![[Silicon Defense logo]](../SDlogo.gif)
|
SnortSnarf signature pageSHELLCODE x86 inc ebx NOOPSnortSnarf v021111.1 |
| Signature section (91123) | Top 20 source IPs | Top 20 dest IPs |
190 alerts with this signature using input module SnortFileInput, with sources:
Earliest such alert at 19:34:07.823102 on 04/18/2003
Latest such alert at 01:01:47.870309 on 06/13/2003
| SHELLCODE x86 inc ebx NOOP | 37 sources | 11 destinations |
| Priority: 1 | Classification: Executable code was detected | |
| [sid:1390] | ||
| Source | # Alerts (sig) | # Alerts (total) | # Dsts (sig) | # Dsts (total) |
| 128.121.10.67 | 35 | 156 | 1 | 1 |
| 66.118.170.25 | 28 | 28 | 1 | 1 |
| 128.242.172.242 | 16 | 569 | 1 | 1 |
| 216.65.98.13 | 15 | 23 | 1 | 1 |
| 216.180.163.210 | 13 | 13 | 1 | 1 |
| 65.24.2.12 | 12 | 13 | 2 | 2 |
| 66.228.205.35 | 7 | 7 | 1 | 1 |
| 209.208.134.37 | 6 | 6 | 1 | 1 |
| 192.168.1.1 | 6 | 56 | 1 | 1 |
| 128.242.172.250 | 6 | 70 | 1 | 1 |
| 209.61.194.132 | 3 | 3 | 1 | 1 |
| 64.37.137.83 | 3 | 3 | 2 | 2 |
| 63.241.60.70 | 3 | 3 | 1 | 1 |
| 207.126.99.79 | 3 | 4 | 1 | 1 |
| 209.8.166.179 | 3 | 3 | 1 | 1 |
| 206.24.192.157 | 3 | 3 | 1 | 1 |
| 208.174.225.158 | 3 | 3 | 1 | 1 |
| 206.151.167.94 | 3 | 4 | 1 | 2 |
| 66.54.32.136 | 2 | 2 | 1 | 1 |
| 146.20.39.93 | 2 | 4 | 1 | 1 |
| 216.65.98.72 | 2 | 2 | 1 | 1 |
| 66.28.185.213 | 1 | 1 | 1 | 1 |
| 204.68.168.161 | 1 | 1 | 1 | 1 |
| 64.215.164.106 | 1 | 1 | 1 | 1 |
| 208.29.250.190 | 1 | 1 | 1 | 1 |
| 213.193.18.46 | 1 | 1 | 1 | 1 |
| 216.239.33.104 | 1 | 1 | 1 | 1 |
| 209.8.166.171 | 1 | 1 | 1 | 1 |
| 64.58.77.171 | 1 | 1 | 1 | 1 |
| 216.198.200.9 | 1 | 1 | 1 | 1 |
| 207.44.188.21 | 1 | 1 | 1 | 1 |
| 216.158.154.24 | 1 | 1 | 1 | 1 |
| 166.90.208.152 | 1 | 3 | 1 | 1 |
| 216.26.174.110 | 1 | 1 | 1 | 1 |
| 161.170.254.28 | 1 | 1 | 1 | 1 |
| 66.246.87.162 | 1 | 1 | 1 | 1 |
| 66.28.176.207 | 1 | 1 | 1 | 1 |
| Destinations | # Alerts (sig) | # Alerts (total) | # Srcs (sig) | # Srcs (total) |
| 192.168.1.101 | 88 | 951 | 12 | 25 |
| 192.168.1.102 | 55 | 58 | 8 | 10 |
| 192.168.1.100 | 20 | 38 | 5 | 8 |
| 192.168.1.4 | 7 | 69 | 3 | 11 |
| 192.168.1.3 | 6 | 57 | 1 | 2 |
| 192.168.1.92 | 4 | 10 | 3 | 7 |
| 192.168.1.2 | 3 | 175 | 1 | 8 |
| 192.168.1.103 | 3 | 58 | 2 | 8 |
| 192.168.1.6 | 2 | 7770 | 2 | 624 |
| 192.168.1.105 | 1 | 29 | 1 | 9 |
| 192.168.1.106 | 1 | 5 | 1 | 3 |