SnortSnarf alert page

Destination: 192.168.1.102

SnortSnarf v021111.1

Signature section (91123)

Top 20 source IPs

Top 20 dest IPs

58 such alerts found using input module SnortFileInput, with sources:

/home/rivettmj/snort_alertlog/alert

Earliest: 19:34:07.823102 on 04/18/2003
Latest: 01:01:47.870309 on 06/13/2003

2 different signatures are present for 192.168.1.102 as a destination

3 instances of SHELLCODE x86 NOOP
55 instances of SHELLCODE x86 inc ebx NOOP

There are 10 distinct source IPs in the alerts of the type on this page.

192.168.1.102 Whois lookup at: ARIN RIPE APNIC Geektools

DNS lookup at: Amenesi TRIUMF Princeton

More lookup links: Dshield Sam Spade

See also 192.168.1.102 as an alert source [21 alerts]

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
04/18-19:34:07.823102 66.28.185.213:80 -> 192.168.1.102:1027
TCP TTL:42 TOS:0x0 ID:34618 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x4797361E  Ack: 0x66E5F803  Win: 0x2180  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
04/28-09:19:46.472064 216.180.163.210:80 -> 192.168.1.102:1311
TCP TTL:112 TOS:0x0 ID:32349 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x56A7E23A  Ack: 0xE753A3FC  Win: 0xF893  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
04/28-09:20:19.895165 216.180.163.210:80 -> 192.168.1.102:1311
TCP TTL:112 TOS:0x0 ID:49527 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x56A91AB0  Ack: 0xE753B3E1  Win: 0xFAF0  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/01-07:48:20.101418 216.180.163.210:80 -> 192.168.1.102:1995
TCP TTL:105 TOS:0x0 ID:33083 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7F3EAC2A  Ack: 0x2A0BBD70  Win: 0xF80F  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/01-07:48:58.084183 216.180.163.210:80 -> 192.168.1.102:1979
TCP TTL:105 TOS:0x0 ID:42366 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x7EE32B10  Ack: 0x29D877ED  Win: 0xFAF0  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/02-20:35:05.330416 64.58.77.171:80 -> 192.168.1.102:3246
TCP TTL:49 TOS:0x0 ID:60383 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xA560B58F  Ack: 0xEABA1CA9  Win: 0xFFFF  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/05-13:55:52.748777 203.173.8.114:80 -> 192.168.1.102:1626
TCP TTL:41 TOS:0x0 ID:46718 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x842DEF97  Ack: 0x2E17F251  Win: 0xE420  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/09-03:41:31.093720 216.239.33.104:80 -> 192.168.1.102:1735
TCP TTL:41 TOS:0x10 ID:60319 IpLen:20 DgmLen:1500 DF
***AP*** Seq: 0xB04485E0  Ack: 0x52CA4860  Win: 0x7D78  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/11-00:13:12.351749 63.241.60.70:80 -> 192.168.1.102:3393
TCP TTL:42 TOS:0x0 ID:50992 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xA5C72645  Ack: 0x36637E8C  Win: 0xFAF0  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/11-00:13:13.527778 63.241.60.70:80 -> 192.168.1.102:3394
TCP TTL:42 TOS:0x0 ID:51032 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xE0AD9509  Ack: 0x366622EB  Win: 0xFAF0  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/11-00:13:13.702073 63.241.60.70:80 -> 192.168.1.102:3394
TCP TTL:42 TOS:0x0 ID:51038 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xE0ADAEE9  Ack: 0x36662412  Win: 0xFAF0  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-00:43:50.054050 66.246.87.162:80 -> 192.168.1.102:4304
TCP TTL:52 TOS:0x0 ID:22448 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xA3717208  Ack: 0xDE1E022A  Win: 0x81D0  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-00:57:20.699261 209.103.163.6:80 -> 192.168.1.102:4484
TCP TTL:237 TOS:0x0 ID:48929 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x2AEDF90C  Ack: 0xEA072CEA  Win: 0x2238  TcpLen: 20

