SnortSnarf alert page

Source: 130.54.208.193: #1-100

SnortSnarf v021111.1

Signature section (16810)

Top 20 source IPs

Top 20 dest IPs

Looking using input module SnortFileInput, with sources:

/var/log/snort/alert

Earliest: 17:30:25.524878 on 09/18/2009
Latest: 10:19:26.783581 on 04/20/2010

9 different signatures are present for 130.54.208.193 as a source

3 instances of IMAP authenticate overflow attempt
4 instances of WEB-MISC cross site scripting attempt
4 instances of (http_inspect) OVERSIZE CHUNK ENCODING
5 instances of (http_inspect) BARE BYTE UNICODE ENCODING
9 instances of WEB-MISC http directory traversal
9 instances of WEB-MISC Invalid HTTP Version String
13 instances of WEB-PHP test.php access
223 instances of IMAP status overflow attempt
428 instances of IMAP fetch overflow attempt

There are 1 distinct destination IPs in the alerts of the type on this page.

130.54.208.193 Whois lookup at: ARIN RIPE APNIC Geektools

DNS lookup at: Amenesi TRIUMF Princeton

More lookup links: Dshield Sam Spade

Go to: next range, all alerts, overview page

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
09/18-17:30:25.524878 130.54.208.193:1142 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:451
***AP*** Seq: 0x7D72AB8  Ack: 0xD8308FD1  Win: 0x4014  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
09/20-09:02:25.563084 130.54.208.193:2752 -> 192.168.24.11:143
TCP TTL:112 TOS:0x0 ID:43544 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0x9637E25D  Ack: 0xA4617D6E  Win: 0x3D4B  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
09/27-10:17:24.041639 130.54.208.193:4608 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:609
***AP*** Seq: 0x691F9210  Ack: 0xCBC8B187  Win: 0x4117  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:1844:9] IMAP authenticate overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
10/02-19:21:44.066788 130.54.208.193:2941 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:787
***AP*** Seq: 0x8D424F25  Ack: 0x509A3688  Win: 0x16D0  TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=10292][Xref => http://cve.mitre.org/cgi-bin/cvename.cgi?name=1999-0042]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
10/04-12:40:58.717653 130.54.208.193:1227 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1166
***AP*** Seq: 0x98F91B9D  Ack: 0x19BBD47F  Win: 0x410C  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
10/13-10:13:19.379793 130.54.208.193:2958 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2379
***AP*** Seq: 0x8B217046  Ack: 0xD4E58B9D  Win: 0x40B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
10/29-14:50:02.094221 130.54.208.193:2773 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3058
***AP*** Seq: 0x230502AF  Ack: 0x64E895A  Win: 0x40FF  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/01-09:47:04.687325 130.54.208.193:2735 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1293
***AP*** Seq: 0x6254888B  Ack: 0x1C37A7B1  Win: 0x40F2  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/13-09:16:45.780567 130.54.208.193:2517 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:31574 IpLen:20 DgmLen:250 DF
***AP*** Seq: 0x4C46CABD  Ack: 0x7FABC0AD  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/13-09:16:46.333094 130.54.208.193:2517 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:31615 IpLen:20 DgmLen:252 DF
***AP*** Seq: 0x4C46CB91  Ack: 0x7FAD05A5  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/13-09:26:11.854511 130.54.208.193:2517 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1497
***AP*** Seq: 0x4C46D7FC  Ack: 0x7FB1A50C  Win: 0x3FCA  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/14-09:24:32.057287 130.54.208.193:4167 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1455
***AP*** Seq: 0xB834D0C  Ack: 0xAEB5EB72  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/14-09:28:41.813459 130.54.208.193:4167 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2076
***AP*** Seq: 0xB83EC89  Ack: 0xAEB5F516  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/15-09:18:50.902022 130.54.208.193:1488 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1403
***AP*** Seq: 0xE7838947  Ack: 0x7EC7061B  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/20-09:00:04.986186 130.54.208.193:4929 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:54000 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0x5DDD0C47  Ack: 0x17A2DE93  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/20-19:10:42.533283 130.54.208.193:2383 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:284
***AP*** Seq: 0xE13E440B  Ack: 0x2C289296  Win: 0x3EB7  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/24-08:39:10.896209 130.54.208.193:3711 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1505
***AP*** Seq: 0xCD68B3E1  Ack: 0x3E747B15  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/25-13:50:28.048898 130.54.208.193:1031 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:63722 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x32CAA373  Ack: 0xA08BB862  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
11/27-09:31:01.659450 130.54.208.193:4154 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:539
***AP*** Seq: 0x52E8D33A  Ack: 0xBB6228ED  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/05-14:31:57.438593 130.54.208.193:4429 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:10496 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xF65DFFB8  Ack: 0xBB561926  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/08-09:45:50.641075 130.54.208.193:4612 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1174
***AP*** Seq: 0xEE2ECB66  Ack: 0xA1812985  Win: 0x29E0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/08-19:55:14.027411 130.54.208.193:2737 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:388
***AP*** Seq: 0x2FAB275C  Ack: 0x204BCF1F  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/12-08:48:38.305672 130.54.208.193:2388 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3601
***AP*** Seq: 0xA448612F  Ack: 0x525C95BC  Win: 0x4167  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/13-08:37:31.912820 130.54.208.193:4837 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1027
***AP*** Seq: 0x662AA9EA  Ack: 0x74BC86D3  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/14-08:33:30.813073 130.54.208.193:2615 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:15493 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xEB3618D0  Ack: 0x99B21E97  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/15-10:33:27.842291 130.54.208.193:3864 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:631
***AP*** Seq: 0x1CC9652F  Ack: 0x97A16ACD  Win: 0x3C8B  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/19-08:50:19.385922 130.54.208.193:4728 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:669
***AP*** Seq: 0x71C419D1  Ack: 0xC1B1E9D  Win: 0x40DE  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/20-09:10:21.282746 130.54.208.193:2019 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:906
***AP*** Seq: 0x2E002943  Ack: 0x8DAD9216  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/21-08:29:38.800793 130.54.208.193:3490 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2428
***AP*** Seq: 0x137BBC9D  Ack: 0x3A16A6AF  Win: 0x40F2  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
12/22-14:25:59.304600 130.54.208.193:39024 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1418
***AP*** Seq: 0xD081968A  Ack: 0xBFDCAC8F  Win: 0x16D0  TcpLen: 20

