[Silicon Defense logo]

SnortSnarf alert page

Source: 130.54.208.193

SnortSnarf v021111.1

Signature section (16810)Top 20 source IPsTop 20 dest IPs

698 such alerts found using input module SnortFileInput, with sources:
Earliest: 17:30:25.524878 on 09/18/2009
Latest: 11:56:39.597147 on 08/10/2010

9 different signatures are present for 130.54.208.193 as a source

There are 1 distinct destination IPs in the alerts of the type on this page.

130.54.208.193 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade
Go to: overview page


[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
09/18-17:30:25.524878 130.54.208.193:1142 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:451
***AP*** Seq: 0x7D72AB8 Ack: 0xD8308FD1 Win: 0x4014 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
09/20-09:02:25.563084 130.54.208.193:2752 -> 192.168.24.11:143
TCP TTL:112 TOS:0x0 ID:43544 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0x9637E25D Ack: 0xA4617D6E Win: 0x3D4B TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
09/27-10:17:24.041639 130.54.208.193:4608 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:609
***AP*** Seq: 0x691F9210 Ack: 0xCBC8B187 Win: 0x4117 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:1844:9] IMAP authenticate overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
10/02-19:21:44.066788 130.54.208.193:2941 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:787
***AP*** Seq: 0x8D424F25 Ack: 0x509A3688 Win: 0x16D0 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=10292][Xref => http://cve.mitre.org/cgi-bin/cvename.cgi?name=1999-0042]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
10/04-12:40:58.717653 130.54.208.193:1227 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1166
***AP*** Seq: 0x98F91B9D Ack: 0x19BBD47F Win: 0x410C TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
10/13-10:13:19.379793 130.54.208.193:2958 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2379
***AP*** Seq: 0x8B217046 Ack: 0xD4E58B9D Win: 0x40B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
10/29-14:50:02.094221 130.54.208.193:2773 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3058
***AP*** Seq: 0x230502AF Ack: 0x64E895A Win: 0x40FF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/01-09:47:04.687325 130.54.208.193:2735 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1293
***AP*** Seq: 0x6254888B Ack: 0x1C37A7B1 Win: 0x40F2 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/13-09:16:45.780567 130.54.208.193:2517 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:31574 IpLen:20 DgmLen:250 DF
***AP*** Seq: 0x4C46CABD Ack: 0x7FABC0AD Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/13-09:16:46.333094 130.54.208.193:2517 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:31615 IpLen:20 DgmLen:252 DF
***AP*** Seq: 0x4C46CB91 Ack: 0x7FAD05A5 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/13-09:26:11.854511 130.54.208.193:2517 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1497
***AP*** Seq: 0x4C46D7FC Ack: 0x7FB1A50C Win: 0x3FCA TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/14-09:24:32.057287 130.54.208.193:4167 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1455
***AP*** Seq: 0xB834D0C Ack: 0xAEB5EB72 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/14-09:28:41.813459 130.54.208.193:4167 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2076
***AP*** Seq: 0xB83EC89 Ack: 0xAEB5F516 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/15-09:18:50.902022 130.54.208.193:1488 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1403
***AP*** Seq: 0xE7838947 Ack: 0x7EC7061B Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/20-09:00:04.986186 130.54.208.193:4929 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:54000 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0x5DDD0C47 Ack: 0x17A2DE93 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/20-19:10:42.533283 130.54.208.193:2383 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:284
***AP*** Seq: 0xE13E440B Ack: 0x2C289296 Win: 0x3EB7 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/24-08:39:10.896209 130.54.208.193:3711 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1505
***AP*** Seq: 0xCD68B3E1 Ack: 0x3E747B15 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/25-13:50:28.048898 130.54.208.193:1031 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:63722 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x32CAA373 Ack: 0xA08BB862 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
11/27-09:31:01.659450 130.54.208.193:4154 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:539
***AP*** Seq: 0x52E8D33A Ack: 0xBB6228ED Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/05-14:31:57.438593 130.54.208.193:4429 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:10496 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xF65DFFB8 Ack: 0xBB561926 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/08-09:45:50.641075 130.54.208.193:4612 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1174
***AP*** Seq: 0xEE2ECB66 Ack: 0xA1812985 Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/08-19:55:14.027411 130.54.208.193:2737 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:388
***AP*** Seq: 0x2FAB275C Ack: 0x204BCF1F Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/12-08:48:38.305672 130.54.208.193:2388 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3601
***AP*** Seq: 0xA448612F Ack: 0x525C95BC Win: 0x4167 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/13-08:37:31.912820 130.54.208.193:4837 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1027
***AP*** Seq: 0x662AA9EA Ack: 0x74BC86D3 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/14-08:33:30.813073 130.54.208.193:2615 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:15493 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xEB3618D0 Ack: 0x99B21E97 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/15-10:33:27.842291 130.54.208.193:3864 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:631
***AP*** Seq: 0x1CC9652F Ack: 0x97A16ACD Win: 0x3C8B TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/19-08:50:19.385922 130.54.208.193:4728 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:669
***AP*** Seq: 0x71C419D1 Ack: 0xC1B1E9D Win: 0x40DE TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/20-09:10:21.282746 130.54.208.193:2019 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:906
***AP*** Seq: 0x2E002943 Ack: 0x8DAD9216 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/21-08:29:38.800793 130.54.208.193:3490 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2428
***AP*** Seq: 0x137BBC9D Ack: 0x3A16A6AF Win: 0x40F2 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
12/22-14:25:59.304600 130.54.208.193:39024 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1418
***AP*** Seq: 0xD081968A Ack: 0xBFDCAC8F Win: 0x16D0 TcpLen: 20
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/25-08:40:03.532469 130.54.208.193:3483 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:56061 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0x2A94A85E Ack: 0x525F7AFF Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/25-08:45:08.445324 130.54.208.193:3483 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1285
***AP*** Seq: 0x2A94B2D1 Ack: 0x5260AFEB Win: 0x3D33 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/28-08:45:33.172567 130.54.208.193:2893 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:26977 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xEF2CD09D Ack: 0x27DBBFAD Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
12/28-08:45:53.938797 130.54.208.193:2893 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1117
***AP*** Seq: 0xEF2CD600 Ack: 0x27DCA5F0 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/10-09:14:41.182224 130.54.208.193:2194 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1493
***AP*** Seq: 0xB1E10F9C Ack: 0xCC5C102C Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/11-08:34:42.032613 130.54.208.193:1828 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:878
***AP*** Seq: 0x5DEC5057 Ack: 0xAC987EED Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/18-10:01:55.207933 130.54.208.193:2550 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2433
***AP*** Seq: 0xE1175A1 Ack: 0x5A971D96 Win: 0x3C9A TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/19-09:17:31.890993 130.54.208.193:4590 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2029
***AP*** Seq: 0xD68C689B Ack: 0xBA22E586 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/21-09:48:12.715207 130.54.208.193:4658 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:353
***AP*** Seq: 0xA20E4032 Ack: 0xDFD35B08 Win: 0x3EF5 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/22-09:51:49.031565 130.54.208.193:2484 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:32304 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xBA2F96B1 Ack: 0x1DF377B2 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/22-20:16:54.896318 130.54.208.193:3971 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:430
***AP*** Seq: 0x9E1CBE78 Ack: 0x675BEA9C Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/27-14:19:00.792459 130.54.208.193:1278 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3098
***AP*** Seq: 0x4E75F787 Ack: 0x7EB11E1C Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/27-14:19:51.613312 130.54.208.193:1278 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3576
***AP*** Seq: 0x4E786F85 Ack: 0x7EB12BEC Win: 0x3AA0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/27-14:19:51.613312 130.54.208.193:1278 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3576
***AP*** Seq: 0x4E786F85 Ack: 0x7EB12BEC Win: 0x3AA0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/27-14:20:11.489643 130.54.208.193:1278 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1807
***AP*** Seq: 0x4E78A5AC Ack: 0x7EB132D3 Win: 0x4300 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/27-15:03:21.620880 130.54.208.193:1278 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1011
***AP*** Seq: 0x4E78DB49 Ack: 0x7EB1386E Win: 0x4300 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/30-10:05:41.736541 130.54.208.193:3082 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:34057 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x5F5E9B0F Ack: 0xE47256AB Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
01/31-10:11:18.025851 130.54.208.193:1596 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:671 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xEC41AAD6 Ack: 0xA7CBB6B7 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/01-10:00:53.088356 130.54.208.193:3156 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:49244 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x74F2C48 Ack: 0xBC3417A3 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/01-18:32:20.433331 130.54.208.193:4127 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1258
***AP*** Seq: 0xF968A11A Ack: 0xFF810204 Win: 0x3DF6 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/03-14:39:30.811357 130.54.208.193:3130 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:32636 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x1A905372 Ack: 0x4822E69E Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/05-08:52:21.299168 130.54.208.193:4726 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:822
***AP*** Seq: 0xA9E028AF Ack: 0x5F981EE0 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/06-09:18:31.366222 130.54.208.193:1524 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:55380 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xD5CFDA26 Ack: 0x49ED1F71 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/09-08:25:41.322192 130.54.208.193:4643 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2067
***AP*** Seq: 0x19482B3 Ack: 0x319CD32B Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/11-15:22:13.176249 130.54.208.193:3553 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:8630 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0xCA4E5F8B Ack: 0xE659AE47 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/12-12:04:36.327371 130.54.208.193:4431 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:38387 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x74C17BCD Ack: 0x16C9D71 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/14-12:41:41.694256 130.54.208.193:1060 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1185
***AP*** Seq: 0x3AB928F0 Ack: 0xAFE3C9EF Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/15-08:26:50.877415 130.54.208.193:4210 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2439
***AP*** Seq: 0xF9D42261 Ack: 0x43E63790 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/16-10:14:40.029867 130.54.208.193:3091 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:366
***AP*** Seq: 0x21EE09D0 Ack: 0xCE855241 Win: 0x3CDA TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/19-09:23:01.859428 130.54.208.193:1412 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2434
***AP*** Seq: 0xB40F8642 Ack: 0xE9BE1A34 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/21-08:34:02.187071 130.54.208.193:3895 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:37083 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x3AC10D7D Ack: 0x87E9F1D3 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/22-15:32:02.228371 130.54.208.193:3000 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:657
***AP*** Seq: 0x969E6724 Ack: 0x2107C4DC Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/25-15:11:01.402624 130.54.208.193:2337 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1965
***AP*** Seq: 0x43AF87D8 Ack: 0xD614A659 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
02/28-09:21:03.073657 130.54.208.193:3723 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:48446 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x3F655E56 Ack: 0xE594CE75 Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
