[Silicon Defense logo]

SnortSnarf alert page

Source: 128.242.172.250

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

70 such alerts found using input module SnortFileInput, with sources:
Earliest: 18:49:19.891841 on 05/22/2003
Latest: 01:16:55.246674 on 06/12/2003

3 different signatures are present for 128.242.172.250 as a source

There are 1 distinct destination IPs in the alerts of the type on this page.

128.242.172.250 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade

[**] [1:650:5] SHELLCODE x86 setuid 0 [**]
[Classification: A system call was detected] [Priority: 2]
05/22-18:49:19.891841 128.242.172.250:119 -> 192.168.1.101:1484
TCP TTL:111 TOS:0x0 ID:54140 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB1081A7A Ack: 0xBF4F9169 Win: 0xF922 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS436]
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/24-14:24:06.591609 128.242.172.250:119 -> 192.168.1.101:1193
TCP TTL:112 TOS:0x0 ID:52156 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xA8953EEB Ack: 0x3670CE1B Win: 0xF8D3 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/24-14:24:40.461050 128.242.172.250:119 -> 192.168.1.101:1194
TCP TTL:112 TOS:0x0 ID:7193 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xA901C84E Ack: 0x3681F4E9 Win: 0xF8A9 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/24-14:25:01.430082 128.242.172.250:119 -> 192.168.1.101:1193
TCP TTL:112 TOS:0x0 ID:17005 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xA8D849C0 Ack: 0x3670CEB5 Win: 0xF839 TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/24-14:25:06.996941 128.242.172.250:119 -> 192.168.1.101:1194
TCP TTL:112 TOS:0x0 ID:8845 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xA923F3A6 Ack: 0x3681F52F Win: 0xF863 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/28-00:32:19.147934 128.242.172.250:119 -> 192.168.1.101:1257
TCP TTL:112 TOS:0x0 ID:60123 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xA159A9C0 Ack: 0x357E743A Win: 0xF8DD TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/28-00:32:31.330462 128.242.172.250:119 -> 192.168.1.101:1254
TCP TTL:112 TOS:0x0 ID:44481 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x9E24EC3F Ack: 0x34A4FE61 Win: 0xF898 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/28-00:37:14.783383 128.242.172.250:119 -> 192.168.1.101:1253
TCP TTL:112 TOS:0x0 ID:21422 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x9F657E82 Ack: 0x34A3C481 Win: 0xF910 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/28-00:37:14.804402 128.242.172.250:119 -> 192.168.1.101:1254
TCP TTL:112 TOS:0x0 ID:21549 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x9F754C8E Ack: 0x34A509CE Win: 0xF8A7 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/28-00:37:15.755012 128.242.172.250:119 -> 192.168.1.101:1257
TCP TTL:112 TOS:0x0 ID:31271 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xA2B8BDBD Ack: 0x357E805B Win: 0xF82F TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/28-00:37:17.597724 128.242.172.250:119 -> 192.168.1.101:1257
TCP TTL:112 TOS:0x0 ID:48658 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xA2BB5F7F Ack: 0x357E8088 Win: 0xF802 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/28-00:37:17.658819 128.242.172.250:119 -> 192.168.1.101:1254
TCP TTL:112 TOS:0x0 ID:49229 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x9F7A3B2F Ack: 0x34A50A19 Win: 0xF85C TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
05/28-00:37:17.752140 128.242.172.250:119 -> 192.168.1.101:1253
TCP TTL:112 TOS:0x0 ID:49627 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x9F6894AD Ack: 0x34A3C4AE Win: 0xF8E3 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/01-19:41:23.940142 128.242.172.250:119 -> 192.168.1.101:3228
TCP TTL:116 TOS:0x0 ID:4938 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4D16C33F Ack: 0xB5252E85 Win: 0xF9D1 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/01-19:42:21.109501 128.242.172.250:119 -> 192.168.1.101:3229
TCP TTL:116 TOS:0x0 ID:20952 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4D11E4C6 Ack: 0xB525B030 Win: 0xFA2B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/01-19:43:21.944880 128.242.172.250:119 -> 192.168.1.101:3230