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/25-08:40:03.532469 130.54.208.193:3483 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:56061 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0x2A94A85E  Ack: 0x525F7AFF  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/25-08:45:08.445324 130.54.208.193:3483 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1285
***AP*** Seq: 0x2A94B2D1  Ack: 0x5260AFEB  Win: 0x3D33  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/28-08:45:33.172567 130.54.208.193:2893 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:26977 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xEF2CD09D  Ack: 0x27DBBFAD  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
12/28-08:45:53.938797 130.54.208.193:2893 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1117
***AP*** Seq: 0xEF2CD600  Ack: 0x27DCA5F0  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/10-09:14:41.182224 130.54.208.193:2194 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1493
***AP*** Seq: 0xB1E10F9C  Ack: 0xCC5C102C  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/11-08:34:42.032613 130.54.208.193:1828 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:878
***AP*** Seq: 0x5DEC5057  Ack: 0xAC987EED  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/18-10:01:55.207933 130.54.208.193:2550 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2433
***AP*** Seq: 0xE1175A1  Ack: 0x5A971D96  Win: 0x3C9A  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/19-09:17:31.890993 130.54.208.193:4590 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2029
***AP*** Seq: 0xD68C689B  Ack: 0xBA22E586  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/21-09:48:12.715207 130.54.208.193:4658 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:353
***AP*** Seq: 0xA20E4032  Ack: 0xDFD35B08  Win: 0x3EF5  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/22-09:51:49.031565 130.54.208.193:2484 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:32304 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xBA2F96B1  Ack: 0x1DF377B2  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/22-20:16:54.896318 130.54.208.193:3971 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:430
***AP*** Seq: 0x9E1CBE78  Ack: 0x675BEA9C  Win: 0xFFFF  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/27-14:19:00.792459 130.54.208.193:1278 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3098
***AP*** Seq: 0x4E75F787  Ack: 0x7EB11E1C  Win: 0x29E0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/27-14:19:51.613312 130.54.208.193:1278 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3576
***AP*** Seq: 0x4E786F85  Ack: 0x7EB12BEC  Win: 0x3AA0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/27-14:19:51.613312 130.54.208.193:1278 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3576
***AP*** Seq: 0x4E786F85  Ack: 0x7EB12BEC  Win: 0x3AA0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/27-14:20:11.489643 130.54.208.193:1278 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1807
***AP*** Seq: 0x4E78A5AC  Ack: 0x7EB132D3  Win: 0x4300  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/27-15:03:21.620880 130.54.208.193:1278 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1011
***AP*** Seq: 0x4E78DB49  Ack: 0x7EB1386E  Win: 0x4300  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/30-10:05:41.736541 130.54.208.193:3082 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:34057 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x5F5E9B0F  Ack: 0xE47256AB  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
01/31-10:11:18.025851 130.54.208.193:1596 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:671 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xEC41AAD6  Ack: 0xA7CBB6B7  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/01-10:00:53.088356 130.54.208.193:3156 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:49244 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x74F2C48  Ack: 0xBC3417A3  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/01-18:32:20.433331 130.54.208.193:4127 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1258
***AP*** Seq: 0xF968A11A  Ack: 0xFF810204  Win: 0x3DF6  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/03-14:39:30.811357 130.54.208.193:3130 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:32636 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x1A905372  Ack: 0x4822E69E  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/05-08:52:21.299168 130.54.208.193:4726 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:822
***AP*** Seq: 0xA9E028AF  Ack: 0x5F981EE0  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/06-09:18:31.366222 130.54.208.193:1524 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:55380 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xD5CFDA26  Ack: 0x49ED1F71  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/09-08:25:41.322192 130.54.208.193:4643 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2067
***AP*** Seq: 0x19482B3  Ack: 0x319CD32B  Win: 0x29E0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/11-15:22:13.176249 130.54.208.193:3553 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:8630 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0xCA4E5F8B  Ack: 0xE659AE47  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/12-12:04:36.327371 130.54.208.193:4431 