03/01-08:45:41.884933 130.54.208.193:1289 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:56276 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xE0226B01 Ack: 0x690DD9BE Win: 0x4188 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
03/02-08:34:01.113122 130.54.208.193:2499 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1224
***AP*** Seq: 0xB4E7D493 Ack: 0x24101B6F Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
03/05-09:29:12.291708 130.54.208.193:3215 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1249
***AP*** Seq: 0x44C61CBE Ack: 0xD7F50754 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
03/05-17:43:10.390647 130.54.208.193:1820 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:424
***AP*** Seq: 0xDB2A6E18 Ack: 0x86493021 Win: 0x3DBF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/17-17:48:27.167186 130.54.208.193:35875 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:244
***AP*** Seq: 0x9E207C8C Ack: 0xDCA0BD2B Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/17-22:24:29.106340 130.54.208.193:35882 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:229
***AP*** Seq: 0xAE118485 Ack: 0xBC737A23 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/17-22:24:30.337531 130.54.208.193:35882 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:477
***AP*** Seq: 0xAE1189AA Ack: 0xBC737BD8 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/18-08:53:01.491944 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:267
***AP*** Seq: 0xEA7B2479 Ack: 0x81C4F1EF Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/18-08:53:01.491944 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:267
***AP*** Seq: 0xEA7B2479 Ack: 0x81C4F1EF Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/18-08:53:03.462763 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:237
***AP*** Seq: 0xEA7B41D8 Ack: 0x81C4F2B4 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/18-08:53:03.715847 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:14966 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0x81C4F2D1 Ack: 0xEA7B6EA0 Win: 0x7C86 TcpLen: 32
TCP Options (3) => NOP NOP TS: 112261755 85566373
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/18-08:53:22.761397 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:237
***AP*** Seq: 0xEA7CF92D Ack: 0x81C4F5F2 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/18-08:53:28.978008 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:403
***AP*** Seq: 0xEA7D06A8 Ack: 0x81C4F75D Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/18-08:53:31.810858 130.54.208.193:35886 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:277
***AP*** Seq: 0xEA7D0B5D Ack: 0x81C4F84A Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2]
04/18-08:53:56.289442 130.54.208.193:1121 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:4192
***AP*** Seq: 0xC6B3F58B Ack: 0xF3C9DCF2 Win: 0x3E27 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]
[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2]
04/18-08:53:56.289442 130.54.208.193:1121 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:4192
***AP*** Seq: 0xC6B3F58B Ack: 0xF3C9DCF2 Win: 0x3E27 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/18-12:01:29.016595 130.54.208.193:35906 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:337
***AP*** Seq: 0x988AE1CB Ack: 0x1349E889 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2]
04/18-21:43:13.581385 130.54.208.193:1274 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:13415
***AP*** Seq: 0x4963EE63 Ack: 0xF223C581 Win: 0x7824 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]
[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2]
04/18-21:47:23.659208 130.54.208.193:1041 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:21123
***AP*** Seq: 0x58EE3931 Ack: 0x1EF2E4E8 Win: 0x9372 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/19-09:15:12.904756 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:360
***AP*** Seq: 0x76F2F41A Ack: 0x1C93C4E6 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/19-09:15:24.324708 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:259
***AP*** Seq: 0x76F39567 Ack: 0x1C93C839 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/19-09:36:28.432238 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:227
***AP*** Seq: 0x76F423BC Ack: 0x1C93CA25 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/19-09:37:05.820949 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:195
***AP*** Seq: 0x76F42648 Ack: 0x1C93CAC0 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/19-09:37:08.072426 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:227
***AP*** Seq: 0x76F45ED2 Ack: 0x1C93CB7B Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/19-09:39:31.902624 130.54.208.193:36001 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:687
***AP*** Seq: 0x1C93CCFC Ack: 0x76F4905D Win: 0x7C86 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/19-11:35:41.432969 130.54.208.193:36018 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1973
***AP*** Seq: 0x770658BA Ack: 0x14874317 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/19-12:57:56.940676 130.54.208.193:36079 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1485
***AP*** Seq: 0x48494DDA Ack: 0xDD5750B4 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:1113:5] WEB-MISC http directory traversal [**]
[Classification: Attempted Information Leak] [Priority: 2]
04/19-23:32:53.071604 130.54.208.193:2074 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:6647
***AP*** Seq: 0x873D7952 Ack: 0x1A829E49 Win: 0x3E0D TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS297]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-08:58:43.301519 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:32780 IpLen:20 DgmLen:264 DF
***AP*** Seq: 0x3A0FD40 Ack: 0x6014AD82 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 126143980 102880730
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-08:58:47.635952 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:32899 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x3A10099 Ack: 0x6019FF31 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 126148315 102881138
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-08:58:53.125009 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:33049 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x3A104D1 Ack: 0x6020B036 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 126153806 102881701
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-08:58:55.249036 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:33111 IpLen:20 DgmLen:276 DF
***AP*** Seq: 0x3A10681 Ack: 0x602353A1 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 126155930 102881931
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-08:59:26.600109 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:33184 IpLen:20 DgmLen:262 DF
***AP*** Seq: 0x3A1087D Ack: 0x6024C65C Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 126187288 102884986
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-09:00:10.435633 130.54.208.193:45465 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:259
***AP*** Seq: 0x3A10C93 Ack: 0x6026FD37 Win: 0x3E96 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-09:44:45.551059 130.54.208.193:36221 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1245
***AP*** Seq: 0x1F9B86B7 Ack: 0xDC312DA8 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-10:19:26.783581 130.54.208.193:35584 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1707
***AP*** Seq: 0x9C5436CF Ack: 0x410DB03E Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-10:25:08.150558 130.54.208.193:35584 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:244
***AP*** Seq: 0x9C545FB0 Ack: 0x410DB16E Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-10:31:27.146000 130.54.208.193:58362 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:543
***AP*** Seq: 0xCF9A8DF3 Ack: 0x7295BE38 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-10:52:53.892206 130.54.208.193:36228 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1649
***AP*** Seq: 0xD3CBC714 Ack: 0x2047C636 Win: 0x16D0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-12:55:17.877567 130.54.208.193:48478 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1854
***AP*** Seq: 0xEC8EEF99 Ack: 0xC14A25EB Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-15:29:04.280290 130.54.208.193:1718 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1649
***AP*** Seq: 0x7C7CEA1 Ack: 0x3217695C Win: 0x6C0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-15:44:40.583419 130.54.208.193:55996 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:193
***AP*** Seq: 0x67B6E68E Ack: 0x18D7FC39 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/20-21:24:54.634229 130.54.208.193:36326 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:536
***AP*** Seq: 0x6A55396B Ack: 0xB6619FBF Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-09:59:16.136850 130.54.208.193:32778 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:331
***AP*** Seq: 0x8AEE057F Ack: 0x652B03D5 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-09:59:16.983259 130.54.208.193:32778 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:324
***AP*** Seq: 0x8AEE0725 Ack: 0x652B04F1 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-09:59:17.592598 130.54.208.193:32778 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:321
***AP*** Seq: 0x8AEE08C2 Ack: 0x652B060A Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-09:59:18.681107 130.54.208.193:32778 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:523
***AP*** Seq: 0x8AEE0B94 Ack: 0x652B07ED Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-10:46:50.796221 130.54.208.193:57041 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:346
***AP*** Seq: 0x3565A05E Ack: 0xE5A3B009 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:20:56.754763 130.54.208.193:32811 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:172
***AP*** Seq: 0xBEBDB92B Ack: 0x9021FA9D Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:20:57.343078 130.54.208.193:32811 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:335
***AP*** Seq: 0xBEBDBAD1 Ack: 0x9021FBC4 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:21:01.525041 130.54.208.193:32811 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1331
***AP*** Seq: 0x9021FFFB Ack: 0xBEBDC2B2 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:43:16.030286 130.54.208.193:47008 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:15008 IpLen:20 DgmLen:262 DF
***AP*** Seq: 0xC2D4BA48 Ack: 0x11E71079 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 69983267 112508173
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:44:10.322561 130.54.208.193:47008 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:243
***AP*** Seq: 0x11E92E49 Ack: 0xC2D4BFB7 Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:44:13.976034 130.54.208.193:47008 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:256
***AP*** Seq: 0x11E9D3E5 Ack: 0xC2D4C17D Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:44:17.830515 130.54.208.193:47008 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1218
***AP*** Seq: 0x11E9DC06 Ack: 0xC2D4C617 Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:44:38.360283 130.54.208.193:32811 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:263
***AP*** Seq: 0xBEBDE1EA Ack: 0x90220540 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:44:44.069978 130.54.208.193:32811 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:269
***AP*** Seq: 0xBEBF56C4 Ack: 0x90220625 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:44:45.979039 130.54.208.193:32811 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:263
***AP*** Seq: 0xBEBF58F1 Ack: 0x90220704 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:44:48.778969 130.54.208.193:32811 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:283
***AP*** Seq: 0xBEBF5B4E Ack: 0x902207F7 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-11:44:50.998782 130.54.208.193:32811 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:256
***AP*** Seq: 0x902208BA Ack: 0xBEBF5C92 Win: 0x875A TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-17:21:33.859422 130.54.208.193:32937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:312
***AP*** Seq: 0xB062B17F Ack: 0xE7C8780 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/21-17:37:55.334803 130.54.208.193:32937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0xB062B9B6 Ack: 0xE7D300D Win: 0x875A TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/22-11:54:49.173657 130.54.208.193:32983 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:439
***AP*** Seq: 0x744B9252 Ack: 0x488FE2DF Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/22-11:55:03.999263 130.54.208.193:32983 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:541
***AP*** Seq: 0x744CC3ED Ack: 0x488FE5CE Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/22-11:55:28.799401 130.54.208.193:32983 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:502
***AP*** Seq: 0x744E294D Ack: 0x488FE79C Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/22-11:55:29.780231 130.54.208.193:32983 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:233
***AP*** Seq: 0x488FE849 Ack: 0x744EC90D Win: 0x7C86 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/22-12:11:04.824759 130.54.208.193:32983 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0x488FE89D Ack: 0x744EC9D1 Win: 0x7C86 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/22-19:57:13.408799 130.54.208.193:33004 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:353
***AP*** Seq: 0x8F473E62 Ack: 0xA9B32DA Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/22-19:57:18.468028 130.54.208.193:33004 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:343
***AP*** Seq: 0x8F47B53C Ack: 0xA9B3409 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-08:51:28.616439 130.54.208.193:32793 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:331
***AP*** Seq: 0x96D939E5 Ack: 0x90D7B95 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-08:51:29.570096 130.54.208.193:32793 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:324
***AP*** Seq: 0x96D93B8B Ack: 0x90D7CB1 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-08:51:30.208546 130.54.208.193:32793 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:321
***AP*** Seq: 0x96D93D28 Ack: 0x90D7DCA Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-08:51:31.418139 130.54.208.193:32793 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:523
***AP*** Seq: 0x96D93FFA Ack: 0x90D7FAD Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-09:06:55.519491 130.54.208.193:32793 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:45888 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0x90D8432 Ack: 0x96DBA683 Win: 0x7C86 TcpLen: 32
TCP Options (3) => NOP NOP TS: 145118 154771303