TCP TTL:116 TOS:0x0 ID:6025 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4D25A7ED Ack: 0xB52655F4 Win: 0xF968 TcpLen: 20
[**] [1:650:5] SHELLCODE x86 setuid 0 [**]
[Classification: A system call was detected] [Priority: 2]
06/02-12:35:06.976161 128.242.172.250:119 -> 192.168.1.101:1173
TCP TTL:116 TOS:0x0 ID:55931 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xC53C90F4 Ack: 0xF44D3844 Win: 0xF9C4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS436]
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/03-12:49:03.281380 128.242.172.250:119 -> 192.168.1.101:1092
TCP TTL:116 TOS:0x0 ID:63696 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x49BED98A Ack: 0xC2A80C27 Win: 0xF80B TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/03-12:50:45.793791 128.242.172.250:119 -> 192.168.1.101:1092
TCP TTL:116 TOS:0x0 ID:57940 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4A197666 Ack: 0xC2A80DDA Win: 0xF658 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/04-19:14:02.727267 128.242.172.250:119 -> 192.168.1.101:2970
TCP TTL:116 TOS:0x0 ID:54285 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xCE7DC08C Ack: 0xA8A5DB3A Win: 0xFA63 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/04-19:29:16.202903 128.242.172.250:119 -> 192.168.1.101:2968
TCP TTL:116 TOS:0x0 ID:10010 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xC1C663CC Ack: 0xA438B846 Win: 0xF6F4 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/04-19:39:11.825478 128.242.172.250:119 -> 192.168.1.101:2969
TCP TTL:116 TOS:0x0 ID:38484 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xCEAD6ECB Ack: 0xA7273D40 Win: 0xF9E2 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/05-15:08:35.968614 128.242.172.250:119 -> 192.168.1.101:3798
TCP TTL:116 TOS:0x0 ID:24359 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x577CE939 Ack: 0xBC862AD9 Win: 0xFA63 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/05-15:14:47.024233 128.242.172.250:119 -> 192.168.1.101:3802
TCP TTL:116 TOS:0x0 ID:55167 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6061C5DA Ack: 0xC05EA8D1 Win: 0xF9BE TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/08-15:46:37.710376 128.242.172.250:119 -> 192.168.1.101:2247
TCP TTL:116 TOS:0x0 ID:32828 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xFC674FC8 Ack: 0xE2928474 Win: 0xFA81 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/08-15:46:37.711630 128.242.172.250:119 -> 192.168.1.101:2247
TCP TTL:116 TOS:0x0 ID:32829 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xFC67557C Ack: 0xE2928474 Win: 0xFA81 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:25.200830 128.242.172.250:119 -> 192.168.1.101:3697
TCP TTL:115 TOS:0x0 ID:62495 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x275D47AD Ack: 0xCFE564F4 Win: 0xF9FA TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:25.202167 128.242.172.250:119 -> 192.168.1.101:3697
TCP TTL:115 TOS:0x0 ID:62496 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x275D4D61 Ack: 0xCFE564F4 Win: 0xF9FA TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:26.376324 128.242.172.250:119 -> 192.168.1.101:3697
TCP TTL:115 TOS:0x0 ID:9403 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x275F1215 Ack: 0xCFE56503 Win: 0xF9EB TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:26.377696 128.242.172.250:119 -> 192.168.1.101:3697
TCP TTL:115 TOS:0x0 ID:9404 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x275F17C9 Ack: 0xCFE56503 Win: 0xF9EB TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:27.793076 128.242.172.250:119 -> 192.168.1.101:3697
TCP TTL:115 TOS:0x0 ID:25777 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x2760CC6A Ack: 0xCFE56512 Win: 0xF9DC TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:27.794347 128.242.172.250:119 -> 192.168.1.101:3697
TCP TTL:115 TOS:0x0 ID:25778 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x2760D21E Ack: 0xCFE56512 Win: 0xF9DC TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:29.413713 128.242.172.250:119 -> 192.168.1.101:3694
TCP TTL:115 TOS:0x0 ID:43758 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x27275EDE Ack: 0xCFC4600F Win: 0xF946 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:29.415023 128.242.172.250:119 -> 192.168.1.101:3694
