[Silicon Defense logo]

SnortSnarf alert page

Destination: 192.168.1.101: #301-400

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

Looking using input module SnortFileInput, with sources:
Earliest: 01:40:46.351376 on 06/02/2003
Latest: 22:02:09.804793 on 06/02/2003

7 different signatures are present for 192.168.1.101 as a destination

There are 25 distinct source IPs in the alerts of the type on this page.

192.168.1.101 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade
See also 192.168.1.101 as an alert source [6 alerts]


Go to: previous range, next range, all alerts, overview page
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/02-01:40:46.351376 172.20.148.50 -> 192.168.1.101
ICMP TTL:244 TOS:0x0 ID:0 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.101:1244 -> 64.12.185.119:80
TCP TTL:116 TOS:0x0 ID:62149 IpLen:20 DgmLen:48 DF
Seq: 0xE20554DC Ack: 0xC0A80165
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/02-05:11:50.451341 172.20.148.54 -> 192.168.1.101
ICMP TTL:245 TOS:0x0 ID:0 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.101:2217 -> 64.12.185.119:80
TCP TTL:116 TOS:0x0 ID:12913 IpLen:20 DgmLen:48 DF
Seq: 0x9133646B Ack: 0x3620474D
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/02-05:12:00.251339 172.20.148.54 -> 192.168.1.101
ICMP TTL:245 TOS:0x0 ID:0 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.101:2217 -> 64.12.185.119:80
TCP TTL:116 TOS:0x0 ID:12926 IpLen:20 DgmLen:48 DF
Seq: 0x9133646B Ack: 0xE014DB3E
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/02-06:42:26.385219 172.20.148.54 -> 192.168.1.101
ICMP TTL:245 TOS:0x0 ID:0 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.101:2811 -> 64.12.185.119:80
TCP TTL:116 TOS:0x0 ID:20405 IpLen:20 DgmLen:48 DF
Seq: 0xDC84AA73 Ack: 0xFAA2301A
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/02-07:42:47.772492 172.20.148.50 -> 192.168.1.101
ICMP TTL:244 TOS:0x0 ID:0 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.101:3227 -> 64.12.185.119:80
TCP TTL:116 TOS:0x0 ID:25490 IpLen:20 DgmLen:48 DF
Seq: 0xEF9F3C4 Ack: 0x73682E63
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/02-07:42:57.546817 172.20.148.50 -> 192.168.1.101
ICMP TTL:244 TOS:0x0 ID:0 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.101:3227 -> 64.12.185.119:80
TCP TTL:116 TOS:0x0 ID:25522 IpLen:20 DgmLen:48 DF
Seq: 0xEF9F3C4 Ack: 0x8006766F
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/02-08:43:07.009083 172.20.148.50 -> 192.168.1.101
ICMP TTL:244 TOS:0x0 ID:0 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.101:3650 -> 64.12.185.119:80
TCP TTL:116 TOS:0x0 ID:30604 IpLen:20 DgmLen:48 DF
Seq: 0x413B066D Ack: 0x6F6C0363
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/02-11:43:25.562467 172.20.148.50 -> 192.168.1.101
ICMP TTL:244 TOS:0x0 ID:0 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.101:4861 -> 64.12.185.119:80
TCP TTL:116 TOS:0x0 ID:45758 IpLen:20 DgmLen:48 DF
Seq: 0xD77B665A Ack: 0x3C000000
** END OF DUMP
[**] [1:650:5] SHELLCODE x86 setuid 0 [**]
[Classification: A system call was detected] [Priority: 2]
06/02-12:35:06.976161 128.242.172.250:119 -> 192.168.1.101:1173
TCP TTL:116 TOS:0x0 ID:55931 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xC53C90F4 Ack: 0xF44D3844 Win: 0xF9C4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS436]
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/02-14:44:02.524276 172.20.148.50 -> 192.168.1.101
ICMP TTL:244 TOS:0x0 ID:0 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.101:2342 -> 64.12.185.119:80
TCP TTL:116 TOS:0x0 ID:4533 IpLen:20 DgmLen:48 DF
Seq: 0x6ED70983 Ack: 0xF29ADB3E
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/02-19:15:36.918833 172.20.148.50 -> 192.168.1.101
ICMP TTL:244 TOS:0x0 ID:0 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.101:4056 -> 64.12.185.119:80
TCP TTL:116 TOS:0x0 ID:29009 IpLen:20 DgmLen:48 DF
Seq: 0x51547486 Ack: 0xD68616D
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/02-21:16:15.772779 172.20.148.54 -> 192.168.1.101
ICMP TTL:245 TOS:0x0 ID:0 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.101:4828 -> 64.12.185.119:80
TCP TTL:116 TOS:0x0 ID:51821 IpLen:20 DgmLen:48 DF
Seq: 0xB5BB6B25 Ack: 0xC0A80165
** END OF DUMP
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:36:32.110714 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:63085 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x69DF2371 Ack: 0xC0992EC3 Win: 0xF72E TcpLen: 20
[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:41:37.439341 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:8357 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6A9B89B6 Ack: 0xC0993105 Win: 0xFAAC TcpLen: 20
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:49:26.161896 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:59801 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6BCF31E4 Ack: 0xC09934BD Win: 0xF6F4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.795433 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2437 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C58F17D Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.801681 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2438 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C58F731 Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.813546 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2447 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C592A85 Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.814884 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2448 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C593039 Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.816175 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2449 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C5935ED Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:52:01.817509 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:2450 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6C593BA1 Ack: 0xC0993666 Win: 0xF54B TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.708578 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36579 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB0B5E1 Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.710081 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36580 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB0BB95 Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.756859 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36720 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB0EEE9 Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.758193 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36721 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB0F49D Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.759494 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36722 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB0FA51 Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:53:55.760911 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:36723 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6CB10005 Ack: 0xC0993776 Win: 0xF9F1 TcpLen: 20
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:18.663517 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46073 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F22CF9A Ack: 0xC0993EF7 Win: 0xF826 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:18.668720 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46098 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F22E66A Ack: 0xC0993EF7 Win: 0xF826 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:18.670099 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46099 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F22EC1E Ack: 0xC0993EF7 Win: 0xF826 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:18.671176 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:46117 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F22F1D2 Ack: 0xC0993EF7 Win: 0xF826 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.693460 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25325 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D4368 Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.694837 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25326 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D491C Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.696104 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25327 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D4ED0 Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.700147 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25343 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D5FEC Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.719819 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25465 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D65A0 Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:26.720884 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:25466 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F2D6B54 Ack: 0xC0993F19 Win: 0xF804 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.527078 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1477 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F59C6 Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.528357 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1478 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F5F7A Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.529694 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1479 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F652E Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.533434 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1482 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F764A Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.535035 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1483 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F7BFE Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-21:59:50.536314 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:1484 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F4F81B2 Ack: 0xC0993F7F Win: 0xF79E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:04.198885 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:3177 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F59C7C6 Ack: 0xC0993FA1 Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:04.206600 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:3215 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F59D8E2 Ack: 0xC0993FA1 Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:04.209705 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:3243 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F59DE96 Ack: 0xC0993FA1 Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:04.210769 