SnortSnarf alert page

Source: 130.54.208.193: #301-400

SnortSnarf v021111.1

Signature section (16810)

Top 20 source IPs

Top 20 dest IPs

Looking using input module SnortFileInput, with sources:

/var/log/snort/alert

Earliest: 11:41:01.461420 on 05/07/2010
Latest: 09:56:59.038483 on 05/22/2010

9 different signatures are present for 130.54.208.193 as a source

3 instances of IMAP authenticate overflow attempt
4 instances of WEB-MISC cross site scripting attempt
4 instances of (http_inspect) OVERSIZE CHUNK ENCODING
5 instances of (http_inspect) BARE BYTE UNICODE ENCODING
9 instances of WEB-MISC http directory traversal
9 instances of WEB-MISC Invalid HTTP Version String
13 instances of WEB-PHP test.php access
223 instances of IMAP status overflow attempt
428 instances of IMAP fetch overflow attempt

There are 1 distinct destination IPs in the alerts of the type on this page.

130.54.208.193 Whois lookup at: ARIN RIPE APNIC Geektools

DNS lookup at: Amenesi TRIUMF Princeton

More lookup links: Dshield Sam Spade

Go to: previous range, next range, all alerts, overview page

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-11:41:01.461420 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:485
***AP*** Seq: 0xDAFA9E93  Ack: 0x4A45723  Win: 0x29E0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-11:41:01.461420 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:485
***AP*** Seq: 0xDAFA9E93  Ack: 0x4A45723  Win: 0x29E0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:1844:9] IMAP authenticate overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-12:24:41.204381 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:243
***AP*** Seq: 0x93FC3A5  Ack: 0x4BAB8AE2  Win: 0x16A0  TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=10292][Xref => http://cve.mitre.org/cgi-bin/cvename.cgi?name=1999-0042]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-12:24:41.910582 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:246
***AP*** Seq: 0x93FC4D8  Ack: 0x4BAB8BB0  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-12:24:42.419742 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:265
***AP*** Seq: 0x93FC617  Ack: 0x4BAB8C91  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-12:24:43.113060 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:251
***AP*** Seq: 0x93FC74E  Ack: 0x4BAB8D64  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-12:24:43.756596 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:249
***AP*** Seq: 0x93FC884  Ack: 0x4BAB8E35  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-12:24:44.106909 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:251
***AP*** Seq: 0x93FC9B6  Ack: 0x4BAB8F08  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-12:24:44.784865 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:321
***AP*** Seq: 0x93FCB5E  Ack: 0x4BAB9021  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-13:42:48.924818 130.54.208.193:32776 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:243
***AP*** Seq: 0x2C93214B  Ack: 0x61D9C2C4  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-13:42:49.944226 130.54.208.193:32776 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:329
***AP*** Seq: 0x2C93232C  Ack: 0x61D9C3E5  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/07-13:42:51.195582 130.54.208.193:32776 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:276
***AP*** Seq: 0x2C933467  Ack: 0x61D9C4D1  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:02:47.443318 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:58388 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x78F0D63F  Ack: 0xBEFC8553  Win: 0x7C86  TcpLen: 32
TCP Options (3) => NOP NOP TS: 49060 318550644 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:02:54.159335 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:209
***AP*** Seq: 0xBEFDB9C4  Ack: 0x78F0D84F  Win: 0x29E0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:02:58.236940 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:191
***AP*** Seq: 0xBEFE307C  Ack: 0x78F0D8E6  Win: 0x29E0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:02:58.867006 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:348
***AP*** Seq: 0xBEFE807E  Ack: 0x78F0DA1A  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:03:14.867349 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:320
***AP*** Seq: 0xBEFE8A16  Ack: 0x78F0DB32  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:03:15.457930 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBEFF5EF1  Ack: 0x78F0DBDA  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:03:16.158221 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBEFFE106  Ack: 0x78F0DC82  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:03:17.178792 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:250
***AP*** Seq: 0xBF01EDCF  Ack: 0x78F0DD54  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:03:17.918119 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF031E1D  Ack: 0x78F0DDFC  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:03:18.828102 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF03F75F  Ack: 0x78F0DEA4  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:03:19.566613 