[Silicon Defense logo]

SnortSnarf alert page

Source: 128.242.172.242: #1-100

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

Looking using input module SnortFileInput, with sources:
Earliest: 21:36:32.110714 on 06/02/2003
Latest: 22:02:41.314580 on 06/02/2003

2 different signatures are present for 128.242.172.242 as a source

There are 1 distinct destination IPs in the alerts of the type on this page.

128.242.172.242 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade


Go to: next range, all alerts, overview page
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:36:32.110714 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:63085 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x69DF2371 Ack: 0xC0992EC3 Win: 0xF72E TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:41:37.439341 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:8357 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6A9B89B6 Ack: 0xC0993105 Win: 0xFAAC TcpLen: 20
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:49:26.161896 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:59801 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6BCF31E4 Ack: 0xC09934BD Win: 0xF6F4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.795433 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2437 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C58F17D Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.801681 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2438 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C58F731 Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.813546 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2447 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C592A85 Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.814884 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2448 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C593039 Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.816175 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2449 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C5935ED Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.817509 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2450 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C593BA1 Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.708578 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36579 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB0B5E1 Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.710081 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36580 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB0BB95 Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.756859 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36720 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB0EEE9 Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.758193 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36721 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB0F49D Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.759494 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36722 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB0FA51 Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.760911 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36723 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB10005 Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:18.663517 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46073 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F22CF9A Ack: 0xC0993EF7 Win: 0xF826 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:18.668720 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46098 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F22E66A Ack: 0xC0993EF7 Win: 0xF826 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:18.670099 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46099 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F22EC1E Ack: 0xC0993EF7 Win: 0xF826 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:18.671176 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46117 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F22F1D2 Ack: 0xC0993EF7 Win: 0xF826 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.693460 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25325 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D4368 Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.694837 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25326 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D491C Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.696104 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25327 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D4ED0 Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.700147 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25343 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D5FEC Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.719819 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25465 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D65A0 Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.720884 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25466 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D6B54 Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.527078 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1477 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F59C6 Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.528357 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1478 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F5F7A Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.529694 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1479 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F652E Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.533434 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1482 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F764A Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.535035 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1483 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F7BFE Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.536314 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1484 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F81B2 Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:04.198885 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:3177 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F59C7C6 Ack: 0xC0993FA1 Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:04.206600 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:3215 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F59D8E2 Ack: 0xC0993FA1 Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:04.209705 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:3243 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F59DE96 Ack: 0xC0993FA1 Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:04.210769 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:3244 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F59E44A Ack: 0xC0993FA1 Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:30.133948 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:55445 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F79FF73 Ack: 0xC0994007 Win: 0xF716 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:30.134863 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:55446 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F7A0527 Ack: 0xC0994007 Win: 0xF716 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:30.153894 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:55559 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F7A0ADB Ack: 0xC0994007 Win: 0xF716 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:30.161704 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:55605 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F7A1BF7 Ack: 0xC0994007 Win: 0xF716 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:30.182188 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:55728 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F7A21AB Ack: 0xC0994007 Win: 0xF716 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.678289 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14140 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83AC63 Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.681044 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14162 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83B217 Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.682435 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14163 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83B7CB Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.689287 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14190 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83C8E7 Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.690314 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14191 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83CE9B Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.694219 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14240 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83D44F Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:49.029116 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13062 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FA332B2 Ack: 0xC099407E Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:49.030140 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13063 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FA33866 Ack: 0xC099407E Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:49.063328 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13238 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FA34982 Ack: 0xC099407E Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:49.064580 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13239 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FA34F36 Ack: 0xC099407E Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:49.073278 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13311 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FA354EA Ack: 0xC099407E Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:00.300258 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:52635 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FACF088 Ack: 0xC09940A0 Win: 0xF67D TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:00.305524 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:52655 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FAD0758 Ack: 0xC09940A0 Win: 0xF67D TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:00.306860 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:52656 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FAD0D0C Ack: 0xC09940A0 Win: 0xF67D TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:00.308103 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:52671 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FAD12C0 Ack: 0xC09940A0 Win: 0xF67D TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:36.144501 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:293 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FD183A6 Ack: 0xC0994117 Win: 0xF606 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:36.145841 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:294 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FD1895A Ack: 0xC0994117 Win: 0xF606 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:36.149730 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:297 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FD19A76 Ack: 0xC0994117 Win: 0xF606 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:36.150830 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:298 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FD1A02A Ack: 0xC0994117 Win: 0xF606 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:36.152236 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:299 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FD1A5DE Ack: 0xC0994117 Win: 0xF606 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:39.250583 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:16656 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FDD03C9 Ack: 0xC0994139 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:39.251920 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:16657 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FDD097D Ack: 0xC0994139 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:39.253391 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:16658 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FDD0F31 Ack: 0xC0994139 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:39.257514 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:16661 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FDD204D Ack: 0xC0994139 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:39.258837 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:16662 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FDD2601 Ack: 0xC0994139 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.317501 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12390 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70011E32 Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.318726 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12391 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700123E6 Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.351511 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12558 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70013502 Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.389259 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12714 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70013AB6 Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.390351 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12715 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7001406A Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.391654 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12716 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7001461E Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.742447 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23627 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700C98D2 Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.746427 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23628 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700C9E86 Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.747704 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23629 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700CA43A Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.751356 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23632 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700CB556 Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.752759 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23633 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700CBB0A Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.754045 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23634 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700CC0BE Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:06.881779 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:9012 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x702CDBAD Ack: 0xC0994227 Win: 0xFAAC TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:06.885802 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:9015 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x702CECC9 Ack: 0xC0994227 Win: 0xFAAC TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:06.887097 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:9016 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x702CF27D Ack: 0xC0994227 Win: 0xFAAC TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:06.888433 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:9017 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x702CF831 Ack: 0xC0994227 Win: 0xFAAC TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:06.892922 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:9041 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x702D094D Ack: 0xC0994227 Win: 0xFAAC TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.791618 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24241 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70369B93 Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.792886 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24242 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7036A147 Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.795901 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24266 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7036A6FB Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.801607 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24301 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7036B817 Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.802941 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24302 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7036BDCB Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.804793 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24323 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7036C37F Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:19.640470 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2488 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x705A89E6 Ack: 0xC09942AF Win: 0xFA24 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:19.666084 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2713 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x705A8F9A Ack: 0xC09942AF Win: 0xFA24 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:19.667342 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2714 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x705A954E Ack: 0xC09942AF Win: 0xFA24 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:19.668333 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2715 IpLen:20 DgmLen:1206 DF
***AP*** Seq: 0x705A9B02 Ack: 0xC09942AF Win: 0xFA24 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:19.850041 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:3496 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x705AAF66 Ack: 0xC09942C0 Win: 0xFA13 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:27.528118 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:32753 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7065F1ED Ack: 0xC09942D1 Win: 0xFA02 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:28.655815 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:38433 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70660C04 Ack: 0xC09942E2 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:28.657094 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:38434 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x706611B8 Ack: 0xC09942E2 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:28.658429 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:38435 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7066176C Ack: 0xC09942E2 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:28.662017 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:38436 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70661D20 Ack: 0xC09942E2 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:41.313025 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:39949 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x707DD60F Ack: 0xC0994326 Win: 0xF9AD TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:41.314580 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:39950 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x707DDBC3 Ack: 0xC0994326 Win: 0xF9AD TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
Go to: next range, all alerts, overview page
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:53 2003