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-09:07:06.484798 130.54.208.193:32793 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:353
***AP*** Seq: 0x96DC5C3D Ack: 0x90D86F1 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-09:07:10.046476 130.54.208.193:32793 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:217
***AP*** Seq: 0x96DC8E53 Ack: 0x90D8859 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-09:31:48.339804 130.54.208.193:46442 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:241
***AP*** Seq: 0x2F89CA19 Ack: 0x9B4C028A Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-09:31:49.524363 130.54.208.193:46442 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:612
***AP*** Seq: 0x2F89CD64 Ack: 0x9B4C04C6 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-09:31:50.758626 130.54.208.193:46442 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:535
***AP*** Seq: 0x2F89D034 Ack: 0x9B4C06B5 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-09:31:51.019494 130.54.208.193:46442 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:178
***AP*** Seq: 0x2F89D108 Ack: 0x9B4C073F Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-14:38:36.827945 130.54.208.193:37865 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:246
***AP*** Seq: 0xB49F5EE2 Ack: 0x1C5217D5 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-14:38:38.217524 130.54.208.193:37865 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:544
***AP*** Seq: 0xB49F61C3 Ack: 0x1C5219CD Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-14:38:38.800109 130.54.208.193:37865 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:253
***AP*** Seq: 0xB49F62F5 Ack: 0x1C521AA2 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-14:38:39.578974 130.54.208.193:37865 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:251
***AP*** Seq: 0xB49F6428 Ack: 0x1C521B75 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-14:38:40.210351 130.54.208.193:37865 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:249
***AP*** Seq: 0xB49F6567 Ack: 0x1C521C46 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-14:38:45.031766 130.54.208.193:37865 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:392
***AP*** Seq: 0xB49F67E7 Ack: 0x1C521DA6 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-14:38:47.251725 130.54.208.193:37865 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:223
***AP*** Seq: 0xB49F6AB2 Ack: 0x1C521E5D Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-21:42:01.569662 130.54.208.193:57246 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:750
***AP*** Seq: 0xF0B766CD Ack: 0x5B5BF5D3 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-21:42:02.783355 130.54.208.193:57246 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:535
***AP*** Seq: 0xF0B7699D Ack: 0x5B5BF7C2 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-21:42:03.140431 130.54.208.193:57246 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:241
***AP*** Seq: 0xF0B76AD1 Ack: 0x5B5BF88B Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/26-21:45:30.918049 130.54.208.193:57246 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:287
***AP*** Seq: 0xF0B86CD8 Ack: 0x5B5BFFA0 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-09:37:02.375502 130.54.208.193:57058 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:311
***AP*** Seq: 0x756990A4 Ack: 0xE4083223 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-09:37:04.238082 130.54.208.193:57058 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:258
***AP*** Seq: 0x756A7D88 Ack: 0xE40832FD Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-09:37:04.700554 130.54.208.193:57058 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:60591 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0xE408332E Ack: 0x756AABF4 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 85700411 163592444
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-10:39:10.362197 130.54.208.193:45197 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:249
***AP*** Seq: 0x62701BA3 Ack: 0xD2FFBE09 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-12:09:32.918270 130.54.208.193:42633 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0xFD237533 Ack: 0x8E4AC64A Win: 0x3E96 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-12:32:13.570518 130.54.208.193:42633 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:37421 IpLen:20 DgmLen:262 DF
***AP*** Seq: 0xFD237B0E Ack: 0x8E4ADD68 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 96211584 164643240
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-12:32:15.756428 130.54.208.193:42633 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:37475 IpLen:20 DgmLen:264 DF
***AP*** Seq: 0xFD237CB8 Ack: 0x8E4D6463 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 96213771 164643511
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-12:32:16.727344 130.54.208.193:42633 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:37498 IpLen:20 DgmLen:280 DF
***AP*** Seq: 0xFD237D8E Ack: 0x8E4EAC9D Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 96214742 164643611
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-12:32:23.848717 130.54.208.193:42633 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:440
***AP*** Seq: 0x8E507487 Ack: 0xFD238004 Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-14:18:49.583820 130.54.208.193:46659 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:265
***AP*** Seq: 0x9FCC873C Ack: 0x10CB4D27 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-14:19:15.507387 130.54.208.193:46659 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1066
***AP*** Seq: 0x9FCC8EAD Ack: 0x10CB5129 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-14:19:16.025844 130.54.208.193:46659 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:357
***AP*** Seq: 0x9FCC9105 Ack: 0x10CB5266 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-14:19:17.485913 130.54.208.193:46659 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:201
***AP*** Seq: 0x9FCCE6A2 Ack: 0x10CB5307 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-14:44:33.801597 130.54.208.193:46659 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0x10CB5371 Ack: 0x9FCCE7D5 Win: 0x3BF1 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-15:19:17.575655 130.54.208.193:55909 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:244
***AP*** Seq: 0x827F8401 Ack: 0xF3F99D6D Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-15:19:18.635383 130.54.208.193:55909 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:196
***AP*** Seq: 0xF3F99DF5 Ack: 0x827F9AAD Win: 0x3E96 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/27-21:05:14.041159 130.54.208.193:47775 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:219
***AP*** Seq: 0x995C71E8 Ack: 0xC53E954 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-08:40:36.117318 130.54.208.193:41515 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:273
***AP*** Seq: 0xA8F85994 Ack: 0x1F512A40 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-08:40:37.036102 130.54.208.193:41515 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:304
***AP*** Seq: 0xA8F96209 Ack: 0x1F512B48 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-08:40:39.233672 130.54.208.193:41515 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:377
***AP*** Seq: 0xA8F99165 Ack: 0x1F512C99 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-08:40:47.115382 130.54.208.193:41515 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:278
***AP*** Seq: 0xA8FA2861 Ack: 0x1F512D87 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-08:40:47.505940 130.54.208.193:41515 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:303
***AP*** Seq: 0xA8FA2BDE Ack: 0x1F512E8E Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-08:40:52.655204 130.54.208.193:41515 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:360
***AP*** Seq: 0xA8FAD451 Ack: 0x1F5130C6 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-08:40:56.075988 130.54.208.193:41515 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:285
***AP*** Seq: 0xA8FAE6B3 Ack: 0x1F5131BB Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-08:51:55.377444 130.54.208.193:32848 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1320
***AP*** Seq: 0x41802CF Ack: 0x7B784509 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-11:10:16.079510 130.54.208.193:55568 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1700
***AP*** Seq: 0xC5C049C Ack: 0x83B5AFB4 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-12:15:02.017915 130.54.208.193:58757 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1649
***AP*** Seq: 0x7B24D3C6 Ack: 0x30133F5 Win: 0x6C0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-15:19:49.716997 130.54.208.193:39381 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0xDD79348F Ack: 0x649E5CF8 Win: 0x1185 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-17:41:35.014334 130.54.208.193:54165 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1583
***AP*** Seq: 0xB71EC220 Ack: 0x30A017B7 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-17:42:05.804425 130.54.208.193:54165 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1707
***AP*** Seq: 0xB71ECE19 Ack: 0x30A01E3A Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-17:42:12.885324 130.54.208.193:54165 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:318
***AP*** Seq: 0xB71FAA15 Ack: 0x30A0218C Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/28-17:52:09.645701 130.54.208.193:54165 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:180
***AP*** Seq: 0xB71FAAA1 Ack: 0x30A02218 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/29-16:48:55.280698 130.54.208.193:42400 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:345
***AP*** Seq: 0x3D9CFAE1 Ack: 0xC022B8B7 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/29-16:48:59.969704 130.54.208.193:42400 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:377
***AP*** Seq: 0x3D9D2AB8 Ack: 0xC022BA08 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
04/29-16:49:08.221753 130.54.208.193:42400 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:333
***AP*** Seq: 0x3D9DBEB0 Ack: 0xC022BBF4 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:15:11.008740 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1026
***AP*** Seq: 0xFD169153 Ack: 0xF37EF92B Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:16:00.884645 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0xFD1831DE Ack: 0xF37EFE5F Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:16:01.325825 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0xFD184D87 Ack: 0xF37EFF03 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:16:02.121668 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0xFD18D4C6 Ack: 0xF37EFFA7 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:16:02.744368 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:222
***AP*** Seq: 0xFD1935BD Ack: 0xF37F005D Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:16:04.800425 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:3845 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0xF37F00DB Ack: 0xFD1965D2 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 254878 198027325
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:16:10.639087 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:255
***AP*** Seq: 0xFD1A1C82 Ack: 0xF37F028A Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:16:25.633209 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:174
***AP*** Seq: 0xFD1B40DD Ack: 0xF37F0676 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:16:30.944749 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:517
***AP*** Seq: 0xFD1B65E2 Ack: 0xF37F0853 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:16:31.573988 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:203
***AP*** Seq: 0xFD1C3236 Ack: 0xF37F08F6 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:16:31.915905 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:180
***AP*** Seq: 0xFD1C50E2 Ack: 0xF37F0982 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:26:15.773328 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1471
***AP*** Seq: 0xF37F09EF Ack: 0xFD1C5240 Win: 0x3E96 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:38:41.304803 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1471
***AP*** Seq: 0xF37F0FC7 Ack: 0xFD1C5B13 Win: 0x3E96 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-09:44:10.916443 130.54.208.193:35153 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1471
***AP*** Seq: 0xF37F159F Ack: 0xFD1C63E6 Win: 0x3E96 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-13:22:26.155664 130.54.208.193:33546 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:182
***AP*** Seq: 0xC49816A3 Ack: 0x9E2858B3 Win: 0x7C86 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-21:44:02.257247 130.54.208.193:52918 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:253
***AP*** Seq: 0x3AC1492 Ack: 0x265AC3 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-21:44:03.274600 130.54.208.193:52918 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:470
***AP*** Seq: 0x3AC170E Ack: 0x265C71 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-21:44:04.381750 130.54.208.193:52918 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:464
***AP*** Seq: 0x3AC1973 Ack: 0x265E19 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-21:44:04.823361 130.54.208.193:52918 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:249
***AP*** Seq: 0x3AC1AB2 Ack: 0x265EEA Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-21:44:32.430549 130.54.208.193:52918 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:394
***AP*** Seq: 0x3AC1D38 Ack: 0x26604C Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/01-21:44:58.927073 130.54.208.193:52918 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:272
***AP*** Seq: 0x3AC2640 Ack: 0x266134 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:1113:5] WEB-MISC http directory traversal [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/01-21:56:17.007699 130.54.208.193:1793 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:8303
***AP*** Seq: 0xAA0677C1 Ack: 0x32A69827 Win: 0x3E6E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS297]
[**] [1:1113:5] WEB-MISC http directory traversal [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/01-21:56:20.248323 130.54.208.193:1792 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:6826
