[Silicon Defense logo]

SnortSnarf alert page

Source: 128.242.172.242: #101-200

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

Looking using input module SnortFileInput, with sources:
Earliest: 22:02:41.369579 on 06/02/2003
Latest: 22:09:36.204217 on 06/02/2003

2 different signatures are present for 128.242.172.242 as a source

There are 1 distinct destination IPs in the alerts of the type on this page.

128.242.172.242 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade


Go to: previous range, next range, all alerts, overview page
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:41.369579 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40377 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x707DF293 Ack: 0xC0994326 Win: 0xF9AD TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:41.370580 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40378 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x707DF847 Ack: 0xC0994326 Win: 0xF9AD TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:41.373146 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40407 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x707DFDFB Ack: 0xC0994326 Win: 0xF9AD TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:43.360535 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:51969 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70856B02 Ack: 0xC0994337 Win: 0xF99C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:43.365050 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:51970 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x708570B6 Ack: 0xC0994337 Win: 0xF99C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:43.366406 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:51971 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7085766A Ack: 0xC0994337 Win: 0xF99C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:43.370473 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:51974 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70858786 Ack: 0xC0994337 Win: 0xF99C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:49.704843 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:19854 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x709B2603 Ack: 0xC099437B Win: 0xF958 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:49.706081 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:19855 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x709B2BB7 Ack: 0xC099437B Win: 0xF958 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:49.708263 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:19856 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x709B316B Ack: 0xC099437B Win: 0xF958 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:49.712308 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:19888 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x709B4287 Ack: 0xC099437B Win: 0xF958 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:49.713604 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:19889 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x709B483B Ack: 0xC099437B Win: 0xF958 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:49.726122 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:19924 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x709B4DEF Ack: 0xC099437B Win: 0xF958 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:49.727423 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:19925 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x709B53A3 Ack: 0xC099437B Win: 0xF958 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:50.671284 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:26212 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70A18F3A Ack: 0xC099438C Win: 0xF947 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:50.674455 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:26213 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70A194EE Ack: 0xC099438C Win: 0xF947 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:50.682980 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:26236 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70A19AA2 Ack: 0xC099438C Win: 0xF947 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:50.773891 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:26464 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70A1B172 Ack: 0xC099438C Win: 0xF947 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:50.782080 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:26482 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70A1B726 Ack: 0xC099438C Win: 0xF947 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:50.886221 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:26942 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70A1B172 Ack: 0xC099438C Win: 0xF947 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:01.692589 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22189 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70C31ECC Ack: 0xC09943F2 Win: 0xF8E1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:01.715645 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22265 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70C3359C Ack: 0xC09943F2 Win: 0xF8E1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:01.718567 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22266 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70C33B50 Ack: 0xC09943F2 Win: 0xF8E1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:01.726283 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22267 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70C34104 Ack: 0xC09943F2 Win: 0xF8E1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:05.609494 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:45214 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70CD95F8 Ack: 0xC0994414 Win: 0xF8BF TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:05.611164 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:45215 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70CD9BAC Ack: 0xC0994414 Win: 0xF8BF TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:05.612429 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:45216 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70CDA160 Ack: 0xC0994414 Win: 0xF8BF TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:05.620102 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:45288 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70CDB27C Ack: 0xC0994414 Win: 0xF8BF TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:05.621405 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:45289 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70CDB830 Ack: 0xC0994414 Win: 0xF8BF TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:05.622714 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:45290 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70CDBDE4 Ack: 0xC0994414 Win: 0xF8BF TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:11.318972 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11065 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70E56705 Ack: 0xC0994458 Win: 0xF87B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:11.329416 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11210 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70E56CB9 Ack: 0xC0994458 Win: 0xF87B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:11.350838 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11317 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70E58389 Ack: 0xC0994458 Win: 0xF87B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:11.355205 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11318 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70E5893D Ack: 0xC0994458 Win: 0xF87B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:13.887223 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:27177 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70ECE6A0 Ack: 0xC099447A Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:13.888561 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:27178 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70ECEC54 Ack: 0xC099447A Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:13.929772 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:27525 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70ECFD70 Ack: 0xC099447A Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:13.935198 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:27582 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70ED0324 Ack: 0xC099447A Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:13.937427 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:27583 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70ED08D8 Ack: 0xC099447A Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:26.157060 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22575 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7105118A Ack: 0xC09944BE Win: 0xF815 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:26.158384 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22576 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7105173E Ack: 0xC09944BE Win: 0xF815 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:26.162211 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22579 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7105285A Ack: 0xC09944BE Win: 0xF815 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:26.163439 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22580 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x71052E0E Ack: 0xC09944BE Win: 0xF815 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:26.164798 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22581 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x710533C2 Ack: 0xC09944BE Win: 0xF815 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:26.166355 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22582 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x71053976 Ack: 0xC09944BE Win: 0xF815 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:31.416789 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:44793 