[Silicon Defense logo]

SnortSnarf alert page

Source: 128.242.172.242: #501-569

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

Looking using input module SnortFileInput, with sources:
Earliest: 22:34:06.034988 on 06/02/2003
Latest: 22:35:54.684004 on 06/02/2003

2 different signatures are present for 128.242.172.242 as a source

There are 1 distinct destination IPs in the alerts of the type on this page.

128.242.172.242 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade

Go to: previous range, all alerts, overview page
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:06.034988 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:27697 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x80ECB87B Ack: 0xC09975E2 Win: 0xFA57 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:06.043189 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:27721 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x80ECBE2F Ack: 0xC09975E2 Win: 0xFA57 TcpLen: 20
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.414621 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12707 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x810FDBE5 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.415958 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12722 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x810FE199 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.417329 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12723 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x810FE74D Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.418659 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12724 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x810FED01 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.419958 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12725 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x810FF2B5 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.421609 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12752 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x810FF869 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.422846 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12753 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x810FFE1D Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.466326 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12948 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x811003D1 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.467696 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12949 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81100985 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.472191 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12978 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81100F39 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.474227 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12979 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x811014ED Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.475490 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12980 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81101AA1 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.476777 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12981 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81102055 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.478114 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12983 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81102609 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.479440 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12984 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81102BBD Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.480539 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12985 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81103171 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.481836 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12986 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81103725 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.483170 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12987 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81103CD9 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.484444 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12988 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110428D Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.486046 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12989 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81104841 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.487324 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12990 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81104DF5 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.488664 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12991 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x811053A9 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.489938 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12992 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110595D Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.493760 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12995 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81106A79 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.494977 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12996 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110702D Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.496267 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12997 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x811075E1 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.532165 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13343 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81107B95 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.533455 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13344 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81108149 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.543272 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13377 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81109DCD Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.545030 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13378 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110A381 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.547641 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13380 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110AEE9 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.548937 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13381 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110B49D Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.550041 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13382 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110BA51 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.551313 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13383 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110C005 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.552703 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13384 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110C5B9 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.554012 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13385 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110CB6D Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.555361 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13386 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110D121 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.556618 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13387 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110D6D5 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.558298 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13388 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110DC89 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.559516 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13389 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110E23D Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.560613 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13390 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110E7F1 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.562192 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13391 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110EDA5 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.564523 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13392 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110F359 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.565820 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13510 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110F90D Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.567165 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13511 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8110FEC1 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.573736 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13565 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81110475 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.575067 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13566 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81110A29 Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:34:16.579424 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13598 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81110FDD Ack: 0xC0997648 Win: 0xF9F1 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:27.882182 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:10940 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81F379F5 Ack: 0xC0997912 Win: 0xF727 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:27.883943 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:10941 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81F37FA9 Ack: 0xC0997912 Win: 0xF727 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:27.885285 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:10942 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81F3855D Ack: 0xC0997912 Win: 0xF727 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:27.886590 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:10970 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81F38B11 Ack: 0xC0997912 Win: 0xF727 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:27.887915 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:10971 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81F390C5 Ack: 0xC0997912 Win: 0xF727 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:27.889158 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:10972 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81F39679 Ack: 0xC0997912 Win: 0xF727 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:27.890232 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:10973 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81F39C2D Ack: 0xC0997912 Win: 0xF727 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:27.891470 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:10974 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81F3A1E1 Ack: 0xC0997912 Win: 0xF727 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:27.895652 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11031 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81F3A795 Ack: 0xC0997912 Win: 0xF727 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:27.896951 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:11032 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x81F3AD49 Ack: 0xC0997912 Win: 0xF727 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:54.665729 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31321 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8241C59C Ack: 0xC0997A00 Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:54.667065 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31322 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8241CB50 Ack: 0xC0997A00 Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:54.670521 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31323 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8241D104 Ack: 0xC0997A00 Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:54.671804 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31324 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8241D6B8 Ack: 0xC0997A00 Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:54.673066 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31325 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8241DC6C Ack: 0xC0997A00 Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:54.674473 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31326 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8241E220 Ack: 0xC0997A00 Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:54.675781 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31327 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8241E7D4 Ack: 0xC0997A00 Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:54.677126 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31328 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x8241ED88 Ack: 0xC0997A00 Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:35:54.684004 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:31334 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x82420A0C Ack: 0xC0997A00 Win: 0xF639 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
Go to: previous range, all alerts, overview page
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:53 2003