TCP TTL:115 TOS:0x0 ID:43759 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x27276492 Ack: 0xCFC4600F Win: 0xF946 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:30.214401 128.242.172.250:119 -> 192.168.1.101:3695
TCP TTL:115 TOS:0x0 ID:51477 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x2753118F Ack: 0xCFD98E8B Win: 0xF982 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:30.222529 128.242.172.250:119 -> 192.168.1.101:3695
TCP TTL:115 TOS:0x0 ID:51479 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x27531743 Ack: 0xCFD98E8B Win: 0xF982 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:33.574489 128.242.172.250:119 -> 192.168.1.101:3694
TCP TTL:115 TOS:0x0 ID:23912 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x272A3C78 Ack: 0xCFC4602D Win: 0xF928 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:33.575817 128.242.172.250:119 -> 192.168.1.101:3694
TCP TTL:115 TOS:0x0 ID:23913 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x272A422C Ack: 0xCFC4602D Win: 0xF928 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:33.955462 128.242.172.250:119 -> 192.168.1.101:3697
TCP TTL:115 TOS:0x0 ID:28614 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x276AF673 Ack: 0xCFE5655D Win: 0xF991 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:33.956749 128.242.172.250:119 -> 192.168.1.101:3697
TCP TTL:115 TOS:0x0 ID:28615 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x276AFC27 Ack: 0xCFE5655D Win: 0xF991 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:40.320561 128.242.172.250:119 -> 192.168.1.101:3697
TCP TTL:115 TOS:0x0 ID:40808 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x277136EE Ack: 0xCFE56599 Win: 0xF955 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:40.321820 128.242.172.250:119 -> 192.168.1.101:3697
TCP TTL:115 TOS:0x0 ID:40809 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x27713CA2 Ack: 0xCFE56599 Win: 0xF955 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:42.700239 128.242.172.250:119 -> 192.168.1.101:3695
TCP TTL:115 TOS:0x0 ID:4572 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x2760D12D Ack: 0xCFD98F12 Win: 0xF8FB TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:42.701250 128.242.172.250:119 -> 192.168.1.101:3695
TCP TTL:115 TOS:0x0 ID:4573 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x2760D6E1 Ack: 0xCFD98F12 Win: 0xF8FB TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:44.954256 128.242.172.250:119 -> 192.168.1.101:3694
TCP TTL:115 TOS:0x0 ID:30829 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x2732732D Ack: 0xCFC46078 Win: 0xF8DD TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:44.955590 128.242.172.250:119 -> 192.168.1.101:3694
TCP TTL:115 TOS:0x0 ID:30830 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x273278E1 Ack: 0xCFC46078 Win: 0xF8DD TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:59.435713 128.242.172.250:119 -> 192.168.1.101:3702
TCP TTL:115 TOS:0x0 ID:41305 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x28F41B19 Ack: 0xD089A80E Win: 0xFA45 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/09-10:34:59.437012 128.242.172.250:119 -> 192.168.1.101:3702
TCP TTL:115 TOS:0x0 ID:41306 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x28F420CD Ack: 0xD089A80E Win: 0xFA45 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:40:10.062661 128.242.172.250:119 -> 192.168.1.101:4363
TCP TTL:117 TOS:0x0 ID:20505 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x734A5AF6 Ack: 0x725AB8C3 Win: 0xF93D TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:40:24.993201 128.242.172.250:119 -> 192.168.1.101:4363
TCP TTL:117 TOS:0x0 ID:50360 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x735DD13C Ack: 0x725AB8FF Win: 0xF901 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:40:38.600147 128.242.172.250:119 -> 192.168.1.101:4363
TCP TTL:117 TOS:0x0 ID:8962 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x736CA801 Ack: 0x725AB92C Win: 0xF8D4 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:40:53.153747 128.242.172.250:119 -> 192.168.1.101:4363
