[Silicon Defense logo]

SnortSnarf alert page

Source: 128.242.172.242: #401-500

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

Looking using input module SnortFileInput, with sources:
Earliest: 22:25:14.097846 on 06/02/2003
Latest: 22:34:05.983054 on 06/02/2003

2 different signatures are present for 128.242.172.242 as a source

There are 1 distinct destination IPs in the alerts of the type on this page.

128.242.172.242 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade


Go to: previous range, next range, all alerts, overview page
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:14.097846 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:64131 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7BEBDC3D Ack: 0xC0996669 Win: 0xF8AE TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:14.099676 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:64148 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7BEBE1F1 Ack: 0xC0996669 Win: 0xF8AE TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:24.570129 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41276 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7BF34090 Ack: 0xC099668B Win: 0xF88C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:24.575840 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41303 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7BF35760 Ack: 0xC099668B Win: 0xF88C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:24.577349 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41304 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7BF35D14 Ack: 0xC099668B Win: 0xF88C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:24.579003 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:41399 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7BF362C8 Ack: 0xC099668B Win: 0xF88C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:37.843353 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:29565 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C090729 Ack: 0xC09966CF Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:37.844769 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:29589 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C090CDD Ack: 0xC09966CF Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:37.850575 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:29616 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C091DF9 Ack: 0xC09966CF Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:37.853442 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:29633 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C0923AD Ack: 0xC09966CF Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:37.855445 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:29634 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C092961 Ack: 0xC09966CF Win: 0xF848 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:39.136619 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:35387 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C0F7302 Ack: 0xC09966E0 Win: 0xF837 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:39.143765 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:35415 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C0F8F86 Ack: 0xC09966E0 Win: 0xF837 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:39.145019 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:35431 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C0F953A Ack: 0xC09966E0 Win: 0xF837 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:39.147843 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:35432 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C0F9AEE Ack: 0xC09966E0 Win: 0xF837 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:48.397952 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11451 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C3103C3 Ack: 0xC0996735 Win: 0xF7E2 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:48.451530 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11798 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C3114DF Ack: 0xC0996735 Win: 0xF7E2 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:48.452838 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11799 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C311A93 Ack: 0xC0996735 Win: 0xF7E2 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:48.455351 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11826 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C312047 Ack: 0xC0996735 Win: 0xF7E2 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:50.471094 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22852 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C3B7370 Ack: 0xC0996757 Win: 0xF7C0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:50.479842 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22853 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C3B7924 Ack: 0xC0996757 Win: 0xF7C0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:50.498710 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23011 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C3B8A40 Ack: 0xC0996757 Win: 0xF7C0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:50.502097 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23012 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C3B8FF4 Ack: 0xC0996757 Win: 0xF7C0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:50.507532 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23309 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C3B95A8 Ack: 0xC0996757 Win: 0xF7C0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:57.007873 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:51961 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C533DFA Ack: 0xC099679B Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:57.031377 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:52037 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C5354CA Ack: 0xC099679B Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:57.039717 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:52075 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C535A7E Ack: 0xC099679B Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:57.043669 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:52077 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C536032 Ack: 0xC099679B Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:59.115762 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:58864 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C5ACC55 Ack: 0xC09967BD Win: 0xF75A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:59.119674 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:58867 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C5ADD71 Ack: 0xC09967BD Win: 0xF75A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:59.120715 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:58881 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C5AE325 Ack: 0xC09967BD Win: 0xF75A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:25:59.122068 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:58882 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C5AE8D9 Ack: 0xC09967BD Win: 0xF75A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:07.172615 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22334 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C7307F0 Ack: 0xC0996812 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:07.174098 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22335 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C730DA4 Ack: 0xC0996812 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:07.175430 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22336 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C731358 Ack: 0xC0996812 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:07.179513 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22339 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C732474 Ack: 0xC0996812 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:07.180602 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:22340 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C732A28 Ack: 0xC0996812 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:14.361752 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40233 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C7A92F6 Ack: 0xC0996823 Win: 0xF6F4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:14.365673 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40236 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C7AA412 Ack: 0xC0996823 Win: 0xF6F4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:14.372052 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40309 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C7AA9C6 Ack: 0xC0996823 Win: 0xF6F4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:20.437010 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:4124 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C920965 Ack: 0xC0996867 Win: 0xF6B0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:20.441744 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:4125 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C920F19 Ack: 0xC0996867 Win: 0xF6B0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:20.449973 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:4143 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C9214CD Ack: 0xC0996867 Win: 0xF6B0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:20.453290 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:4144 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C921A81 Ack: 0xC0996867 Win: 0xF6B0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:20.472722 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:4277 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C922B9D Ack: 0xC0996867 Win: 0xF6B0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:20.477221 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:4278 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C923151 Ack: 0xC0996867 Win: 0xF6B0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:20.484866 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:4279 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C923705 Ack: 0xC0996867 Win: 0xF6B0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:22.477061 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14811 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C998F37 Ack: 0xC0996878 Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:22.481800 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14818 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C9994EB