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF05126E  Ack: 0x78F0DF4C  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:03:20.188790 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF05C3B8  Ack: 0x78F0DFF4  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:03:20.926557 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF06BA1A  Ack: 0x78F0E09C  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:03:21.437860 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF07152F  Ack: 0x78F0E144  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-08:03:23.037028 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:280
***AP*** Seq: 0xBF080358  Ack: 0x78F0E234  Win: 0x2E10  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-09:16:08.855497 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:268
***AP*** Seq: 0xED1B58C5  Ack: 0x9FB5B1AB  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-09:16:13.836229 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1449
***AP*** Seq: 0xED1B625D  Ack: 0x9FB5B72C  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-09:16:13.836229 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1449
***AP*** Seq: 0xED1B625D  Ack: 0x9FB5B72C  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-09:16:14.325523 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:358
***AP*** Seq: 0xED1B7AC8  Ack: 0x9FB5B86A  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-09:16:18.166822 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:458
***AP*** Seq: 0xED1B834A  Ack: 0x9FB5BA0C  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-09:16:18.166822 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:458
***AP*** Seq: 0xED1B834A  Ack: 0x9FB5BA0C  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-09:16:20.373366 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:237
***AP*** Seq: 0x9FB5BABD  Ack: 0xED1C239A  Win: 0x81F0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-18:46:56.828901 130.54.208.193:32920 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1320
***AP*** Seq: 0x54DE56C1  Ack: 0xB1E96E69  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-19:07:30.799059 130.54.208.193:32920 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:563
***AP*** Seq: 0x54DF0312  Ack: 0xB1E975D4  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/15-19:25:06.584746 130.54.208.193:32920 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0xB1E9763E  Ack: 0x54DF0411  Win: 0x875A  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-09:58:30.675437 130.54.208.193:32941 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:20689 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0x5C802F62  Ack: 0xA5374D7F  Win: 0x875A  TcpLen: 32
TCP Options (3) => NOP NOP TS: 9383182 327885202 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-09:58:34.853288 130.54.208.193:32941 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:394
***AP*** Seq: 0xA537CC12  Ack: 0x5C803290  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-09:58:38.235674 130.54.208.193:32941 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:289
***AP*** Seq: 0xA5380D20  Ack: 0x5C803389  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-11:32:06.496929 130.54.208.193:33150 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:804
***AP*** Seq: 0xD45CC597  Ack: 0x23AA03AE  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-12:23:27.148075 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:246
***AP*** Seq: 0xE3AC770C  Ack: 0x55098D15  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-12:23:27.600163 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:265
***AP*** Seq: 0xE3AC784B  Ack: 0x55098DF6  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-12:23:28.340675 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:319
***AP*** Seq: 0xE3AC79ED  Ack: 0x55098F0D  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-12:23:28.856951 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:253
***AP*** Seq: 0xE3AC7B21  Ack: 0x55098FE2  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-12:24:52.020865 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:906
***AP*** Seq: 0xE3AC8792  Ack: 0x55099344  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-12:24:56.400777 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:247
***AP*** Seq: 0xE3AD2663  Ack: 0x55099413  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-12:24:56.400777 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:247
***AP*** Seq: 0xE3AD2663  Ack: 0x55099413  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-14:59:42.034085 130.54.208.193:40291 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:177
***AP*** Seq: 0xA2A0FDA3  Ack: 0x31639BA2  Win: 0x3E96  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-15:24:45.915543 130.54.208.193:40291 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1482
***AP*** Seq: 0x3163A49A  Ack: 0xA2A10399  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-15:24:49.094084 130.54.208.193:40291 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:177
***AP*** Seq: 0xA2A105C5  Ack: 0x316447A3  Win: 0x3E96  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/16-16:48:51.629590 