP TTL:111 TOS:0x0 ID:23867 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6AC0892E  Ack: 0xB872CC07  Win: 0xFA0C  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/08-14:45:41.308763 128.121.10.67:119 -> 192.168.1.101:2758
TCP TTL:111 TOS:0x0 ID:65416 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x10A94227  Ack: 0xF2E32B4C  Win: 0xF62E  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/08-14:45:41.310114 128.121.10.67:119 -> 192.168.1.101:2758
TCP TTL:111 TOS:0x0 ID:65417 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x10A947DB  Ack: 0xF2E32B4C  Win: 0xF62E  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/08-14:45:41.320541 128.121.10.67:119 -> 192.168.1.101:2758
TCP TTL:111 TOS:0x0 ID:65425 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x10A9757B  Ack: 0xF2E32B4C  Win: 0xF62E  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/09-13:56:30.403407 128.121.10.67:119 -> 192.168.1.101:1725
TCP TTL:111 TOS:0x0 ID:59685 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xF27699F3  Ack: 0xE50B5101  Win: 0xF802  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/09-14:05:20.610213 128.121.10.67:119 -> 192.168.1.101:1797
TCP TTL:111 TOS:0x0 ID:31144 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6835A0D  Ack: 0xEDADAFCA  Win: 0xF73C  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/09-14:05:24.301347 128.121.10.67:119 -> 192.168.1.101:1797
TCP TTL:111 TOS:0x0 ID:40551 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6880B82  Ack: 0xEDADB006  Win: 0xF700  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:09:46.743331 128.121.10.67:119 -> 192.168.1.101:2494
TCP TTL:111 TOS:0x0 ID:52128 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xF89E0D0  Ack: 0x80964CC4  Win: 0xF5F5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:10:26.750067 128.121.10.67:119 -> 192.168.1.101:2495
TCP TTL:111 TOS:0x0 ID:45263 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xFF3418B  Ack: 0x8098BDE6  Win: 0xFAC3  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:10:29.085859 128.121.10.67:119 -> 192.168.1.101:2495
TCP TTL:111 TOS:0x0 ID:52547 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xFF64AA1  Ack: 0x8098BDF5  Win: 0xFAB4  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:10:30.104682 128.121.10.67:119 -> 192.168.1.101:2494
TCP TTL:111 TOS:0x0 ID:55635 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xFBDF251  Ack: 0x80964D69  Win: 0xF550  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:12:21.786612 128.121.10.67:119 -> 192.168.1.101:2495
TCP TTL:111 TOS:0x0 ID:57294 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x1069A6D5  Ack: 0x8098C5C0  Win: 0xF8A7  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:12:23.069950 128.121.10.67:119 -> 192.168.1.101:2509
TCP TTL:111 TOS:0x0 ID:60740 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x14B6B699  Ack: 0x8328999E  Win: 0xF9B5  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:12:24.841484 128.121.10.67:119 -> 192.168.1.101:2495
TCP TTL:111 TOS:0x0 ID:243 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x106EB50C  Ack: 0x8098C5FC  Win: 0xF86B  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:12:27.280394 128.121.10.67:119 -> 192.168.1.101:2495
TCP TTL:111 TOS:0x0 ID:6053 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x10723FC2  Ack: 0x8098C629  Win: 0xF83E  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:12:59.678928 128.121.10.67:119 -> 192.168.1.101:2598
TCP TTL:111 TOS:0x0 ID:32837 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x34121A8A  Ack: 0x93B7C82C  Win: 0xF946  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:13:07.964492 128.121.10.67:119 -> 192.168.1.101:2494
TCP TTL:111 TOS:0x0 ID:57499 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x107878FC  Ack: 0x8096584F  Win: 0xF5E6  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:19:12.053053 128.121.10.67:119 -> 192.168.1.101:2598
TCP TTL:111 TOS:0x0 ID:2634 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x35E12768  Ack: 0x93B7CF07  Win: 0xF820  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:19:13.290375 128.121.10.67:119 -> 192.168.1.101:2598
TCP TTL:111 TOS:0x0 ID:6324 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x35E2B986  Ack: 0x93B7CF16  Win: 0xF811  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:19:13.310320 128.121.10.67:119 -> 192.168.1.101:2598
TCP TTL:111 TOS:0x0 ID:6778 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x35E2B986  Ack: 0x93B7CF16  Win: 0xF811  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:19:15.410634 128.121.10.67:119 -> 192.168.1.101:2494
TCP TTL:111 TOS:0x0 ID:12482 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x1230D440  Ack: 0x80965ED0  Win: 0xFAE1  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/12-17:19:19.729918 128.121.10.67:119 -> 192.168.1.101:2598
TCP TTL:111 TOS:0x0 ID:24863 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x35EAA31C  Ack: 0x93B7CF52  Win: 0xF7D5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:22:35.829658 128.121.10.67:119 -> 192.168.1.101:4041
TCP TTL:111 TOS:0x0 ID:49563 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4B60044D  Ack: 0x4788451B  Win: 0xF703  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:22:36.093607 128.121.10.67:119 -> 192.168.1.101:4040
TCP TTL:111 TOS:0x0 ID:50232 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4B7329E3  Ack: 0x4787AE84  Win: 0xF6A9  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:22:37.030436 128.121.10.67:119 -> 192.168.1.101:4059