***AP*** Seq: 0x32A9AF59 Ack: 0x7181F7AA Win: 0x643E TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS297]
[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2]
05/01-21:59:52.185900 130.54.208.193:1794 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:4743
***AP*** Seq: 0x85159344 Ack: 0x3F35A8C2 Win: 0x3E14 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]
[**] [1:1113:5] WEB-MISC http directory traversal [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/01-22:04:15.869397 130.54.208.193:1804 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:6840
***AP*** Seq: 0x596387C9 Ack: 0x503706B3 Win: 0x4188 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS297]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-09:13:20.026781 130.54.208.193:59494 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0x1FD49907 Ack: 0x2090AB44 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-09:13:22.277070 130.54.208.193:59494 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:237
***AP*** Seq: 0x1FD54A0C Ack: 0x2090AC09 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-09:13:22.532807 130.54.208.193:59494 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:50823 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0x2090AC26 Ack: 0x1FD5771A Win: 0x5372 TcpLen: 32
TCP Options (3) => NOP NOP TS: 86511533 206651318
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-09:13:42.385354 130.54.208.193:59494 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:240
***AP*** Seq: 0x1FD62E38 Ack: 0x2090ADE2 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-09:13:43.055932 130.54.208.193:59494 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:336
***AP*** Seq: 0x1FD63D00 Ack: 0x2090AF0A Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-09:13:46.975075 130.54.208.193:59494 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:275
***AP*** Seq: 0x1FD656AA Ack: 0x2090AFF5 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-09:13:54.544813 130.54.208.193:59494 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:443
***AP*** Seq: 0x1FD6677D Ack: 0x2090B188 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-09:16:22.440612 130.54.208.193:59494 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:377
***AP*** Seq: 0x1FD6B4DE Ack: 0x2090B445 Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-09:16:23.892147 130.54.208.193:59494 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:432
***AP*** Seq: 0x1FD6B869 Ack: 0x2090B5CD Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-12:33:00.261680 130.54.208.193:33612 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:438
***AP*** Seq: 0x1934A495 Ack: 0x4AEC1655 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-14:53:17.377822 130.54.208.193:33615 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1139
***AP*** Seq: 0x295A60A1 Ack: 0x40CB6DAA Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-17:28:12.462900 130.54.208.193:48397 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:337
***AP*** Seq: 0x752F4C21 Ack: 0x78610261 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-17:28:13.540961 130.54.208.193:48397 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:460
***AP*** Seq: 0x752F4E8B Ack: 0x78610405 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-17:28:47.370124 130.54.208.193:48397 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:897
***AP*** Seq: 0x752F67D4 Ack: 0x7861075E Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-17:29:02.460683 130.54.208.193:48397 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:280
***AP*** Seq: 0x752F89E9 Ack: 0x7861084E Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-17:29:02.460683 130.54.208.193:48397 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:280
***AP*** Seq: 0x752F89E9 Ack: 0x7861084E Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-17:29:05.182517 130.54.208.193:48397 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:543
***AP*** Seq: 0x752F9F0B Ack: 0x78610A45 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-17:29:05.182517 130.54.208.193:48397 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:543
***AP*** Seq: 0x752F9F0B Ack: 0x78610A45 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-20:24:29.722939 130.54.208.193:33748 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:329
***AP*** Seq: 0xB928ABE Ack: 0xF24E89A7 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/02-20:24:31.853030 130.54.208.193:33748 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:318
***AP*** Seq: 0xB929973 Ack: 0xF24E8ABD Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:21:03.694006 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:253
***AP*** Seq: 0x6B70AA0 Ack: 0x102B21A2 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:21:04.139327 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:263
***AP*** Seq: 0x6B70BE4 Ack: 0x102B2281 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:21:05.207531 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:460
***AP*** Seq: 0x6B70E4F Ack: 0x102B2425 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:21:32.477065 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:906
***AP*** Seq: 0x6B722E9 Ack: 0x102B2787 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:25:31.851735 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:286
***AP*** Seq: 0x6B7BB39 Ack: 0x102B28E8 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:25:35.845139 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:267
***AP*** Seq: 0x6B7E2C0 Ack: 0x102B29CB Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:25:36.680876 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:336
***AP*** Seq: 0x6B80261 Ack: 0x102B2AF3 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:25:54.900403 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:275
***AP*** Seq: 0x6B821C4 Ack: 0x102B2BDE Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:26:05.010734 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:260
***AP*** Seq: 0x6B83A7F Ack: 0x102B2CBA Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:26:27.849787 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:270
***AP*** Seq: 0x6B86B1A Ack: 0x102B2DA0 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:26:38.480492 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:443
***AP*** Seq: 0x6B87A56 Ack: 0x102B2F33 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-13:26:43.389773 130.54.208.193:57895 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:383
***AP*** Seq: 0x6B8AE96 Ack: 0x102B308A Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-15:56:14.810391 130.54.208.193:33060 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:331
***AP*** Seq: 0x5019426A Ack: 0x5ACDAA9D Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-15:56:16.081058 130.54.208.193:33060 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:533
***AP*** Seq: 0x50194546 Ack: 0x5ACDAC8A Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-15:56:44.011867 130.54.208.193:33060 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:646
***AP*** Seq: 0x50194A4D Ack: 0x5ACDAEE8 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-15:56:46.961794 130.54.208.193:33060 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:560
***AP*** Seq: 0x50195F31 Ack: 0x5ACDB0F0 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-15:56:46.961794 130.54.208.193:33060 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:560
***AP*** Seq: 0x50195F31 Ack: 0x5ACDB0F0 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-15:56:51.621640 130.54.208.193:33060 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:293
***AP*** Seq: 0x50198996 Ack: 0x5ACDB316 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-15:57:10.552397 130.54.208.193:33060 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:320
***AP*** Seq: 0x5019AA91 Ack: 0x5ACDB42E Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/03-15:57:12.352042 130.54.208.193:33060 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:477
***AP*** Seq: 0x5019AF18 Ack: 0x5ACDB5E3 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:18:22.302458 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:290
***AP*** Seq: 0x15F497E5 Ack: 0x2FC93052 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:18:31.254333 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:185
***AP*** Seq: 0x15F511CD Ack: 0x2FC930E3 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:18:31.933823 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0x15F5E2F0 Ack: 0x2FC93187 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:18:32.672821 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0x15F6CD1D Ack: 0x2FC93254 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:18:33.312538 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0x15F74E0A Ack: 0x2FC932F8 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:18:34.413062 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:269
***AP*** Seq: 0x15F774ED Ack: 0x2FC933DD Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:18:35.681173 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:46718 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x2FC93431 Ack: 0x15F7A3A2 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 364085681 234403329
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:18:43.231836 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:470
***AP*** Seq: 0x15F903A6 Ack: 0x2FC9376A Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:18:56.651566 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:411
***AP*** Seq: 0x15F9398A Ack: 0x2FC938DD Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:19:00.826176 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:189
***AP*** Seq: 0x15F9479F Ack: 0x2FC93972 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:19:04.901243 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:340
***AP*** Seq: 0x15F989E2 Ack: 0x2FC93C85 Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:19:09.231987 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0x15F9F977 Ack: 0x2FC93E67 Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-14:19:09.744141 130.54.208.193:45447 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:203
***AP*** Seq: 0x15FA2DD3 Ack: 0x2FC93F0A Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-16:40:09.795980 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:192
***AP*** Seq: 0x6084F3F5 Ack: 0x7B565156 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-16:40:10.930531 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:462
***AP*** Seq: 0x6084F669 Ack: 0x7B5652FC Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-16:40:11.282052 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:183
***AP*** Seq: 0x6084F739 Ack: 0x7B56538B Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-16:40:11.896520 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:251
***AP*** Seq: 0x6084F86C Ack: 0x7B56545E Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-16:40:12.329663 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:249
***AP*** Seq: 0x6084F9AB Ack: 0x7B56552F Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-16:40:15.556971 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:183
***AP*** Seq: 0x6084FBF7 Ack: 0x7B5655BE Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-16:40:15.926899 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:328
***AP*** Seq: 0x6084FE1B Ack: 0x7B5656DE Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-16:40:18.787351 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:243
***AP*** Seq: 0x60851067 Ack: 0x7B5657A9 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-16:40:18.787351 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:243
***AP*** Seq: 0x60851067 Ack: 0x7B5657A9 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-16:40:19.957157 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:333
***AP*** Seq: 0x608515A8 Ack: 0x7B5658CE Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-16:40:19.957157 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:333
***AP*** Seq: 0x608515A8 Ack: 0x7B5658CE Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-17:04:28.589276 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:403
***AP*** Seq: 0x60852FD4 Ack: 0x7B565B3F Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-17:04:29.641855 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:462
***AP*** Seq: 0x6085328D Ack: 0x7B565CE5 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-17:04:30.193246 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:322
***AP*** Seq: 0x60853427 Ack: 0x7B565DFF Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-17:04:30.843611 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:258
***AP*** Seq: 0x60853563 Ack: 0x7B565ED9 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/05-17:04:30.908007 130.54.208.193:42378 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:166
***AP*** Seq: 0x7B565ED9 Ack: 0x608535CF Win: 0x2ABB TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:04:47.983775 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:471
***AP*** Seq: 0xDAF273CC Ack: 0x4A43A29 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:10:23.016169 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0xDAF501F7 Ack: 0x4A441C4 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:10:23.847485 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0xDAF5D9B1 Ack: 0x4A44291 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:10:24.936031 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0xDAF735B4 Ack: 0x4A4435E Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:10:25.695263 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:263
***AP*** Seq: 0xDAF7E703 Ack: 0x4A4443D Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:10:27.612419 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:29483 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x4A444BB Ack: 0xDAF81784 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 525633079 250554938
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:10:30.931076 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:255