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x710C9A86 Ack: 0xC09944CF Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:31.418266 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:44807 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x710CA03A Ack: 0xC09944CF Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:31.419515 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:44808 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x710CA5EE Ack: 0xC09944CF Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:31.443765 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:45027 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x710CB70A Ack: 0xC09944CF Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:31.445144 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:45028 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x710CBCBE Ack: 0xC09944CF Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:03:31.450018 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:45058 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x710CC272 Ack: 0xC09944CF Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:18.146283 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:15106 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7475C68F Ack: 0xC0994F5E Win: 0xF8E1 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:18.147570 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:15107 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7475CC43 Ack: 0xC0994F5E Win: 0xF8E1 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:18.149422 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:15126 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7475D1F7 Ack: 0xC0994F5E Win: 0xF8E1 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:18.150452 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:15127 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7475D7AB Ack: 0xC0994F5E Win: 0xF8E1 TcpLen: 20
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:34.597057 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:34535 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A45F12 Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:34.605289 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:34536 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A464C6 Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:34.609017 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:34627 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A46A7A Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:34.617130 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:34643 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4702E Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:34.621729 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:34680 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A475E2 Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:34.673110 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:34863 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4814A Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:34.683717 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:34871 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A486FE Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:34.685662 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:34992 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A48CB2 Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:34.698128 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:35019 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4981A Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:35.715205 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40363 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A46022 Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:35.777144 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40688 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A465D6 Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:35.778607 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40689 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A46B8A Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:35.779943 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40690 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4713E Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:35.811049 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40895 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A476F2 Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:35.813056 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40896 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A47CA6 Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:35.814449 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40897 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4825A Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:35.815882 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40898 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4880E Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:35.846040 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41088 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A48DC2 Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:35.847357 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41089 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A49376 Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:35.849827 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41115 IpLen:20 DgmLen:1278 DF
***AP*** Seq: 0x74A4992A Ack: 0xC0994FE6 Win: 0xF859 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.009153 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42006 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4A822 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.010202 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42007 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4ADD6 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.011449 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42008 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4B38A Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.040187 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42168 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4B93E Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.045039 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42177 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4BEF2 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.046544 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42178 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4C4A6 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.047808 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42179 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4CA5A Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.071275 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42298 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4D00E Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.073926 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42300 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4DB76 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.110847 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42496 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4E12A Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.112159 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42497 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4E6DE Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.117322 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42515 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4EC92 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.119314 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42516 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4F246 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.121781 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42518 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A4FDAE Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.151043 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42617 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A50362 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.152358 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42618 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A50916 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.165803 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42726 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A50ECA Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.167590 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42727 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5147E Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.168836 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42728 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A51A32 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.170086 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42729 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A51FE6 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.171191 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42730 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5259A Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.186195 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42805 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A52B4E Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.187514 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42806 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A53102 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.200091 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42856 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A536B6 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.204217 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42879 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5421E Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
Go to: previous range, next range, all alerts, overview page
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:53 2003