TCP TTL:117 TOS:0x0 ID:38043 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x73779880 Ack: 0x725AB94A Win: 0xF8B6 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:41:05.885955 128.242.172.250:119 -> 192.168.1.101:4363
TCP TTL:117 TOS:0x0 ID:56468 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x738A395D Ack: 0x725AB977 Win: 0xF889 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:41:17.781852 128.242.172.250:119 -> 192.168.1.101:4334
TCP TTL:117 TOS:0x0 ID:64132 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6D7A52E2 Ack: 0x6FFA107A Win: 0xF74E TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:41:21.844260 128.242.172.250:119 -> 192.168.1.101:4334
TCP TTL:117 TOS:0x0 ID:25195 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6D80ABB7 Ack: 0x6FFA1089 Win: 0xF73F TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:41:25.866955 128.242.172.250:119 -> 192.168.1.101:4363
TCP TTL:117 TOS:0x0 ID:48631 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x73A09F87 Ack: 0x725AB9C2 Win: 0xF83E TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:41:32.011046 128.242.172.250:119 -> 192.168.1.101:4370
TCP TTL:117 TOS:0x0 ID:24938 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x73CD0B9B Ack: 0x7270F65A Win: 0xF8F2 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:41:55.796392 128.242.172.250:119 -> 192.168.1.101:4334
TCP TTL:117 TOS:0x0 ID:42443 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6DABE860 Ack: 0x6FFA1110 Win: 0xF6B8 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:41:59.856720 128.242.172.250:119 -> 192.168.1.101:4334
TCP TTL:117 TOS:0x0 ID:5754 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6DB23243 Ack: 0x6FFA111F Win: 0xF6A9 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:42:12.670533 128.242.172.250:119 -> 192.168.1.101:4370
TCP TTL:117 TOS:0x0 ID:23515 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x74011199 Ack: 0x7270F6F0 Win: 0xF85C TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:42:27.595335 128.242.172.250:119 -> 192.168.1.101:4370
TCP TTL:117 TOS:0x0 ID:52891 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x741578DE Ack: 0x7270F72C Win: 0xF820 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:42:28.312771 128.242.172.250:119 -> 192.168.1.101:4363
TCP TTL:117 TOS:0x0 ID:57112 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x73E5C9C8 Ack: 0x725ABA94 Win: 0xF76C TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:42:40.623770 128.242.172.250:119 -> 192.168.1.101:4370
TCP TTL:117 TOS:0x0 ID:7142 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7424ECE9 Ack: 0x7270F759 Win: 0xF7F3 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/11-14:42:45.136156 128.242.172.250:119 -> 192.168.1.101:4363
TCP TTL:117 TOS:0x0 ID:40878 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x73FD0E98 Ack: 0x725ABADF Win: 0xF721 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/12-01:16:32.051747 128.242.172.250:119 -> 192.168.1.101:1527
TCP TTL:117 TOS:0x0 ID:46847 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB8EF5EDA Ack: 0xB7C64C26 Win: 0xF9BE TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/12-01:16:32.053037 128.242.172.250:119 -> 192.168.1.101:1527
TCP TTL:117 TOS:0x0 ID:46848 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB8EF648E Ack: 0xB7C64C26 Win: 0xF9BE TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/12-01:16:53.512098 128.242.172.250:119 -> 192.168.1.101:1526
TCP TTL:117 TOS:0x0 ID:61866 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB90A08C9 Ack: 0xB7C565E4 Win: 0xF8EC TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/12-01:16:53.580685 128.242.172.250:119 -> 192.168.1.101:1526
TCP TTL:117 TOS:0x0 ID:62682 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB90A0E7D Ack: 0xB7C565E4 Win: 0xF8EC TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/12-01:16:55.245340 128.242.172.250:119 -> 192.168.1.101:1525
TCP TTL:117 TOS:0x0 ID:13299 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB90E9DA9 Ack: 0xB7C4BFF1 Win: 0xF892 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/12-01:16:55.246674 128.242.172.250:119 -> 192.168.1.101:1525
TCP TTL:117 TOS:0x0 ID:13300 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xB90EA35D Ack: 0xB7C4BFF1 Win: 0xF892 TcpLen: 20
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:53 2003