130.54.208.193:34618 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:554
***AP*** Seq: 0xCBB96C78  Ack: 0x3DB55B46  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/17-08:42:29.622847 130.54.208.193:46953 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0xD290BE0F  Ack: 0x4976FC24  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/17-08:42:30.632710 130.54.208.193:46953 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:264
***AP*** Seq: 0xD291444D  Ack: 0x4976FD04  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/17-08:42:31.929722 130.54.208.193:46953 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:39582 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x4976FD58  Ack: 0xD291733E  Win: 0x3E96  TcpLen: 32
TCP Options (3) => NOP NOP TS: 73270324 336069536 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/17-08:42:38.782450 130.54.208.193:46953 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:389
***AP*** Seq: 0xD2922452  Ack: 0x4977001C  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/17-08:42:42.365059 130.54.208.193:46953 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:199
***AP*** Seq: 0xD2924A61  Ack: 0x49770172  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/17-10:55:42.105205 130.54.208.193:38644 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:249
***AP*** Seq: 0x762F7B8C  Ack: 0xEF6D7D9F  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/17-20:04:34.938382 130.54.208.193:33436 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:317
***AP*** Seq: 0xE55CE634  Ack: 0x35E5947A  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/17-20:04:34.972651 130.54.208.193:33436 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:666
***AP*** Seq: 0x35E5947A  Ack: 0xE55CE69D  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/18-08:37:00.765963 130.54.208.193:33439 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:37067 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0xA62D512F  Ack: 0xE347447B  Win: 0x7C86  TcpLen: 32
TCP Options (3) => NOP NOP TS: 26173837 344676638 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/18-08:37:04.264491 130.54.208.193:33439 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:239
***AP*** Seq: 0xE347E1E1  Ack: 0xA62D52CE  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/18-08:37:05.343838 130.54.208.193:33439 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:337
***AP*** Seq: 0xE347E7BA  Ack: 0xA62D53F7  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/18-08:37:08.223576 130.54.208.193:33439 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:258
***AP*** Seq: 0xE3480844  Ack: 0xA62D54D1  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/18-08:37:10.742832 130.54.208.193:33439 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:215
***AP*** Seq: 0xE3483D50  Ack: 0xA62D5580  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-09:44:29.899142 130.54.208.193:33605 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:271
***AP*** Seq: 0x2BB2B8D4  Ack: 0xE3D36AD7  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-09:44:30.050818 130.54.208.193:33605 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:15184 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0xE3D36AD7  Ack: 0x2BB2E616  Win: 0x7C86  TcpLen: 32
TCP Options (3) => NOP NOP TS: 35218574 353721795 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-09:57:24.999374 130.54.208.193:33605 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1454
***AP*** Seq: 0xE3D37158  Ack: 0x2BB3FBA1  Win: 0x7C86  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-10:35:24.318277 130.54.208.193:33614 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:658
***AP*** Seq: 0xED5114A6  Ack: 0x9CB762EC  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-12:47:40.534842 130.54.208.193:33623 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:563
***AP*** Seq: 0x76FFBF60  Ack: 0xDD3BDF65  Win: 0x81F0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-15:54:31.256372 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:244
***AP*** Seq: 0x997376EA  Ack: 0x199359A5  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-15:54:35.563776 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1369
***AP*** Seq: 0x997380A0  Ack: 0x19935ED6  Win: 0x1D50  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-15:54:37.894217 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:505
***AP*** Seq: 0x99738862  Ack: 0x199360A7  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-15:58:22.002016 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1471
***AP*** Seq: 0x1993614A  Ack: 0x99738E06  Win: 0x7C86  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-16:06:32.119834 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1524
***AP*** Seq: 0x9973AE40  Ack: 0x19937402  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-16:06:36.695716 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:290
***AP*** Seq: 0x9973B0F4  Ack: 0x199374FC  Win: 0x2180  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-16:06:39.337287 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:480
***AP*** Seq: 0x9973B3E1  Ack: 0x199376B4  