***AP*** Seq: 0xDAF89CF9 Ack: 0x4A4466A Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:10:34.296651 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:357
***AP*** Seq: 0xDAF92EA3 Ack: 0x4A447A7 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:10:40.925660 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:253
***AP*** Seq: 0xDAF95171 Ack: 0x4A4487C Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:10:47.065685 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:260
***AP*** Seq: 0xDAF975DD Ack: 0x4A44958 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:10:56.370908 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:438
***AP*** Seq: 0xDAF99614 Ack: 0x4A44AE6 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:11:00.275005 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:347
***AP*** Seq: 0xDAF9D042 Ack: 0x4A44C19 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:11:00.905877 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0xDAFA45AC Ack: 0x4A44CE6 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:11:01.664485 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:183
***AP*** Seq: 0x4A44D60 Ack: 0xDAFA5F94 Win: 0x3E96 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:40:59.607964 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1502
***AP*** Seq: 0xDAFA9A37 Ack: 0x4A45566 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:40:59.607964 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1502
***AP*** Seq: 0xDAFA9A37 Ack: 0x4A45566 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:41:01.461420 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:485
***AP*** Seq: 0xDAFA9E93 Ack: 0x4A45723 Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-11:41:01.461420 130.54.208.193:53323 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:485
***AP*** Seq: 0xDAFA9E93 Ack: 0x4A45723 Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:1844:9] IMAP authenticate overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-12:24:41.204381 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:243
***AP*** Seq: 0x93FC3A5 Ack: 0x4BAB8AE2 Win: 0x16A0 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=10292][Xref => http://cve.mitre.org/cgi-bin/cvename.cgi?name=1999-0042]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-12:24:41.910582 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:246
***AP*** Seq: 0x93FC4D8 Ack: 0x4BAB8BB0 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-12:24:42.419742 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:265
***AP*** Seq: 0x93FC617 Ack: 0x4BAB8C91 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-12:24:43.113060 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:251
***AP*** Seq: 0x93FC74E Ack: 0x4BAB8D64 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-12:24:43.756596 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:249
***AP*** Seq: 0x93FC884 Ack: 0x4BAB8E35 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-12:24:44.106909 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:251
***AP*** Seq: 0x93FC9B6 Ack: 0x4BAB8F08 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-12:24:44.784865 130.54.208.193:32771 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:321
***AP*** Seq: 0x93FCB5E Ack: 0x4BAB9021 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-13:42:48.924818 130.54.208.193:32776 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:243
***AP*** Seq: 0x2C93214B Ack: 0x61D9C2C4 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-13:42:49.944226 130.54.208.193:32776 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:329
***AP*** Seq: 0x2C93232C Ack: 0x61D9C3E5 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/07-13:42:51.195582 130.54.208.193:32776 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:276
***AP*** Seq: 0x2C933467 Ack: 0x61D9C4D1 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:02:47.443318 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:58388 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x78F0D63F Ack: 0xBEFC8553 Win: 0x7C86 TcpLen: 32
TCP Options (3) => NOP NOP TS: 49060 318550644
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:02:54.159335 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:209
***AP*** Seq: 0xBEFDB9C4 Ack: 0x78F0D84F Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:02:58.236940 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:191
***AP*** Seq: 0xBEFE307C Ack: 0x78F0D8E6 Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:02:58.867006 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:348
***AP*** Seq: 0xBEFE807E Ack: 0x78F0DA1A Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:03:14.867349 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:320
***AP*** Seq: 0xBEFE8A16 Ack: 0x78F0DB32 Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:03:15.457930 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBEFF5EF1 Ack: 0x78F0DBDA Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:03:16.158221 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBEFFE106 Ack: 0x78F0DC82 Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:03:17.178792 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:250
***AP*** Seq: 0xBF01EDCF Ack: 0x78F0DD54 Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:03:17.918119 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF031E1D Ack: 0x78F0DDFC Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:03:18.828102 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF03F75F Ack: 0x78F0DEA4 Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:03:19.566613 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF05126E Ack: 0x78F0DF4C Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:03:20.188790 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF05C3B8 Ack: 0x78F0DFF4 Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:03:20.926557 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF06BA1A Ack: 0x78F0E09C Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:03:21.437860 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:208
***AP*** Seq: 0xBF07152F Ack: 0x78F0E144 Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-08:03:23.037028 130.54.208.193:32772 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:280
***AP*** Seq: 0xBF080358 Ack: 0x78F0E234 Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-09:16:08.855497 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:268
***AP*** Seq: 0xED1B58C5 Ack: 0x9FB5B1AB Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-09:16:13.836229 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1449
***AP*** Seq: 0xED1B625D Ack: 0x9FB5B72C Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-09:16:13.836229 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1449
***AP*** Seq: 0xED1B625D Ack: 0x9FB5B72C Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-09:16:14.325523 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:358
***AP*** Seq: 0xED1B7AC8 Ack: 0x9FB5B86A Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-09:16:18.166822 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:458
***AP*** Seq: 0xED1B834A Ack: 0x9FB5BA0C Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-09:16:18.166822 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:458
***AP*** Seq: 0xED1B834A Ack: 0x9FB5BA0C Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-09:16:20.373366 130.54.208.193:32800 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:237
***AP*** Seq: 0x9FB5BABD Ack: 0xED1C239A Win: 0x81F0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-18:46:56.828901 130.54.208.193:32920 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1320
***AP*** Seq: 0x54DE56C1 Ack: 0xB1E96E69 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-19:07:30.799059 130.54.208.193:32920 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:563
***AP*** Seq: 0x54DF0312 Ack: 0xB1E975D4 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/15-19:25:06.584746 130.54.208.193:32920 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0xB1E9763E Ack: 0x54DF0411 Win: 0x875A TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-09:58:30.675437 130.54.208.193:32941 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:20689 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0x5C802F62 Ack: 0xA5374D7F Win: 0x875A TcpLen: 32
TCP Options (3) => NOP NOP TS: 9383182 327885202
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-09:58:34.853288 130.54.208.193:32941 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:394
***AP*** Seq: 0xA537CC12 Ack: 0x5C803290 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-09:58:38.235674 130.54.208.193:32941 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:289
***AP*** Seq: 0xA5380D20 Ack: 0x5C803389 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-11:32:06.496929 130.54.208.193:33150 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:804
***AP*** Seq: 0xD45CC597 Ack: 0x23AA03AE Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-12:23:27.148075 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:246
***AP*** Seq: 0xE3AC770C Ack: 0x55098D15 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-12:23:27.600163 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:265
***AP*** Seq: 0xE3AC784B Ack: 0x55098DF6 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-12:23:28.340675 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:319
***AP*** Seq: 0xE3AC79ED Ack: 0x55098F0D Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-12:23:28.856951 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:253
***AP*** Seq: 0xE3AC7B21 Ack: 0x55098FE2 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-12:24:52.020865 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:906
***AP*** Seq: 0xE3AC8792 Ack: 0x55099344 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-12:24:56.400777 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:247
***AP*** Seq: 0xE3AD2663 Ack: 0x55099413 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-12:24:56.400777 130.54.208.193:45937 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:247
***AP*** Seq: 0xE3AD2663 Ack: 0x55099413 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-14:59:42.034085 130.54.208.193:40291 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:177
***AP*** Seq: 0xA2A0FDA3 Ack: 0x31639BA2 Win: 0x3E96 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-15:24:45.915543 130.54.208.193:40291 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1482
***AP*** Seq: 0x3163A49A Ack: 0xA2A10399 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-15:24:49.094084 130.54.208.193:40291 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:177
***AP*** Seq: 0xA2A105C5 Ack: 0x316447A3 Win: 0x3E96 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/16-16:48:51.629590 130.54.208.193:34618 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:554
***AP*** Seq: 0xCBB96C78 Ack: 0x3DB55B46 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/17-08:42:29.622847 130.54.208.193:46953 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0xD290BE0F Ack: 0x4976FC24 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/17-08:42:30.632710 130.54.208.193:46953 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:264
***AP*** Seq: 0xD291444D Ack: 0x4976FD04 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/17-08:42:31.929722 130.54.208.193:46953 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:39582 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x4976FD58 Ack: 0xD291733E Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 73270324 336069536
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/17-08:42:38.782450 130.54.208.193:46953 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:389
***AP*** Seq: 0xD2922452 Ack: 0x4977001C Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/17-08:42:42.365059 130.54.208.193:46953 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:199
***AP*** Seq: 0xD2924A61 Ack: 0x49770172 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/17-10:55:42.105205 130.54.208.193:38644 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:249
***AP*** Seq: 0x762F7B8C Ack: 0xEF6D7D9F Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/17-20:04:34.938382 130.54.208.193:33436 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:317
***AP*** Seq: 0xE55CE634 Ack: 0x35E5947A Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/17-20:04:34.972651 130.54.208.193:33436 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:666
***AP*** Seq: 0x35E5947A Ack: 0xE55CE69D Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/18-08:37:00.765963 130.54.208.193:33439 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:37067 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0xA62D512F Ack: 0xE347447B Win: 0x7C86 TcpLen: 32
TCP Options (3) => NOP NOP TS: 26173837 344676638
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/18-08:37:04.264491 130.54.208.193:33439 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:239