TCP TTL:111 TOS:0x0 ID:52972 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4DC19EAA  Ack: 0x48A7C147  Win: 0xF7D5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:22:37.098049 128.121.10.67:119 -> 192.168.1.101:4041
TCP TTL:111 TOS:0x0 ID:53216 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4B615901  Ack: 0x4788452A  Win: 0xF6F4  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:22:37.726083 128.121.10.67:119 -> 192.168.1.101:4040
TCP TTL:111 TOS:0x0 ID:55265 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4B741BE1  Ack: 0x4787AE93  Win: 0xF69A  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:22:37.801530 128.121.10.67:119 -> 192.168.1.101:4040
TCP TTL:111 TOS:0x0 ID:55631 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4B742195  Ack: 0x4787AE93  Win: 0xF69A  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:22:47.235398 128.121.10.67:119 -> 192.168.1.101:4040
TCP TTL:111 TOS:0x0 ID:12312 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4B7A5012  Ack: 0x4787AEB1  Win: 0xF67C  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:22:47.236976 128.121.10.67:119 -> 192.168.1.101:4040
TCP TTL:111 TOS:0x0 ID:12313 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4B7A55C6  Ack: 0x4787AEB1  Win: 0xF67C  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:22:49.278877 128.121.10.67:119 -> 192.168.1.101:4059
TCP TTL:111 TOS:0x0 ID:17712 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4DCC307A  Ack: 0x48A7C174  Win: 0xF7A8  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:22:59.859898 128.121.10.67:119 -> 192.168.1.101:4040
TCP TTL:111 TOS:0x0 ID:59479 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4B83D566  Ack: 0x4787AEED  Win: 0xF640  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:23:03.135384 128.121.10.67:119 -> 192.168.1.101:4041
TCP TTL:111 TOS:0x0 ID:4737 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4B76D088  Ack: 0x478845B1  Win: 0xF66D  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:23:03.614893 128.121.10.67:119 -> 192.168.1.101:4059
TCP TTL:111 TOS:0x0 ID:6309 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4DDA2700  Ack: 0x48A7C1EC  Win: 0xF730  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:23:04.698081 128.121.10.67:119 -> 192.168.1.101:4040
TCP TTL:111 TOS:0x0 ID:9882 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4B89DE62  Ack: 0x4787AF1A  Win: 0xF613  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:23:04.923302 128.121.10.67:119 -> 192.168.1.101:4041
TCP TTL:111 TOS:0x0 ID:10373 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4B78601F  Ack: 0x478845C0  Win: 0xF65E  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:23:05.726865 128.121.10.67:119 -> 192.168.1.101:4059
TCP TTL:111 TOS:0x0 ID:12725 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4DDBA9BD  Ack: 0x48A7C1FB  Win: 0xF721  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:25:40.573666 128.121.10.67:119 -> 192.168.1.101:4040
TCP TTL:111 TOS:0x0 ID:64042 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4C23BEFA  Ack: 0x4787B19F  Win: 0xF94C  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:25:43.598889 128.121.10.67:119 -> 192.168.1.101:4040
TCP TTL:111 TOS:0x0 ID:7587 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4C28AEEC  Ack: 0x4787B1BD  Win: 0xF92E  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:26:37.421832 128.121.10.67:119 -> 192.168.1.101:4040
TCP TTL:111 TOS:0x0 ID:58607 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4C636C2E  Ack: 0x4787B2F8  Win: 0xF7F3  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:26:38.213703 128.121.10.67:119 -> 192.168.1.101:4059
TCP TTL:111 TOS:0x0 ID:61396 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4E9D61F5  Ack: 0x48A7C552  Win: 0xF988  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:27:42.461752 128.121.10.67:119 -> 192.168.1.101:4041
TCP TTL:111 TOS:0x0 ID:11633 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4C760307  Ack: 0x47884A61  Win: 0xF77B  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:28:29.089618 128.121.10.67:119 -> 192.168.1.101:4041
TCP TTL:111 TOS:0x0 ID:19779 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4CA02DB3  Ack: 0x47884B42  Win: 0xF69A  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:28:46.120395 128.121.10.67:119 -> 192.168.1.101:4041
TCP TTL:111 TOS:0x0 ID:1687 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4CAFFEC4  Ack: 0x47884BAB  Win: 0xF631  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:28:54.430410 128.121.10.67:119 -> 192.168.1.101:2513
TCP TTL:111 TOS:0x0 ID:25325 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x64164AA6  Ack: 0x948F968A  Win: 0xF9AF  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:29:01.866575 128.121.10.67:119 -> 192.168.1.101:3358
TCP TTL:111 TOS:0x0 ID:44836 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x645461B0  Ack: 0x973C3C08  Win: 0xF9AF  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:30:32.482352 128.121.10.67:119 -> 192.168.1.101:2513
TCP TTL:111 TOS:0x0 ID:40749 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x648362EF  Ack: 0x948F993C  Win: 0xF6FD  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:35:13.828979 128.121.10.67:119 -> 192.168.1.101:3628
TCP TTL:111 TOS:0x0 ID:15699 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6BE7A263  Ack: 0xA7AAF410  Win: 0xF8A1  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:35:18.104825 128.121.10.67:119 -> 192.168.1.101:3629