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:3244 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F59E44A Ack: 0xC0993FA1 Win: 0xF77C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:30.133948 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:55445 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F79FF73 Ack: 0xC0994007 Win: 0xF716 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:30.134863 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:55446 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F7A0527 Ack: 0xC0994007 Win: 0xF716 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:30.153894 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:55559 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F7A0ADB Ack: 0xC0994007 Win: 0xF716 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:30.161704 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:55605 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F7A1BF7 Ack: 0xC0994007 Win: 0xF716 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:30.182188 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:55728 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F7A21AB Ack: 0xC0994007 Win: 0xF716 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.678289 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14140 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83AC63 Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.681044 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14162 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83B217 Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.682435 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14163 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83B7CB Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.689287 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14190 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83C8E7 Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.690314 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14191 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83CE9B Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:34.694219 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:14240 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6F83D44F Ack: 0xC0994018 Win: 0xF705 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:49.029116 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13062 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FA332B2 Ack: 0xC099407E Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:49.030140 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13063 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FA33866 Ack: 0xC099407E Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:49.063328 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13238 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FA34982 Ack: 0xC099407E Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:49.064580 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13239 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FA34F36 Ack: 0xC099407E Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:00:49.073278 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:13311 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FA354EA Ack: 0xC099407E Win: 0xF69F TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:00.300258 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:52635 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FACF088 Ack: 0xC09940A0 Win: 0xF67D TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:00.305524 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:52655 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FAD0758 Ack: 0xC09940A0 Win: 0xF67D TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:00.306860 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:52656 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FAD0D0C Ack: 0xC09940A0 Win: 0xF67D TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:00.308103 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:52671 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FAD12C0 Ack: 0xC09940A0 Win: 0xF67D TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:36.144501 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:293 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FD183A6 Ack: 0xC0994117 Win: 0xF606 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:36.145841 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:294 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FD1895A Ack: 0xC0994117 Win: 0xF606 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:36.149730 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:297 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FD19A76 Ack: 0xC0994117 Win: 0xF606 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:36.150830 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:298 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FD1A02A Ack: 0xC0994117 Win: 0xF606 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:36.152236 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:299 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FD1A5DE Ack: 0xC0994117 Win: 0xF606 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:39.250583 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:16656 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FDD03C9 Ack: 0xC0994139 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:39.251920 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:16657 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FDD097D Ack: 0xC0994139 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:39.253391 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:16658 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FDD0F31 Ack: 0xC0994139 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:39.257514 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:16661 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FDD204D Ack: 0xC0994139 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:39.258837 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:16662 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x6FDD2601 Ack: 0xC0994139 Win: 0xF5E4 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.317501 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12390 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70011E32 Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.318726 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12391 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700123E6 Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.351511 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12558 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70013502 Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.389259 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12714 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70013AB6 Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.390351 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12715 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7001406A Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:52.391654 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:12716 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7001461E Ack: 0xC099419F Win: 0xF57E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.742447 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23627 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700C98D2 Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.746427 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23628 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700C9E86 Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.747704 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23629 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700CA43A Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.751356 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23632 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700CB556 Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.752759 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23633 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700CBB0A Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:01:54.754045 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:23634 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x700CC0BE Ack: 0xC09941C1 Win: 0xF55C TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:06.881779 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:9012 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x702CDBAD Ack: 0xC0994227 Win: 0xFAAC TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:06.885802 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:9015 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x702CECC9 Ack: 0xC0994227 Win: 0xFAAC TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:06.887097 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:9016 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x702CF27D Ack: 0xC0994227 Win: 0xFAAC TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:06.888433 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:9017 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x702CF831 Ack: 0xC0994227 Win: 0xFAAC TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:06.892922 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:9041 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x702D094D Ack: 0xC0994227 Win: 0xFAAC TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.791618 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24241 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x70369B93 Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.792886 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24242 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7036A147 Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.795901 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24266 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7036A6FB Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.801607 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24301 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7036B817 Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.802941 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24302 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7036BDCB Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
06/02-22:02:09.804793 128.242.172.242:119 -> 192.168.1.101:4921
TCP TTL:116 TOS:0x0 ID:24323 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7036C37F Ack: 0xC0994249 Win: 0xFA8A TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS181]
Go to: previous range, next range, all alerts, overview page
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:09:54 2003