[Silicon Defense logo]

SnortSnarf alert page

Source: 128.242.172.242: #201-300

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

Looking using input module SnortFileInput, with sources:
Earliest: 22:09:36.359249 on 06/02/2003
Latest: 22:17:59.161105 on 06/02/2003

2 different signatures are present for 128.242.172.242 as a source

There are 1 distinct destination IPs in the alerts of the type on this page.

128.242.172.242 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade


Go to: previous range, next range, all alerts, overview page
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.359249 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43636 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A597AA Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.363893 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43657 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5A312 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.368299 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43658 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5A8C6 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.369684 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43659 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5AE7A Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.370674 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43660 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5B42E Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.372026 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43661 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5B9E2 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.373373 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43662 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5BF96 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.392578 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43798 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5C54A Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.393812 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43799 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5CAFE Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.424663 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43970 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5D0B2 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.425923 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43971 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5D666 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.430878 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43997 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5DC1A Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.435028 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43998 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5E1CE Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.436306 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43999 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5E782 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.437662 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:44000 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5ED36 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.439040 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:44001 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5F2EA Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.440136 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:44002 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5F89E Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.441438 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:44003 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A5FE52 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.940241 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46243 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A83E56 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.941651 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46244 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A8440A Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:36.945117 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46261 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A84F72 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:37.006909 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46666 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A882C6 Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:37.008216 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46667 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74A8887A Ack: 0xC0994FF7 Win: 0xF848 TcpLen: 20
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.801936 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40647 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CB9C2F Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.806900 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40737 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBA1E3 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.818922 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40738 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBA797 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.821581 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40757 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBAD4B Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.826885 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40758 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBB2FF Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.830480 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40847 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBB8B3 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.838097 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40848 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBBE67 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.842185 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40918 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBC41B Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.850693 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40919 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBC9CF Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.855230 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40947 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBCF83 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.858150 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40948 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBD537 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.866187 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40949 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBDAEB Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.870062 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41096 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBE09F Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.877607 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41097 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBE653 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.882194 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41159 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBEC07 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.891829 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41160 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBF1BB Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.894186 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41208 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBF76F Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.902185 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41209 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CBFD23 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.909186 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41256 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC02D7 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.920798 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41257 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC088B Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.923984 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41304 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC0E3F Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.926518 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41305 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC13F3 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.941942 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41539 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC250F Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.950171 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41540 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC2AC3 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.954195 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41541 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC3077 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.962318 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41542 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC362B Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.966025 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41563 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC3BDF Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:48.998580 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41751 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC5863 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.001752 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41780 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC5E17 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.013671 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41816 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC697F Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.017940 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41817 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC6F33 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.026446 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41931 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC74E7 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.030118 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41932 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC7A9B Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.038571 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41942 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC804F Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.041746 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41943 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC8603 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.050149 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41944 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC8BB7 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.054385 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41945 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC916B Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.062227 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42110 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC971F Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.066163 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42111 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CC9CD3 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.074142 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42134 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CCA287 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.078064 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42135 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CCA83B Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.091285 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42136 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CCADEF Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.099187 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42137 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CCB3A3 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.103693 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42161 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CCB957 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.105428 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42162 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CCBF0B Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.111815 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42236 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CCC4BF Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:09:49.114862 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:42237 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74CCCA73 Ack: 0xC099506E Win: 0xF7D1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:22.001784 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:47437 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75C7C054 Ack: 0xC099537C Win: 0xFA79 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:22.003636 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:47471 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75C7C608 Ack: 0xC099537C Win: 0xFA79 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:22.005914 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:47472 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75C7CBBC Ack: 0xC099537C Win: 0xFA79 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:22.007147 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:47495 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75C7D170 Ack: 0xC099537C Win: 0xFA79 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:22.009645 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:47496 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75C7D724 Ack: 0xC099537C Win: 0xFA79 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:22.010693 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:47513 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75C7DCD8 Ack: 0xC099537C Win: 0xFA79 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:22.011954 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:47514 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75C7E28C Ack: 0xC099537C Win: 0xFA79 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:22.013906 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:47515 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75C7E840 Ack: 0xC099537C Win: 0xFA79 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:22.015377 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:47516 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75C7EDF4 Ack: 0xC099537C Win: 0xFA79 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:22.016843 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:47519 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x75C7F3A8 Ack: 0xC099537C Win: 0xFA79 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:51.769278 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:33794 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x76142947 Ack: 0xC099546A Win: 0xF98B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:51.770350 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:33795 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x76142EFB Ack: 0xC099546A Win: 0xF98B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:51.771674 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:33822 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x761434AF Ack: 0xC099546A Win: 0xF98B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:51.774003 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:33823 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x76143A63 Ack: 0xC099546A Win: 0xF98B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:51.775368 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:33878 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x76144017 Ack: 0xC099546A Win: 0xF98B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:51.778120 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:33879 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x761445CB Ack: 0xC099546A Win: 0xF98B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:51.779414 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:33904 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x76144B7F Ack: 0xC099546A Win: 0xF98B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:51.780446 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:33905 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x76145133 Ack: 0xC099546A Win: 0xF98B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:51.782783 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:33934 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x761456E7 Ack: 0xC099546A Win: 0xF98B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:11:53.136799 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41321 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7614736B Ack: 0xC099546A Win: 0xF98B TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:17:15.571607 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31205 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x77C69272 Ack: 0xC09959A9 Win: 0xFA02 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:17:15.572864 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31206 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x77C69826 Ack: 0xC09959A9 Win: 0xFA02 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:17:15.595264 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31364 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x77C6CB7A Ack: 0xC09959A9 Win: 0xFA02 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:17:15.613112 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31450 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x77C6D12E Ack: 0xC09959A9 Win: 0xFA02 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:17:15.614419 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31451 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x77C6D6E2 Ack: 0xC09959A9 Win: 0xFA02 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:17:15.616526 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31466 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x77C6DC96 Ack: 0xC09959A9 Win: 0xFA02 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:17:59.113190 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:6631 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x781E5CB4 Ack: 0xC0995AB9 Win: 0xF8F2 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:17:59.114496 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:6632 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x781E6268 Ack: 0xC0995AB9 Win: 0xF8F2 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:17:59.160093 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:6808 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x781E95BC Ack: 0xC0995AB9 Win: 0xF8F2 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:17:59.161105 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:6809 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x781E9B70 Ack: 0xC0995AB9 Win: 0xF8F2 TcpLen: 20
Go to: previous range, next range, all alerts, overview page
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:53 2003