SnortSnarf alert page

Source: 128.121.10.67: #101-156

SnortSnarf v021111.1

Signature section (91123)

Top 20 source IPs

Top 20 dest IPs

Looking using input module SnortFileInput, with sources:

/home/rivettmj/snort_alertlog/alert

Earliest: 12:34:32.041037 on 05/19/2003
Latest: 12:43:48.986525 on 05/19/2003

2 different signatures are present for 128.121.10.67 as a source

35 instances of SHELLCODE x86 inc ebx NOOP
121 instances of SHELLCODE x86 NOOP

There are 1 distinct destination IPs in the alerts of the type on this page.

128.121.10.67 Whois lookup at: ARIN RIPE APNIC Geektools

DNS lookup at: Amenesi TRIUMF Princeton

More lookup links: Dshield Sam Spade

Go to: previous range, all alerts, overview page

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:32.041037 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:10639 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4F663FD  Ack: 0xDE33070A  Win: 0xF8D4  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:32.410233 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:12617 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF11473C  Ack: 0xE146E77F  Win: 0xF76C  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:32.411484 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:12618 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF114CF0  Ack: 0xE146E77F  Win: 0xF76C  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:38.607029 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:33858 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4FB2BB2  Ack: 0xDE330719  Win: 0xF8C5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:38.608544 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:33859 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB4FB3166  Ack: 0xDE330719  Win: 0xF8C5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:40.970096 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:39490 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF1B18F9  Ack: 0xE146E79D  Win: 0xF74E  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:34:40.973906 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:39491 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF1B1EAD  Ack: 0xE146E79D  Win: 0xF74E  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:06.591310 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:55673 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF3D48C2  Ack: 0xE146E815  Win: 0xF6D6  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:06.592643 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:55674 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF3D4E76  Ack: 0xE146E815  Win: 0xF6D6  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:08.602906 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:64867 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB518345B  Ack: 0xDE330773  Win: 0xF86B  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:08.683976 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:329 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB5183A0F  Ack: 0xDE330773  Win: 0xF86B  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:09.410263 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:2116 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF424BDE  Ack: 0xE146E824  Win: 0xF6C7  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:09.411583 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:2117 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF425192  Ack: 0xE146E824  Win: 0xF6C7  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:13.264431 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:16232 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB51E32C7  Ack: 0xDE32106F  Win: 0xF8C5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:13.714065 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:18462 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF4A93EE  Ack: 0xE146E842  Win: 0xF6A9  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:13.715407 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:18463 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF4A99A2  Ack: 0xE146E842  Win: 0xF6A9  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:17.000113 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:28882 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB52346E2  Ack: 0xDE32107E  Win: 0xF8B6  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:17.003555 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:28883 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB5234C96  Ack: 0xDE32107E  Win: 0xF8B6  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:17.378458 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:31691 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB521ECD1  Ack: 0xDE330791  Win: 0xF84D  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:17.385057 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:31692 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB521F285  Ack: 0xDE330791  Win: 0xF84D  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:17.499899 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:31874 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF4F6D02  Ack: 0xE146E851  Win: 0xF69A  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:17.503448 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:31875 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF4F72B6  Ack: 0xE146E851  Win: 0xF69A  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:23.125173 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:57296 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB526CC64  Ack: 0xDE3307A0  Win: 0xF83E  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:23.126529 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:57297 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB526D218  Ack: 0xDE3307A0  Win: 0xF83E  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:24.393669 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:60736 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB5281B7A  Ack: 0xDE32108D  Win: 0xF8A7  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:24.394895 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:60737 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB528212E  Ack: 0xDE32108D  Win: 0xF8A7  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:26.911130 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:2589 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF5D88C2  Ack: 0xE146E87E  Win: 0xF66D  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:26.912470 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:2590 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF5D8E76  Ack: 0xE146E87E  Win: 0xF66D  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:27.671644 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:5079 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB52D5421  Ack: 0xDE32109C  Win: 0xF898  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:27.679821 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:5080 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB52D59D5  Ack: 0xDE32109C  Win: 0xF898  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:29.478799 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:12714 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB52F7EF8  Ack: 0xDE3307BE  Win: 0xF820  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:29.480111 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:12715 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB52F84AC  Ack: 0xDE3307BE  Win: 0xF820  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:32.678852 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:22549 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB5327257  Ack: 0xDE3210AB  Win: 0xF889  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:35:32.680124 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:22550 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB532780B  Ack: 0xDE3210AB  Win: 0xF889  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:04.381572 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:6288 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB5596492  Ack: 0xDE330836  Win: 0xF7A8  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:04.385604 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:6289 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB5596A46  Ack: 0xDE330836  Win: 0xF7A8  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:05.481874 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:9493 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF8CD45B  Ack: 0xE146E905  Win: 0xF5E6  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:05.489699 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:9494 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBF8CDA0F  Ack: 0xE146E905  Win: 0xF5E6  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:25.368301 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:23128 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB56F5696  Ack: 0xDE330881  Win: 0xF75D  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:25.369623 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:23129 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB56F5C4A  Ack: 0xDE330881  Win: 0xF75D  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:30.397109 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:40783 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB577F7A1  Ack: 0xDE32117D  Win: 0xF7B7  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:30.403248 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:40784 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB577FD55  Ack: 0xDE32117D  Win: 0xF7B7  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:33.006907 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:47639 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBFB45245  Ack: 0xE146E98C  Win: 0xF55F  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:33.010841 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:47640 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xBFB457F9  Ack: 0xE146E98C  Win: 0xF55F  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:51.720435 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:47174 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB58F2F46  Ack: 0xDE3308F9  Win: 0xF6E5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:36:51.724610 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:47175 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB58F34FA  Ack: 0xDE3308F9  Win: 0xF6E5  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:37:05.148851 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:23400 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB5A05477  Ack: 0xDE330935  Win: 0xF6A9  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:42:23.055631 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:63841 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB70627FB  Ack: 0xDE3219A2  Win: 0xF550  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:42:29.663995 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:17254 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xC1641868  Ack: 0xE146F247  Win: 0xF820  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:42:34.327144 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:41201 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB717EFCD  Ack: 0xDE3310C4  Win: 0xFA96  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:43:08.978238 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:21326 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB742D7E6  Ack: 0xDE321B37  Win: 0xF979  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:43:25.477971 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:64954 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB757154D  Ack: 0xDE331277  Win: 0xF8E3  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:43:27.418916 128.121.10.67:119 -> 192.168.1.101:1655
TCP TTL:111 TOS:0x0 ID:4214 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB759554D  Ack: 0xDE331286  Win: 0xF8D4  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:43:27.789064 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:5335 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xC1A7B6AD  Ack: 0xE146F409  Win: 0xF65E  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:43:30.348297 128.121.10.67:119 -> 192.168.1.101:1654
TCP TTL:111 TOS:0x0 ID:13337 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB75B167F  Ack: 0xDE321BEB  Win: 0xF8C5  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/19-12:43:48.986525 128.121.10.67:119 -> 192.168.1.101:1656
TCP TTL:111 TOS:0x0 ID:64339 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xC1C59653  Ack: 0xE146F49F  Win: 0xF5C8  TcpLen: 20

Go to: previous range, all alerts, overview page

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:09:28 2003

128.121.10.67	Whois lookup at:	ARIN	RIPE	APNIC	Geektools
	DNS lookup at:	Amenesi	TRIUMF	Princeton
	More lookup links:	Dshield	Sam Spade