***AP*** Seq: 0xE347E1E1 Ack: 0xA62D52CE Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/18-08:37:05.343838 130.54.208.193:33439 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:337
***AP*** Seq: 0xE347E7BA Ack: 0xA62D53F7 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/18-08:37:08.223576 130.54.208.193:33439 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:258
***AP*** Seq: 0xE3480844 Ack: 0xA62D54D1 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/18-08:37:10.742832 130.54.208.193:33439 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:215
***AP*** Seq: 0xE3483D50 Ack: 0xA62D5580 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-09:44:29.899142 130.54.208.193:33605 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:271
***AP*** Seq: 0x2BB2B8D4 Ack: 0xE3D36AD7 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-09:44:30.050818 130.54.208.193:33605 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:15184 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0xE3D36AD7 Ack: 0x2BB2E616 Win: 0x7C86 TcpLen: 32
TCP Options (3) => NOP NOP TS: 35218574 353721795
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-09:57:24.999374 130.54.208.193:33605 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1454
***AP*** Seq: 0xE3D37158 Ack: 0x2BB3FBA1 Win: 0x7C86 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-10:35:24.318277 130.54.208.193:33614 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:658
***AP*** Seq: 0xED5114A6 Ack: 0x9CB762EC Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-12:47:40.534842 130.54.208.193:33623 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:563
***AP*** Seq: 0x76FFBF60 Ack: 0xDD3BDF65 Win: 0x81F0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-15:54:31.256372 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:244
***AP*** Seq: 0x997376EA Ack: 0x199359A5 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-15:54:35.563776 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1369
***AP*** Seq: 0x997380A0 Ack: 0x19935ED6 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-15:54:37.894217 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:505
***AP*** Seq: 0x99738862 Ack: 0x199360A7 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-15:58:22.002016 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1471
***AP*** Seq: 0x1993614A Ack: 0x99738E06 Win: 0x7C86 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-16:06:32.119834 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1524
***AP*** Seq: 0x9973AE40 Ack: 0x19937402 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-16:06:36.695716 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:290
***AP*** Seq: 0x9973B0F4 Ack: 0x199374FC Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-16:06:39.337287 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:480
***AP*** Seq: 0x9973B3E1 Ack: 0x199376B4 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-16:06:40.517803 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:274
***AP*** Seq: 0x9973B66C Ack: 0x1993779E Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-16:06:43.926293 130.54.208.193:33655 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:179
***AP*** Seq: 0x9973C016 Ack: 0x19937829 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/19-17:56:40.861557 130.54.208.193:33669 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:241
***AP*** Seq: 0xDA0A4959 Ack: 0x6CCF5E90 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:08.826809 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:244
***AP*** Seq: 0x9C525570 Ack: 0x36EF9814 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:09.596741 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0x9C5348FF Ack: 0x36EF98E1 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:10.917924 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:450
***AP*** Seq: 0x9C540A0B Ack: 0x36EF9A7B Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:13.477442 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:360
***AP*** Seq: 0x9C554448 Ack: 0x36EF9BBB Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:14.864818 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:64749 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EF9BD8 Ack: 0x9C55760D Win: 0x7C86 TcpLen: 32
TCP Options (3) => NOP NOP TS: 60704519 379208806
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:16.189464 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:64824 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EF9D88 Ack: 0x9C582181 Win: 0x81F0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 60704652 379209034
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:17.544084 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:64894 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EF9F38 Ack: 0x9C5ACBE0 Win: 0x81F0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 60704787 379209168
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:19.643047 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:65001 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EFA1C0 Ack: 0x9C5ECD3B Win: 0x81F0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 60704997 379209378
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:20.394488 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:65036 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EFA298 Ack: 0x9C60248C Win: 0x81F0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 60705072 379209440
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:21.039492 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:65071 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x36EFA370 Ack: 0x9C617BD9 Win: 0x81F0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 60705137 379209517
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:23.149797 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:65174 IpLen:20 DgmLen:276 DF
***AP*** Seq: 0x36EFA5F8 Ack: 0x9C657569 Win: 0x81F0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 60705348 379209736
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:43.876360 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:403
***AP*** Seq: 0x9C67B486 Ack: 0x36EFAB33 Win: 0x57F0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:54.096040 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0x9C67FA27 Ack: 0x36EFACBC Win: 0x57F0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:32:54.825247 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0x9C6862FD Ack: 0x36EFAD89 Win: 0x57F0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:33:02.976061 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:340
***AP*** Seq: 0x9C687FF7 Ack: 0x36EFAEB5 Win: 0x57F0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:58:37.551627 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:314
***AP*** Seq: 0x9C689105 Ack: 0x36EFB274 Win: 0x5C20 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-08:58:39.108028 130.54.208.193:33685 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:299
***AP*** Seq: 0x36EFB40F Ack: 0x9C689EB6 Win: 0x81F0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:1112:6] WEB-MISC http directory traversal [**]
[Classification: Attempted Information Leak] [Priority: 2]
05/22-08:59:31.340306 130.54.208.193:4368 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:5879
***AP*** Seq: 0xFCA50D4C Ack: 0x252516E4 Win: 0x4188 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS298]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-09:56:29.044877 130.54.208.193:33711 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:253
***AP*** Seq: 0xFB0D5F4D Ack: 0x8BC13EC4 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-09:56:59.038483 130.54.208.193:33711 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1687
***AP*** Seq: 0xFB0D71B8 Ack: 0x8BC14533 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-10:22:03.201594 130.54.208.193:33711 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0x8BC145D8 Ack: 0xFB0D7863 Win: 0x3624 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-10:51:41.095518 130.54.208.193:33711 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1501
***AP*** Seq: 0xFB0D8BC9 Ack: 0x8BC15150 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-10:51:43.635684 130.54.208.193:33711 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:592
***AP*** Seq: 0xFB0D9DDB Ack: 0x8BC15378 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-10:51:51.310318 130.54.208.193:33711 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:503
***AP*** Seq: 0x8BC1539F Ack: 0xFB0D9F28 Win: 0x56A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-10:58:02.907383 130.54.208.193:33724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:548
***AP*** Seq: 0xE226B8C9 Ack: 0x6A0B169F Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-10:58:06.230271 130.54.208.193:33724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:982
***AP*** Seq: 0xE226BE66 Ack: 0x6A0B1A4D Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-11:30:50.393677 130.54.208.193:33724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1490
***AP*** Seq: 0xE226E784 Ack: 0x6A0B27C3 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-11:30:55.467913 130.54.208.193:33724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1471
***AP*** Seq: 0x6A0B2A2B Ack: 0xE226F11B Win: 0x71B2 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/22-12:01:17.107498 130.54.208.193:4922 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:470
***AP*** Seq: 0xF404FC73 Ack: 0xD1AA69BC Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-18:04:44.043266 130.54.208.193:36106 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:309
***AP*** Seq: 0x2CD21BFF Ack: 0xD0B2AD16 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/22-18:04:44.428165 130.54.208.193:36106 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:265
***AP*** Seq: 0x2CD21D3E Ack: 0xD0B2ADF7 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/23-08:27:57.227586 130.54.208.193:33756 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0xD1058DFD Ack: 0x6C381ADD Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/23-08:28:00.981960 130.54.208.193:33756 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:225
***AP*** Seq: 0xD10642F3 Ack: 0x6C381B96 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/23-08:28:03.178276 130.54.208.193:33756 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:21650 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0x6C381C4F Ack: 0xD10676F5 Win: 0x7C86 TcpLen: 32
TCP Options (3) => NOP NOP TS: 69318804 387823968
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/23-08:42:36.922390 130.54.208.193:33756 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2938
***AP*** Seq: 0xD107C288 Ack: 0x6C384297 Win: 0x3240 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/23-08:51:46.483782 130.54.208.193:1814 -> 192.168.24.11:80
TCP TTL:111 TOS:0x0 ID:59401 IpLen:20 DgmLen:699 DF
***AP*** Seq: 0x1E16B74C Ack: 0x3CF77E69 Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/23-09:15:11.264280 130.54.208.193:33756 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1471
***AP*** Seq: 0x6C3858AD Ack: 0xD108C584 Win: 0x7C86 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/23-09:42:44.228661 130.54.208.193:2080 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:705
***AP*** Seq: 0xA8193A91 Ack: 0xFD7C7239 Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/23-09:43:06.772704 130.54.208.193:2081 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:705
***AP*** Seq: 0xE0A7ECCA Ack: 0xFEC3F1D0 Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/23-14:46:23.204734 130.54.208.193:34146 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0xC87D84EA Ack: 0x3D21D647 Win: 0x56A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/24-08:35:51.065954 130.54.208.193:34540 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:355
***AP*** Seq: 0x2A245606 Ack: 0x96759944 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/24-08:35:51.725640 130.54.208.193:34540 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0x2A24C862 Ack: 0x96759A11 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/24-08:35:52.378372 130.54.208.193:34540 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:254
***AP*** Seq: 0x2A254893 Ack: 0x96759AE7 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/24-08:36:10.962462 130.54.208.193:34540 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:260
***AP*** Seq: 0x2A254FFD Ack: 0x96759BC3 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/24-08:36:12.531764 130.54.208.193:34540 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:479
***AP*** Seq: 0x2A2585DB Ack: 0x96759D7A Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/24-11:07:14.298756 130.54.208.193:34599 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1388
***AP*** Seq: 0x33E2E57C Ack: 0x9C7ED9D9 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/24-11:12:41.259787 130.54.208.193:3852 -> 192.168.24.11:80
TCP TTL:111 TOS:0x0 ID:31673 IpLen:20 DgmLen:720 DF