[**] [1:1394:3] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/13-00:57:29.846196 209.103.163.6:80 -> 192.168.1.102:4484
TCP TTL:237 TOS:0x0 ID:48985 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x2AEF1C2F  Ack: 0xEA073266  Win: 0x2238  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/15-00:29:40.270153 66.228.205.35:80 -> 192.168.1.102:2038
TCP TTL:47 TOS:0x0 ID:7162 IpLen:20 DgmLen:1257 DF
***AP*** Seq: 0xD7EE203A  Ack: 0xDC628FD0  Win: 0x1920  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/15-00:29:40.282400 66.228.205.35:80 -> 192.168.1.102:2039
TCP TTL:47 TOS:0x0 ID:2093 IpLen:20 DgmLen:1232 DF
***AP*** Seq: 0xD88833EF  Ack: 0xDC635A3F  Win: 0x1920  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/15-00:29:40.557284 66.228.205.35:80 -> 192.168.1.102:2041
TCP TTL:47 TOS:0x0 ID:26203 IpLen:20 DgmLen:1341 DF
***AP*** Seq: 0xD7E75D85  Ack: 0xDC65531F  Win: 0x1920  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/15-00:29:49.080494 66.228.205.35:80 -> 192.168.1.102:2059
TCP TTL:47 TOS:0x0 ID:46855 IpLen:20 DgmLen:1298 DF
***AP*** Seq: 0xD9288832  Ack: 0xDC9391B8  Win: 0x1920  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/15-00:29:49.330738 66.228.205.35:80 -> 192.168.1.102:2060
TCP TTL:47 TOS:0x0 ID:5361 IpLen:20 DgmLen:1131 DF
***AP*** Seq: 0xD9342BBC  Ack: 0xDC958214  Win: 0x1920  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/15-00:29:49.597499 66.228.205.35:80 -> 192.168.1.102:2061
TCP TTL:47 TOS:0x0 ID:26241 IpLen:20 DgmLen:1408 DF
***AP*** Seq: 0xD93B59E8  Ack: 0xDC9715B9  Win: 0x1920  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/15-00:29:49.866448 66.228.205.35:80 -> 192.168.1.102:2062
TCP TTL:47 TOS:0x0 ID:31639 IpLen:20 DgmLen:1039 DF
***AP*** Seq: 0xD92A4414  Ack: 0xDC991488  Win: 0x1920  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/29-15:47:11.776532 216.180.163.210:80 -> 192.168.1.102:1385
TCP TTL:112 TOS:0x0 ID:59515 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x96D67E6A  Ack: 0x490DFF59  Win: 0xF893  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/29-15:47:12.083100 216.180.163.210:80 -> 192.168.1.102:1385
TCP TTL:112 TOS:0x0 ID:59594 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x96D67E6A  Ack: 0x490DFF59  Win: 0xF893  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/29-15:49:20.358295 216.180.163.210:80 -> 192.168.1.102:1386
TCP TTL:112 TOS:0x0 ID:40825 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x97266FBA  Ack: 0x4931A38D  Win: 0xF9B8  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/29-15:49:20.824279 216.180.163.210:80 -> 192.168.1.102:1386
TCP TTL:112 TOS:0x0 ID:41226 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x97266FBA  Ack: 0x4931A38D  Win: 0xF9B8  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/29-15:49:21.829739 216.180.163.210:80 -> 192.168.1.102:1386
TCP TTL:112 TOS:0x0 ID:41655 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x97266FBA  Ack: 0x4931A38D  Win: 0xF9B8  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/29-15:49:23.842818 216.180.163.210:80 -> 192.168.1.102:1386
TCP TTL:112 TOS:0x0 ID:42427 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x97266FBA  Ack: 0x4931A38D  Win: 0xF9B8  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
05/29-15:49:27.865192 216.180.163.210:80 -> 192.168.1.102:1386
TCP TTL:112 TOS:0x0 ID:43823 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x97266FBA  Ack: 0x4931A38D  Win: 0xF9B8  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/06-17:53:04.869043 216.180.163.210:80 -> 192.168.1.102:2284
TCP TTL:113 TOS:0x0 ID:49986 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xC01EBA4E  Ack: 0xD7FDBB8A  Win: 0xF640  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/06-17:56:09.874745 216.180.163.210:80 -> 192.168.1.102:2287
TCP TTL:113 TOS:0x0 ID:55740 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xC6B45853  Ack: 0xDADA6031  Win: 0xF644  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:56:44.838257 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:22268 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF605C89  Ack: 0xCAD954AE  Win: 0xF8A6  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:56:51.325085 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:31264 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF608522  Ack: 0xCAD955FF  Win: 0xF755  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:56:55.303473 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:37901 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF60B1D4  Ack: 0xCAD95750  Win: 0xF604  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:57:07.641715 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:55416 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF60E8DC  Ack: 0xCAD959EB  Win: 0xF9A5  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:57:30.566114 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:25544 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF61966D  Ack: 0xCAD95DDB  Win: 0xF5B5  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:57:38.257377 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:37859 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF61B3F7  Ack: 