Ack: 0xC0996878 Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:22.498127 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14839 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C99A607 Ack: 0xC0996878 Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:22.505034 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14859 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C99ABBB Ack: 0xC0996878 Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:22.509675 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14860 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C99B16F Ack: 0xC0996878 Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:22.517166 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:15071 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7C99B723 Ack: 0xC0996878 Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:47.641581 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:57368 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CB1C304 Ack: 0xC09968CD Win: 0xF64A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:47.642878 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:57369 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CB1C8B8 Ack: 0xC09968CD Win: 0xF64A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:47.644181 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:57370 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CB1CE6C Ack: 0xC09968CD Win: 0xF64A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:47.648213 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:57373 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CB1DF88 Ack: 0xC09968CD Win: 0xF64A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:49.896621 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2329 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CB9383F Ack: 0xC09968DE Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:49.902560 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2344 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CB9495B Ack: 0xC09968DE Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:49.903824 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2345 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CB94F0F Ack: 0xC09968DE Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:49.905154 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2346 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CB954C3 Ack: 0xC09968DE Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:49.910075 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2399 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CB965DF Ack: 0xC09968DE Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:56.966413 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43343 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CD0D795 Ack: 0xC0996922 Win: 0xF5F5 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:56.967685 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43346 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CD0DD49 Ack: 0xC0996922 Win: 0xF5F5 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:56.969046 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43347 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CD0E2FD Ack: 0xC0996922 Win: 0xF5F5 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:57.029781 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:43699 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CD0F419 Ack: 0xC0996922 Win: 0xF5F5 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:59.146173 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:57172 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CD85799 Ack: 0xC0996933 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:59.147767 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:57173 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CD85D4D Ack: 0xC0996933 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:59.149250 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:57174 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CD86301 Ack: 0xC0996933 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:59.152832 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:57177 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CD8741D Ack: 0xC0996933 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:26:59.154134 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:57178 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CD879D1 Ack: 0xC0996933 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:05.931897 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:27152 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CEEC86A Ack: 0xC0996988 Win: 0xF58F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:06.195050 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:28341 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CEECE1E Ack: 0xC0996988 Win: 0xF58F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:06.339747 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:28959 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CEED3D2 Ack: 0xC0996988 Win: 0xF58F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:06.342637 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:28999 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CEED986 Ack: 0xC0996988 Win: 0xF58F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:06.417628 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:29851 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CEEEAA2 Ack: 0xC0996988 Win: 0xF58F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:06.418897 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:29852 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CEEF056 Ack: 0xC0996988 Win: 0xF58F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:06.420130 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:29853 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CEEF60A Ack: 0xC0996988 Win: 0xF58F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:08.259988 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40733 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CF53AC8 Ack: 0xC0996999 Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:08.261007 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40734 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CF5407C Ack: 0xC0996999 Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:08.264288 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40758 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CF54630 Ack: 0xC0996999 Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:08.269191 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40761 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CF5574C Ack: 0xC0996999 Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:08.270265 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:40762 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7CF55D00 Ack: 0xC0996999 Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:14.557852 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:5348 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D0AFFE1 Ack: 0xC09969DD Win: 0xFAF0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:14.559196 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:5349 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D0B0595 Ack: 0xC09969DD Win: 0xFAF0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:14.560231 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:5350 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D0B0B49 Ack: 0xC09969DD Win: 0xFAF0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:14.630708 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:5746 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D0B1C65 Ack: 0xC09969DD Win: 0xFAF0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:14.632022 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:5747 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D0B2219 Ack: 0xC09969DD Win: 0xFAF0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:14.635469 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:5764 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D0B27CD Ack: 0xC09969DD Win: 0xFAF0 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:16.059226 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11481 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D1167B7 Ack: 0xC09969EE Win: 0xFADF TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:16.060282 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11482 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D116D6B Ack: 0xC09969EE Win: 0xFADF TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:16.061636 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11483 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D11731F Ack: 0xC09969EE Win: 0xFADF TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:16.065582 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11486 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D11843B Ack: 0xC09969EE Win: 0xFADF TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:16.066887 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11487 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D1189EF Ack: 0xC09969EE Win: 0xFADF TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:33.216326 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:20771 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D33C9B5 Ack: 0xC0996A54 Win: 0xFA79 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:33.217693 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:20772 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D33CF69 Ack: 0xC0996A54 Win: 0xFA79 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:33.218987 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:20773 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D33D51D Ack: 0xC0996A54 Win: 0xFA79 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:27:33.292178 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:21048 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7D34BEF1 Ack: 0xC0996A54 Win: 0xFA79 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:05.979365 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:27523 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x80EC740B Ack: 0xC09975E2 Win: 0xFA57 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:05.983054 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:27526 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x80EC8527 Ack: 0xC09975E2 Win: 0xFA57 TcpLen: 20
Go to: previous range, next range, all alerts, overview page
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:53 2003