***AP*** Seq: 0xF4BC5542 Ack: 0x8503B0E5 Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/24-11:19:50.098040 130.54.208.193:3870 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1380
***AP*** Seq: 0xD4731BF9 Ack: 0xA1273118 Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/24-11:20:12.091052 130.54.208.193:1037 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:724
***AP*** Seq: 0x915C7C63 Ack: 0xA26E1414 Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/24-11:22:42.955148 130.54.208.193:3880 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:699
***AP*** Seq: 0x3C236B2E Ack: 0xAB4E60F9 Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/24-11:23:15.563412 130.54.208.193:3881 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1405
***AP*** Seq: 0x4B49616F Ack: 0xAD166A38 Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/24-11:23:40.352167 130.54.208.193:3882 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1367
***AP*** Seq: 0xC6648D34 Ack: 0xB04A28FA Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/24-12:11:36.909659 130.54.208.193:4107 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:699
***AP*** Seq: 0x7D3CC500 Ack: 0x64158ABE Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/24-12:25:20.967875 130.54.208.193:4164 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:705
***AP*** Seq: 0xAF7FE15C Ack: 0x97B9C68F Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/24-15:35:12.302852 130.54.208.193:34727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:246
***AP*** Seq: 0x6381E7A0 Ack: 0xC3F785E1 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/24-21:20:36.994280 130.54.208.193:34856 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1167
***AP*** Seq: 0xA4173204 Ack: 0x4D9D16B7 Win: 0x40F8 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:1844:9] IMAP authenticate overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/25-08:27:38.806761 130.54.208.193:35085 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:243
***AP*** Seq: 0x4D38EB72 Ack: 0x90DA25B7 Win: 0x16A0 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=10292][Xref => http://cve.mitre.org/cgi-bin/cvename.cgi?name=1999-0042]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/25-08:33:23.921421 130.54.208.193:35085 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0x4D39789B Ack: 0x90DA2DB9 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/25-08:33:24.469751 130.54.208.193:35085 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0x4D39F874 Ack: 0x90DA2E5D Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/25-08:33:25.250060 130.54.208.193:35085 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:182
***AP*** Seq: 0x4D3A09D2 Ack: 0x90DA2EEB Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/25-08:33:26.504676 130.54.208.193:35085 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:32288 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0x90DA2F3F Ack: 0x4D3A3D3E Win: 0x7C86 TcpLen: 32
TCP Options (3) => NOP NOP TS: 86630775 405136737
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:2152:1] WEB-PHP test.php access [**]
[Classification: access to a potentially vulnerable web application] [Priority: 2]
05/25-09:12:47.505842 130.54.208.193:1375 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:699
***AP*** Seq: 0xDF71302 Ack: 0xF79A2DEE Win: 0x4188 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11617]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/25-17:46:55.466626 130.54.208.193:35308 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1139
***AP*** Seq: 0x839A1222 Ack: 0xB73192CD Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/25-22:37:06.128500 130.54.208.193:35411 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:244
***AP*** Seq: 0x93F4C877 Ack: 0xC0711F3F Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/26-08:28:33.672508 130.54.208.193:1094 -> 192.168.24.11:143
TCP TTL:111 TOS:0x0 ID:1287 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0xA3492485 Ack: 0x82A5BDD3 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/26-08:28:38.716533 130.54.208.193:1094 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:286
***AP*** Seq: 0x82A67EAB Ack: 0xA3492674 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/26-08:28:55.036613 130.54.208.193:1094 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:450
***AP*** Seq: 0x82A69EE4 Ack: 0xA349280E Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/26-08:29:07.448198 130.54.208.193:1094 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:366
***AP*** Seq: 0x82A79489 Ack: 0xA3492954 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/26-08:29:27.093457 130.54.208.193:1094 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:513
***AP*** Seq: 0x82AA6037 Ack: 0xA3492B2D Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/26-08:29:57.088814 130.54.208.193:1094 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:531
***AP*** Seq: 0x82AAAA54 Ack: 0xA3492D18 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/26-08:29:59.615596 130.54.208.193:1094 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:517
***AP*** Seq: 0x82AABBB9 Ack: 0xA3492EF5 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/26-08:33:40.970001 130.54.208.193:1094 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:404
***AP*** Seq: 0x82AB4FF1 Ack: 0xA34930DF Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:23:37.050293 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:246
***AP*** Seq: 0x2B77A7AE Ack: 0x265E9E2A Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:23:37.514642 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:265
***AP*** Seq: 0x2B77A8ED Ack: 0x265E9F0B Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:23:38.581692 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:532
***AP*** Seq: 0x2B77ABC5 Ack: 0x265EA0F7 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:23:39.284668 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:322
***AP*** Seq: 0x2B77AD64 Ack: 0x265EA211 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:17.944828 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:629
***AP*** Seq: 0x2B780E90 Ack: 0x265EA45E Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:28.355102 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:270
***AP*** Seq: 0x2B790845 Ack: 0x265EA544 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:28.355102 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:270
***AP*** Seq: 0x2B790845 Ack: 0x265EA544 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:30.164795 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:450
***AP*** Seq: 0x2B7A6900 Ack: 0x265EA6DE Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:30.164795 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:450
***AP*** Seq: 0x2B7A6900 Ack: 0x265EA6DE Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:32.026985 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:450
***AP*** Seq: 0x2B7BAEE4 Ack: 0x265EA878 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:32.026985 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:450
***AP*** Seq: 0x2B7BAEE4 Ack: 0x265EA878 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:33.034898 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:245
***AP*** Seq: 0x2B7D1124 Ack: 0x265EA945 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:35.296579 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:491
***AP*** Seq: 0x2B7F4F8F Ack: 0x265EAB08 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:37.165776 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:409
***AP*** Seq: 0x2B81545B Ack: 0x265EAC79 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:41.708583 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:7950 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x265EAE0A Ack: 0x2B832886 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 364284904 433164884
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:44.944295 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:8035 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x265EB092 Ack: 0x2B87283B Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 364288140 433165226
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:45.988825 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:8063 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x265EB16A Ack: 0x2B887D54 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 364289185 433165335
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:50.173154 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:8179 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x265EB4CA Ack: 0x2B8DD834 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 364293370 433165749
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:51.264706 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:8209 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x265EB5A2 Ack: 0x2B8F2E59 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 364294462 433165864
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:24:53.383175 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:47 TOS:0x0 ID:8266 IpLen:20 DgmLen:277 DF
***AP*** Seq: 0x265EB752 Ack: 0x2B91D1C4 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 364296581 433166070
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:25:03.180410 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:261
***AP*** Seq: 0x2B939839 Ack: 0x265EB912 Win: 0x4F90 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:25:07.715257 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:362
***AP*** Seq: 0x2B944238 Ack: 0x265EBA54 Win: 0x53C0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:25:20.318098 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:248
***AP*** Seq: 0x2B94C406 Ack: 0x265EBC04 Win: 0x53C0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:25:24.274278 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:342
***AP*** Seq: 0x2B957E7E Ack: 0x265EBF2E Win: 0x5C20 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:25:27.613863 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:337
***AP*** Seq: 0x2B9643DB Ack: 0x265EC122 Win: 0x6050 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-14:25:32.523927 130.54.208.193:50047 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:433
***AP*** Seq: 0x2B96E3F8 Ack: 0x265EC2AB Win: 0x6050 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-15:05:37.627390 130.54.208.193:49222 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1700
***AP*** Seq: 0xC717E988 Ack: 0xC278BAFE Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/28-15:05:41.562533 130.54.208.193:49222 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:569
***AP*** Seq: 0xC7188251 Ack: 0xC278BD0F Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/29-11:04:43.736197 130.54.208.193:40853 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0x2F980DC Ack: 0x51BA1D Win: 0x3E96 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/29-13:35:43.589977 130.54.208.193:53996 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:260
***AP*** Seq: 0xA5291289 Ack: 0xA7B372B0 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/29-14:45:41.138975 130.54.208.193:38267 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:820
***AP*** Seq: 0xB4BB7FB1 Ack: 0xB7D35E9D Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:02.663505 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:449
***AP*** Seq: 0x9A9ACD10 Ack: 0xA3A5739D Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:03.520750 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:337
***AP*** Seq: 0x9A9ACEB9 Ack: 0xA3A574C6 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:04.296216 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:317
***AP*** Seq: 0x9A9AD054 Ack: 0xA3A575DB Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:04.922422 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:322
***AP*** Seq: 0x9A9AD1EF Ack: 0xA3A576F5 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:05.814933 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:384
***AP*** Seq: 0x9A9AD3F8 Ack: 0xA3A5784D Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:33.757795 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:413
***AP*** Seq: 0x9A9AEE0A Ack: 0xA3A579C2 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:40.799956 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:311
***AP*** Seq: 0x9A9B1088 Ack: 0xA3A57AD1 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:40.799956 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:311
***AP*** Seq: 0x9A9B1088 Ack: 0xA3A57AD1 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:42.039554 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:327
***AP*** Seq: 0x9A9CD9E2 Ack: 0xA3A57BF0 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:42.039554 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:327
***AP*** Seq: 0x9A9CD9E2 Ack: 0xA3A57BF0 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:44.021528 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:266
***AP*** Seq: 0x9A9D5A92 Ack: 0xA3A57CD2 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:44.560755 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:333
***AP*** Seq: 0x9A9D900D Ack: 0xA3A57DF7 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:50.737942 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:459
***AP*** Seq: 0x9A9E6007 Ack: 0xA3A57F9A Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:50.737942 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:459
***AP*** Seq: 0x9A9E6007 Ack: 0xA3A57F9A Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:58.871254 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:268
***AP*** Seq: 0x9A9E7233 Ack: 0xA3A5807E Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:45:59.347406 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:336
***AP*** Seq: 0x9A9E7906 Ack: 0xA3A581A6 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-08:46:02.037392 130.54.208.193:41727 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:270
***AP*** Seq: 0x9A9EFB38 Ack: 0xA3A5828C Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-11:30:59.880659 130.54.208.193:51808 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:477
***AP*** Seq: 0x6CB8165 Ack: 0x11CA980B Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-15:41:13.091036 130.54.208.193:39339 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:179
***AP*** Seq: 0xBB481AD1 Ack: 0xC6B3C424 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-15:41:13.364689 130.54.208.193:39339 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:192
***AP*** Seq: 0xBB481BA1 Ack: 0xC6B3C4BC Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-15:41:14.196692 130.54.208.193:39339 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:462
***AP*** Seq: 0xBB481E15 Ack: 0xC6B3C662 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-15:41:14.251814 130.54.208.193:39339 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:666
***AP*** Seq: 0xC6B3C662 Ack: 0xBB481E7E Win: 0x9E4 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-16:41:42.508815 130.54.208.193:2514 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:225
***AP*** Seq: 0x9B6E967E Ack: 0x1357CA08 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-16:41:43.078741 130.54.208.193:2514 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:240
***AP*** Seq: 0x9B6EC8A8 Ack: 0x1357CAD0 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-16:41:43.924449 130.54.208.193:2514 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:179
***AP*** Seq: 0x1357CB47 Ack: 0x9B6EDDAC Win: 0xFF32 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-19:45:55.780680 130.54.208.193:38082 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:605
***AP*** Seq: 0x561B24CC Ack: 0x62EC2F0B Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/30-19:45:55.823374 130.54.208.193:38082 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:523
***AP*** Seq: 0x62EC2F0B Ack: 0x561B2533 Win: 0x9E4 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/31-09:49:54.332773 130.54.208.193:3051 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:213
***AP*** Seq: 0xAFCCD77A Ack: 0x91C2ECD Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/31-09:50:22.430151 130.54.208.193:3051 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:266
***AP*** Seq: 0xAFCCEB82 Ack: 0x91C2FAF Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/31-09:50:24.078100 130.54.208.193:3051 -> 192.168.24.11:143
TCP TTL:111 TOS:0x0 ID:37402 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0x91C3003 Ack: 0xAFCD1F0C Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