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:38387 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x74C17BCD  Ack: 0x16C9D71  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/14-12:41:41.694256 130.54.208.193:1060 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1185
***AP*** Seq: 0x3AB928F0  Ack: 0xAFE3C9EF  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/15-08:26:50.877415 130.54.208.193:4210 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2439
***AP*** Seq: 0xF9D42261  Ack: 0x43E63790  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/16-10:14:40.029867 130.54.208.193:3091 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:366
***AP*** Seq: 0x21EE09D0  Ack: 0xCE855241  Win: 0x3CDA  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/19-09:23:01.859428 130.54.208.193:1412 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2434
***AP*** Seq: 0xB40F8642  Ack: 0xE9BE1A34  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/21-08:34:02.187071 130.54.208.193:3895 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:37083 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x3AC10D7D  Ack: 0x87E9F1D3  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/22-15:32:02.228371 130.54.208.193:3000 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:657
***AP*** Seq: 0x969E6724  Ack: 0x2107C4DC  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/25-15:11:01.402624 130.54.208.193:2337 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1965
***AP*** Seq: 0x43AF87D8  Ack: 0xD614A659  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
02/28-09:21:03.073657 130.54.208.193:3723 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:48446 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x3F655E56  Ack: 0xE594CE75  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
03/01-08:45:41.884933 130.54.208.193:1289 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:56276 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xE0226B01  Ack: 0x690DD9BE  Win: 0x4188  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
03/02-08:34:01.113122 130.54.208.193:2499 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1224
***AP*** Seq: 0xB4E7D493  Ack: 0x24101B6F  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
03/05-09:29:12.291708 130.54.208.193:3215 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1249
***AP*** Seq: 0x44C61CBE  Ack: 0xD7F50754  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
03/05-17:43:10.390647 130.54.208.193:1820 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:424
***AP*** Seq: 0xDB2A6E18  Ack: 0x86493021  Win: 0x3DBF  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/17-17:48:27.167186 130.54.208.193:35875 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:244
***AP*** Seq: 0x9E207C8C  Ack: 0xDCA0BD2B  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/17-22:24:29.106340 130.54.208.193:35882 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:229
***AP*** Seq: 0xAE118485  Ack: 0xBC737A23  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/17-22:24:30.337531 130.54.208.193:35882 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:477
***AP*** Seq: 0xAE1189AA  Ack: 0xBC737BD8  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/18-08:53:01.491944 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:267
***AP*** Seq: 0xEA7B2479  Ack: 0x81C4F1EF  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/18-08:53:01.491944 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:267
***AP*** Seq: 0xEA7B2479  Ack: 0x81C4F1EF  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/18-08:53:03.462763 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:237
***AP*** Seq: 0xEA7B41D8  Ack: 0x81C4F2B4  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/18-08:53:03.715847 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:14966 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0x81C4F2D1  Ack: 0xEA7B6EA0  Win: 0x7C86  TcpLen: 32
TCP Options (3) => NOP NOP TS: 112261755 85566373 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/18-08:53:22.761397 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:237
***AP*** Seq: 0xEA7CF92D  Ack: 0x81C4F5F2  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/18-08:53:28.978008 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:403
***AP*** Seq: 0xEA7D06A8  Ack: 0x81C4F75D  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/18-08:53:31.810858 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:277
***AP*** Seq: 0xEA7D0B5D  Ack: 0x81C4F84A  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2] 
04/18-08:53:56.289442 130.54.208.193:1121 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:4192
***AP*** Seq: 0xC6B3F58B  Ack: 0xF3C9DCF2  Win: 0x3E27  TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2] 
04/18-08:53:56.289442 130.54.208.193:1121 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:4192
***AP*** Seq: 0xC6B3F58B  Ack: 0xF3C9DCF2  Win: 0x3E27  TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/18-12:01:29.016595 130.54.208.193:35906 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:337
***AP*** Seq: 0x988AE1CB  Ack: 0x1349E889  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2] 
04/18-21:43:13.581385 130.54.208.193:1274 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:13415
***AP*** Seq: 0x4963EE63  Ack: 0xF223C581  Win: 0x7824  TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]

