[Silicon Defense logo]

SnortSnarf alert page

Source: 207.172.2.141: #101-154

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

Looking using input module SnortFileInput, with sources:
Earliest: 01:24:19.730318 on 04/27/2003
Latest: 01:24:26.002217 on 04/27/2003

1 different signatures are present for 207.172.2.141 as a source

There are 1 distinct destination IPs in the alerts of the type on this page.

207.172.2.141 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade

Go to: previous range, all alerts, overview page
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:19.730318 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:731 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5D43298 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106117 822919616
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:19.733690 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:732 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5D43840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106119 822919616
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:20.203131 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:808 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5D5CCF0 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106162 822919617
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:20.262139 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:816 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5D5F840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106169 822919617
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:20.410194 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:840 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5D67840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106186 822919618
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:20.427111 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:843 IpLen:20 DgmLen:1004 DF
***A**** Seq: 0xD5D68938 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106190 822919618
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:20.454212 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:848 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5D6A390 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106190 822919618
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:21.469207 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1017 IpLen:20 DgmLen:1004 DF
***A**** Seq: 0xD5DA2938 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106292 822919620
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:21.782485 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1072 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5DB4CF0 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106323 822919620
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:21.961578 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1104 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5DBF840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106341 822919621
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:22.046467 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1116 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5DC3840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106348 822919621
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:22.187058 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1136 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5DCA390 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106361 822919621
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:22.341456 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1163 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5DD3298 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106378 822919621
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:22.373289 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1168 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5DD4CF0 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106382 822919622
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:22.381756 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1170 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5DD5840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106383 822919622
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:22.397323 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1173 IpLen:20 DgmLen:1004 DF
***A**** Seq: 0xD5DD6938 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106384 822919622
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:22.538431 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1198 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5DDECF0 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106398 822919622
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:23.257919 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1319 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E07298 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106468 822919623
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:23.345748 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1330 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E0ACF0 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106479 822919623
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:23.382127 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1336 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E0CCF0 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106482 822919624
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:23.415073 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1342 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E0ECF0 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106487 822919624
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:23.499205 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1357 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E13DE8 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106495 822919624
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:23.522919 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1361 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E15298 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106496 822919624
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:23.540385 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1365 IpLen:20 DgmLen:1004 DF
***A**** Seq: 0xD5E16938 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106500 822919624
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:23.562011 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1368 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E17840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106501 822919624
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:23.731618 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1398 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E21840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106518 822919624
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.178372 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1472 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E3A390 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106561 822919625
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.213926 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1477 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E3BDE8 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106564 822919625
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.247731 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1480 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E3CCF0 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106568 822919625
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.253802 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1481 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E3D298 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106568 822919625
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.270523 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1484 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E3E390 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106568 822919625
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.438114 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1512 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E47840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106589 822919626
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.630518 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1545 IpLen:20 DgmLen:1004 DF
***A**** Seq: 0xD5E52938 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106610 822919626
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.653877 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1550 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E54390 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106611 822919626
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.710423 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1560 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E57840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106615 822919626
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.754105 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1568 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E5A390 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106619 822919626
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.821676 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1580 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E5E390 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106626 822919626
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:24.993172 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1611 IpLen:20 DgmLen:1004 DF
***A**** Seq: 0xD5E68938 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106643 822919627
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.270162 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1650 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E75840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106671 822919627
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.330505 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1660 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E78CF0 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106675 822919627
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.350518 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1662 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E79840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106679 822919627
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.393835 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1670 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E7C390 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106683 822919628
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.478588 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1685 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E81298 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106694 822919628
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.486514 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1686 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E81840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106694 822919628
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.530274 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1694 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E84390 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106697 822919628
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.698530 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1724 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E8E390 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106714 822919628
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.769675 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1737 IpLen:20 DgmLen:1004 DF
***A**** Seq: 0xD5E92938 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106721 822919628
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.773804 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1738 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E92CF0 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106722 822919628
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.821951 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1746 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E95840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106728 822919628
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.837152 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1749 IpLen:20 DgmLen:1004 DF
***A**** Seq: 0xD5E96938 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106728 822919628
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.850304 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1751 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E97298 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106729 822919628
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.950298 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1769 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E9D298 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106741 822919629
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:25.990580 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1776 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5E9F840 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106743 822919629
[Xref => http://www.whitehats.com/info/IDS181]
[**] [1:648:5] SHELLCODE x86 NOOP [**]
[Classification: Executable code was detected] [Priority: 1]
04/27-01:24:26.002217 207.172.2.141:80 -> 192.168.1.91:9108
TCP TTL:51 TOS:0x0 ID:1778 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xD5EA0390 Ack: 0xF3BF5C17 Win: 0xF447 TcpLen: 32
TCP Options (3) => NOP NOP TS: 455106744 822919629
[Xref => http://www.whitehats.com/info/IDS181]
Go to: previous range, all alerts, overview page
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:54 2003