0xCAD95F29  Win: 0xFAF0  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:58:09.706122 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:32105 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF62A0E0  Ack: 0xCAD96468  Win: 0xF5B1  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:58:30.341966 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:1229 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF632D1F  Ack: 0xCAD96704  Win: 0xF9A0  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:58:41.091922 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:20637 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF636170  Ack: 0xCAD96853  Win: 0xF851  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:59:11.565639 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:7900 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF642092  Ack: 0xCAD96C40  Win: 0xFAF0  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:59:30.403610 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:44990 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF6471D5  Ack: 0xCAD96D8D  Win: 0xF9A3  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:59:41.712567 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:65188 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF64AEFB  Ack: 0xCAD96ED9  Win: 0xF857  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:59:46.199237 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:5932 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF64D3A6  Ack: 0xCAD97024  Win: 0xF70C  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:59:46.687999 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:6615 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF64D3A6  Ack: 0xCAD97024  Win: 0xF70C  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-00:59:55.012906 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:21908 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF650775  Ack: 0xCAD97175  Win: 0xF5BB  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:00:11.903920 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:49902 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF65B0BC  Ack: 0xCAD976C4  Win: 0xF6F5  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:00:16.761044 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:60228 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF65C9D1  Ack: 0xCAD97813  Win: 0xF5A6  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:00:24.357199 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:11360 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF65F0CC  Ack: 0xCAD97964  Win: 0xFAF0  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:00:30.533317 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:22370 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF660CD9  Ack: 0xCAD97AB3  Win: 0xF9A1  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:00:43.263236 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:45227 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF664C03  Ack: 0xCAD97D54  Win: 0xF700  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:00:45.873803 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:49378 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF665F8F  Ack: 0xCAD97EA5  Win: 0xF5AF  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:00:52.600673 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:62888 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF66788F  Ack: 0xCAD97FF7  Win: 0xFAF0  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:01:00.323091 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:12848 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF66A99A  Ack: 0xCAD98290  Win: 0xF857  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:01:06.064512 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:21319 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF66F5E9  Ack: 0xCAD9852D  Win: 0xF5BA  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:01:12.017920 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:30793 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF67174E  Ack: 0xCAD98680  Win: 0xFAF0  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:01:25.027930 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:50612 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF679C95  Ack: 0xCAD98A77  Win: 0xF6F9  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:01:43.119103 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:20640 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF6876A9  Ack: 0xCAD98FBE  Win: 0xF84B  TcpLen: 20

[**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**]
[Classification: Executable code was detected] [Priority: 1] 
06/13-01:01:47.870309 66.118.170.25:80 -> 192.168.1.102:1714
TCP TTL:108 TOS:0x0 ID:31441 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xEF68C5EF  Ack: 0xCAD99260  Win: 0xF5A9  TcpLen: 20

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:09:55 2003

192.168.1.102	Whois lookup at:	ARIN	RIPE	APNIC	Geektools
	DNS lookup at:	Amenesi	TRIUMF	Princeton
	More lookup links:	Dshield	Sam Spade
See also 192.168.1.102 as an alert source [21 alerts]