[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2] 
04/18-21:47:23.659208 130.54.208.193:1041 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:21123
***AP*** Seq: 0x58EE3931  Ack: 0x1EF2E4E8  Win: 0x9372  TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/19-09:15:12.904756 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:360
***AP*** Seq: 0x76F2F41A  Ack: 0x1C93C4E6  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/19-09:15:24.324708 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:259
***AP*** Seq: 0x76F39567  Ack: 0x1C93C839  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/19-09:36:28.432238 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:227
***AP*** Seq: 0x76F423BC  Ack: 0x1C93CA25  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/19-09:37:05.820949 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:195
***AP*** Seq: 0x76F42648  Ack: 0x1C93CAC0  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/19-09:37:08.072426 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:227
***AP*** Seq: 0x76F45ED2  Ack: 0x1C93CB7B  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/19-09:39:31.902624 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:687
***AP*** Seq: 0x1C93CCFC  Ack: 0x76F4905D  Win: 0x7C86  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/19-11:35:41.432969 130.54.208.193:36018 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1973
***AP*** Seq: 0x770658BA  Ack: 0x14874317  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/19-12:57:56.940676 130.54.208.193:36079 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1485
***AP*** Seq: 0x48494DDA  Ack: 0xDD5750B4  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:1113:5] WEB-MISC http directory traversal [**]
[Classification: Attempted Information Leak] [Priority: 2] 
04/19-23:32:53.071604 130.54.208.193:2074 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:6647
***AP*** Seq: 0x873D7952  Ack: 0x1A829E49  Win: 0x3E0D  TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS297]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/20-08:58:43.301519 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:32780 IpLen:20 DgmLen:264 DF
***AP*** Seq: 0x3A0FD40  Ack: 0x6014AD82  Win: 0x3E96  TcpLen: 32
TCP Options (3) => NOP NOP TS: 126143980 102880730 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/20-08:58:47.635952 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:32899 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x3A10099  Ack: 0x6019FF31  Win: 0x3E96  TcpLen: 32
TCP Options (3) => NOP NOP TS: 126148315 102881138 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/20-08:58:53.125009 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:33049 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x3A104D1  Ack: 0x6020B036  Win: 0x3E96  TcpLen: 32
TCP Options (3) => NOP NOP TS: 126153806 102881701 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/20-08:58:55.249036 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:33111 IpLen:20 DgmLen:276 DF
***AP*** Seq: 0x3A10681  Ack: 0x602353A1  Win: 0x3E96  TcpLen: 32
TCP Options (3) => NOP NOP TS: 126155930 102881931 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/20-08:59:26.600109 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:33184 IpLen:20 DgmLen:262 DF
***AP*** Seq: 0x3A1087D  Ack: 0x6024C65C  Win: 0x3E96  TcpLen: 32
TCP Options (3) => NOP NOP TS: 126187288 102884986 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/20-09:00:10.435633 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:259
***AP*** Seq: 0x3A10C93  Ack: 0x6026FD37  Win: 0x3E96  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/20-09:44:45.551059 130.54.208.193:36221 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1245
***AP*** Seq: 0x1F9B86B7  Ack: 0xDC312DA8  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
04/20-10:19:26.783581 130.54.208.193:35584 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1707
***AP*** Seq: 0x9C5436CF  Ack: 0x410DB03E  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

Go to: next range, all alerts, overview page

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Sep 14 05:05:21 2010

130.54.208.193	Whois lookup at:	ARIN	RIPE	APNIC	Geektools
	DNS lookup at:	Amenesi	TRIUMF	Princeton
	More lookup links:	Dshield	Sam Spade