TCP TTL:111 TOS:0x0 ID:34079 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6BF95470  Ack: 0xA7AC4A2F  Win: 0xF81A  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:35:18.112512 128.121.10.67:119 -> 192.168.1.101:3629
TCP TTL:111 TOS:0x0 ID:34080 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6BF95A24  Ack: 0xA7AC4A2F  Win: 0xF81A  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:35:19.072489 128.121.10.67:119 -> 192.168.1.101:3630
TCP TTL:111 TOS:0x0 ID:40782 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C04C031  Ack: 0xA7BBD4ED  Win: 0xF7CF  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:35:19.073884 128.121.10.67:119 -> 192.168.1.101:3630
TCP TTL:111 TOS:0x0 ID:40783 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C04C5E5  Ack: 0xA7BBD4ED  Win: 0xF7CF  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:35:20.684298 128.121.10.67:119 -> 192.168.1.101:3628
TCP TTL:111 TOS:0x0 ID:48496 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6BEEF6DF  Ack: 0xA7AAF42E  Win: 0xF883  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-12:35:20.692590 128.121.10.67:119 -> 192.168.1.101:3628
TCP TTL:111 TOS:0x0 ID:48497 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6BEEFC93  Ack: 0xA7AAF42E  Win: 0xF883  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/15-09:41:26.259315 128.121.10.67:119 -> 192.168.1.101:1356
TCP TTL:111 TOS:0x0 ID:17303 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x65847BF8  Ack: 0x93B8568E  Win: 0xF793  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/15-09:41:26.260677 128.121.10.67:119 -> 192.168.1.101:1356
TCP TTL:111 TOS:0x0 ID:17304 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x658481AC  Ack: 0x93B8568E  Win: 0xF793  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:30:54.552628 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:26249 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB3F2A6BE  Ack: 0xDE3303E0  Win: 0xF640  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:30:54.553930 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:26250 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB3F2AC72  Ack: 0xDE3303E0  Win: 0xF640  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:04.078850 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:53628 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB402E6D7  Ack: 0xDE320D18  Win: 0xF65E  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:04.083179 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:53629 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB402EC8B  Ack: 0xDE320D18  Win: 0xF65E  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:19.798529 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:30614 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4145FA1  Ack: 0xDE320D45  Win: 0xF631  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:19.799852 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:30615 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4146555  Ack: 0xDE320D45  Win: 0xF631  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:24.892177 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:47286 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB41B836A  Ack: 0xDE330449  Win: 0xF5D7  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:24.895688 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:47287 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB41B891E  Ack: 0xDE330449  Win: 0xF5D7  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:41.362051 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:23934 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB42A487C  Ack: 0xDE320D81  Win: 0xF5F5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:41.365967 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:23935 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB42A4E30  Ack: 0xDE320D81  Win: 0xF5F5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:55.965210 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:61742 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB448EB3D  Ack: 0xDE3304DF  Win: 0xF541  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:55.966562 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:61743 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB448F0F1  Ack: 0xDE3304DF  Win: 0xF541  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:56.054621 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:61927 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBE61E3A4  Ack: 0xE146E563  Win: 0xF988  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:31:56.056421 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:61928 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBE61E958  Ack: 0xE146E563  Win: 0xF988  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:04.429658 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:12772 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB44E3347  Ack: 0xDE3304EE  Win: 0xFAF0  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:04.430777 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:12773 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB44E38FB  Ack: 0xDE3304EE  Win: 0xFAF0  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:04.698913 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:13239 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBE6B2D61  Ack: 0xE146E581  Win: 0xF96A  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:04.700342 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:13240 