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-16:06:40.517803 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:274
***AP*** Seq: 0x9973B66C  Ack: 0x1993779E  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-16:06:43.926293 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:179
***AP*** Seq: 0x9973C016  Ack: 0x19937829  Win: 0x25B0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/19-17:56:40.861557 130.54.208.193:33669 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:241
***AP*** Seq: 0xDA0A4959  Ack: 0x6CCF5E90  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:08.826809 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:244
***AP*** Seq: 0x9C525570  Ack: 0x36EF9814  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:09.596741 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0x9C5348FF  Ack: 0x36EF98E1  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:10.917924 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:450
***AP*** Seq: 0x9C540A0B  Ack: 0x36EF9A7B  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:13.477442 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:360
***AP*** Seq: 0x9C554448  Ack: 0x36EF9BBB  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:14.864818 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:64749 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EF9BD8  Ack: 0x9C55760D  Win: 0x7C86  TcpLen: 32
TCP Options (3) => NOP NOP TS: 60704519 379208806 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:16.189464 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:64824 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EF9D88  Ack: 0x9C582181  Win: 0x81F0  TcpLen: 32
TCP Options (3) => NOP NOP TS: 60704652 379209034 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:17.544084 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:64894 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EF9F38  Ack: 0x9C5ACBE0  Win: 0x81F0  TcpLen: 32
TCP Options (3) => NOP NOP TS: 60704787 379209168 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:19.643047 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:65001 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EFA1C0  Ack: 0x9C5ECD3B  Win: 0x81F0  TcpLen: 32
TCP Options (3) => NOP NOP TS: 60704997 379209378 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:20.394488 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:65036 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EFA298  Ack: 0x9C60248C  Win: 0x81F0  TcpLen: 32
TCP Options (3) => NOP NOP TS: 60705072 379209440 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:21.039492 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:65071 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EFA370  Ack: 0x9C617BD9  Win: 0x81F0  TcpLen: 32
TCP Options (3) => NOP NOP TS: 60705137 379209517 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:23.149797 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:65174 IpLen:20 DgmLen:276 DF
***AP*** Seq: 0x36EFA5F8  Ack: 0x9C657569  Win: 0x81F0  TcpLen: 32
TCP Options (3) => NOP NOP TS: 60705348 379209736 
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:43.876360 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:403
***AP*** Seq: 0x9C67B486  Ack: 0x36EFAB33  Win: 0x57F0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:54.096040 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0x9C67FA27  Ack: 0x36EFACBC  Win: 0x57F0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:32:54.825247 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0x9C6862FD  Ack: 0x36EFAD89  Win: 0x57F0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:33:02.976061 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:340
***AP*** Seq: 0x9C687FF7  Ack: 0x36EFAEB5  Win: 0x57F0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:58:37.551627 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:314
***AP*** Seq: 0x9C689105  Ack: 0x36EFB274  Win: 0x5C20  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-08:58:39.108028 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:299
***AP*** Seq: 0x36EFB40F  Ack: 0x9C689EB6  Win: 0x81F0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:1112:6] WEB-MISC http directory traversal [**]
[Classification: Attempted Information Leak] [Priority: 2] 
05/22-08:59:31.340306 130.54.208.193:4368 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:5879
***AP*** Seq: 0xFCA50D4C  Ack: 0x252516E4  Win: 0x4188  TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS298]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-09:56:29.044877 130.54.208.193:33711 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:253
***AP*** Seq: 0xFB0D5F4D  Ack: 0x8BC13EC4  Win: 0x16A0  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2] 
05/22-09:56:59.038483 130.54.208.193:33711 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1687
***AP*** Seq: 0xFB0D71B8  Ack: 0x8BC14533  Win: 0x1920  TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]

Go to: previous range, next range, all alerts, overview page

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Sep 14 05:05:21 2010

130.54.208.193	Whois lookup at:	ARIN	RIPE	APNIC	Geektools
	DNS lookup at:	Amenesi	TRIUMF	Princeton
	More lookup links:	Dshield	Sam Spade