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBE6B3315  Ack: 0xE146E581  Win: 0xF96A  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:14.732895 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:33831 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4497B0C  Ack: 0xDE320DEA  Win: 0xF58C  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:14.737867 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:33837 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB44980C0  Ack: 0xDE320DEA  Win: 0xF58C  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:25.071280 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:63998 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB465F8EE  Ack: 0xDE330539  Win: 0xFAA5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:25.104012 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:64367 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB465FEA2  Ack: 0xDE330539  Win: 0xFAA5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:44.265377 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:54205 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBE964C85  Ack: 0xE146E608  Win: 0xF8E3  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:44.266739 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:54206 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBE965239  Ack: 0xE146E608  Win: 0xF8E3  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:55.425581 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:29363 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBEA02B36  Ack: 0xE146E626  Win: 0xF8C5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:32:55.426912 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:29364 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBEA030EA  Ack: 0xE146E626  Win: 0xF8C5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:33:09.431151 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:11106 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBEAF4AED  Ack: 0xE146E653  Win: 0xF898  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:33:09.432442 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:11107 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBEAF50A1  Ack: 0xE146E653  Win: 0xF898  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:33:34.630305 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:31011 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4B03248  Ack: 0xDE320F25  Win: 0xFA0F  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:33:34.638737 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:31012 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4B037FC  Ack: 0xDE320F25  Win: 0xFA0F  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:33:36.870557 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:36191 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBECB3C41  Ack: 0xE146E6AD  Win: 0xF83E  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:33:36.874776 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:36192 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBECB41F5  Ack: 0xE146E6AD  Win: 0xF83E  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:33:49.542518 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:11123 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBEDADA20  Ack: 0xE146E6DA  Win: 0xF811  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:33:49.543952 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:11124 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBEDADFD4  Ack: 0xE146E6DA  Win: 0xF811  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:14.439440 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:18501 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBEFADCC5  Ack: 0xE146E734  Win: 0xF7B7  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:14.440826 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:18502 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBEFAE279  Ack: 0xE146E734  Win: 0xF7B7  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:15.704431 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:21936 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4E3F1B6  Ack: 0xDE320FBB  Win: 0xF979  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:15.712121 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:21937 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4E3F76A  Ack: 0xDE320FBB  Win: 0xF979  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:26.435164 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:59022 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4ECF148  Ack: 0xDE320FD9  Win: 0xF95B  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:26.436498 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:59023 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4ECF6FC  Ack: 0xDE320FD9  Win: 0xF95B  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:26.496243 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:59234 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4F10D34  Ack: 0xDE3306FB  Win: 0xF8E3  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:31.885194 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:9626 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4F65E49  Ack: 0xDE33070A  Win: 0xF8D4  TcpLen: 20

Go to: next range, all alerts, overview page

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:09:28 2003

128.121.10.67	Whois lookup at:	ARIN	RIPE	APNIC	Geektools
	DNS lookup at:	Amenesi	TRIUMF	Princeton
	More lookup links:	Dshield	Sam Spade