05/31-09:50:37.010028 130.54.208.193:3051 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:714
***AP*** Seq: 0xAFCE1C41 Ack: 0x91C337D Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/01-08:36:15.366002 130.54.208.193:4152 -> 192.168.24.11:143
TCP TTL:111 TOS:0x0 ID:31703 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xB67A1568 Ack: 0xDDDDEBB6 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/01-11:26:28.252234 130.54.208.193:43244 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:398
***AP*** Seq: 0x65A9F6EF Ack: 0x80621454 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:1497:6] WEB-MISC cross site scripting attempt [**]
[Classification: Web Application Attack] [Priority: 1]
06/01-12:21:13.000218 130.54.208.193:3626 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:30165
***AP*** Seq: 0x3467195E Ack: 0x5FD81098 Win: 0xBF22 TcpLen: 20
[**] [1:1113:5] WEB-MISC http directory traversal [**]
[Classification: Attempted Information Leak] [Priority: 2]
06/01-12:21:13.000218 130.54.208.193:3626 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:30165
***AP*** Seq: 0x3467195E Ack: 0x5FD81098 Win: 0xBF22 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS297]
[**] [1:1497:6] WEB-MISC cross site scripting attempt [**]
[Classification: Web Application Attack] [Priority: 1]
06/01-12:23:26.820823 130.54.208.193:3629 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:30375
***AP*** Seq: 0x3C9695B3 Ack: 0x6BEAA46 Win: 0xBF22 TcpLen: 20
[**] [1:1113:5] WEB-MISC http directory traversal [**]
[Classification: Attempted Information Leak] [Priority: 2]
06/01-12:23:26.820823 130.54.208.193:3629 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:30375
***AP*** Seq: 0x3C9695B3 Ack: 0x6BEAA46 Win: 0xBF22 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS297]
[**] [1:1113:5] WEB-MISC http directory traversal [**]
[Classification: Attempted Information Leak] [Priority: 2]
06/01-12:29:04.740516 130.54.208.193:3633 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:14296
***AP*** Seq: 0x8DAFE52A Ack: 0x519573FE Win: 0x4188 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS297]
[**] [1:1113:5] WEB-MISC http directory traversal [**]
[Classification: Attempted Information Leak] [Priority: 2]
06/01-12:30:31.128428 130.54.208.193:3634 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:14435
***AP*** Seq: 0x5709472D Ack: 0x5DE53E94 Win: 0x8886 TcpLen: 20
[Xref => http://www.whitehats.com/info/IDS297]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/01-21:16:28.974016 130.54.208.193:1702 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:414
***AP*** Seq: 0x13EA9743 Ack: 0x4AF02E06 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/02-09:36:40.263492 130.54.208.193:1882 -> 192.168.24.11:143
TCP TTL:111 TOS:0x0 ID:11248 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x4D51122 Ack: 0xF69914D3 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/02-09:36:45.101245 130.54.208.193:1882 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:273
***AP*** Seq: 0xF699AA16 Ack: 0x4D512DE Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/02-09:36:49.493796 130.54.208.193:1882 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:536
***AP*** Seq: 0xF699BE03 Ack: 0x4D514CE Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/02-09:36:51.839680 130.54.208.193:1882 -> 192.168.24.11:143
TCP TTL:111 TOS:0x0 ID:11310 IpLen:20 DgmLen:250 DF
***AP*** Seq: 0x4D514FF Ack: 0xF699C1A1 Win: 0xFC3B TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/02-09:36:56.187907 130.54.208.193:1882 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:353
***AP*** Seq: 0xF69B6EFA Ack: 0x4D517BE Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/02-09:36:59.071996 130.54.208.193:1882 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:362
***AP*** Seq: 0x4D5184D Ack: 0xF69B7373 Win: 0xFF37 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2]
06/02-13:06:06.968534 130.54.208.193:2159 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1784
***AP*** Seq: 0x129D964D Ack: 0xA8058F1B Win: 0x25B0 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/05-08:36:52.906762 130.54.208.193:3261 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:222
***AP*** Seq: 0xA78777F6 Ack: 0xE4D628AC Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/05-08:36:54.756990 130.54.208.193:3261 -> 192.168.24.11:143
TCP TTL:112 TOS:0x0 ID:39131 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0xE4D6292A Ack: 0xA787AC98 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/05-08:36:58.577836 130.54.208.193:3261 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:239
***AP*** Seq: 0xA7883A0A Ack: 0xE4D62AC9 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/05-12:50:02.307513 130.54.208.193:3451 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:175
***AP*** Seq: 0xFE1C6D37 Ack: 0x71B0CBA9 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/05-15:29:20.627753 130.54.208.193:35110 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:404
***AP*** Seq: 0xCFB8C5E3 Ack: 0xDA01EB1 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/06-08:39:51.007514 130.54.208.193:1417 -> 192.168.24.11:143
TCP TTL:111 TOS:0x0 ID:15729 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x75658033 Ack: 0xF4FD36A6 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/07-08:42:06.419664 130.54.208.193:3382 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:50448 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x12D71E9C Ack: 0x2CFBCA99 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/07-08:42:20.876107 130.54.208.193:3382 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:536
***AP*** Seq: 0x2CFCD01F Ack: 0x12D72212 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/07-08:42:21.517511 130.54.208.193:3382 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:199
***AP*** Seq: 0x2CFD719A Ack: 0x12D722B1 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
06/07-11:41:18.676104 130.54.208.193:4255 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1106
***AP*** Seq: 0x7A734E35 Ack: 0xDF0852AE Win: 0xFFFF TcpLen: 20
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/07-18:36:19.616491 130.54.208.193:1724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:311
***AP*** Seq: 0xF2EA3218 Ack: 0x54D76197 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/08-08:51:29.542376 130.54.208.193:2066 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0x8DDF31E6 Ack: 0xD7EA35F5 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/08-08:51:31.326182 130.54.208.193:2066 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:217
***AP*** Seq: 0x8DDFC3D2 Ack: 0xD7EA36A6 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/08-08:51:31.705697 130.54.208.193:2066 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:5303 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0xD7EA36D7 Ack: 0x8DDFF763 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/08-08:51:36.367276 130.54.208.193:2066 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:349
***AP*** Seq: 0x8DE0A2F1 Ack: 0xD7EA3992 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/08-08:51:38.250265 130.54.208.193:2066 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:258
***AP*** Seq: 0x8DE0AEED Ack: 0xD7EA3A6C Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/08-10:10:09.807480 130.54.208.193:56791 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:241
***AP*** Seq: 0xBCB7599F Ack: 0x1BA2F03E Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/08-10:10:10.337421 130.54.208.193:56791 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:333
***AP*** Seq: 0xBCB75B4A Ack: 0x1BA2F163 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/08-10:10:11.778179 130.54.208.193:56791 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:814
***AP*** Seq: 0xBCB75FBF Ack: 0x1BA2F469 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/08-10:11:04.909568 130.54.208.193:56791 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:332
***AP*** Seq: 0xBCB76510 Ack: 0x1BA2F674 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/08-10:11:09.510081 130.54.208.193:56791 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:207
***AP*** Seq: 0xBCB7B6AC Ack: 0x1BA2F87E Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/08-20:47:58.818835 130.54.208.193:3360 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:165
***AP*** Seq: 0x6FE973EB Ack: 0x1FDCD4FA Win: 0xFE4D TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/09-09:11:51.879661 130.54.208.193:3491 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:222
***AP*** Seq: 0x11A60BE5 Ack: 0x237A7515 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/09-09:11:53.760929 130.54.208.193:3491 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:6918 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x237A7593 Ack: 0x11A640A8 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/09-09:12:03.470497 130.54.208.193:3491 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:521
***AP*** Seq: 0x11A73258 Ack: 0x237A7930 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/09-09:12:19.421575 130.54.208.193:3491 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:630
***AP*** Seq: 0x11A7A852 Ack: 0x237A7B7E Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/09-09:12:22.100280 130.54.208.193:3491 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:570
***AP*** Seq: 0x11A84840 Ack: 0x237A7D90 Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/09-09:12:24.768792 130.54.208.193:3491 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:523
***AP*** Seq: 0x11A8DA32 Ack: 0x237A7F73 Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/10-18:00:49.289709 130.54.208.193:1305 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:286
***AP*** Seq: 0x113276DE Ack: 0x44D972B7 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2]
06/10-18:13:17.211845 130.54.208.193:2274 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1614
***AP*** Seq: 0x4513A982 Ack: 0xF8CF655 Win: 0x2350 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]
[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2]
06/10-18:13:51.072351 130.54.208.193:2276 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:5856
***AP*** Seq: 0x4750C619 Ack: 0x6EAF5682 Win: 0x46C0 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/10-18:14:22.338110 130.54.208.193:1305 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:31015 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x44D973A3 Ack: 0x1132B857 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/10-18:14:44.858800 130.54.208.193:1305 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:575
***AP*** Seq: 0x11337F45 Ack: 0x44D97740 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/10-18:14:54.981675 130.54.208.193:1305 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:280
***AP*** Seq: 0x1133CAAA Ack: 0x44D97830 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/10-18:14:57.071908 130.54.208.193:1305 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:577
***AP*** Seq: 0x44D979C2 Ack: 0x1133CED9 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/11-10:59:52.547685 130.54.208.193:1374 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:286
***AP*** Seq: 0x14289D6C Ack: 0x4F166439 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/11-10:59:53.896914 130.54.208.193:1374 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:305
***AP*** Seq: 0x1429CE3B Ack: 0x4F166542 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/11-10:59:55.178035 130.54.208.193:1374 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:32866 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x4F166596 Ack: 0x142A01FC Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/11-10:59:58.105924 130.54.208.193:1374 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:239
***AP*** Seq: 0x4F16671C Ack: 0x142A9136 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/11-16:19:45.671986 130.54.208.193:2345 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:923
***AP*** Seq: 0x5D71FB3E Ack: 0x460F63FC Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/11-16:42:20.058209 130.54.208.193:2345 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1995
***AP*** Seq: 0x5D723977 Ack: 0x460F6F02 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/12-08:29:12.966048 130.54.208.193:2584 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:450
***AP*** Seq: 0x10967CA6 Ack: 0x5AED5812 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/12-08:29:13.415323 130.54.208.193:2584 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:237
***AP*** Seq: 0x1096A832 Ack: 0x5AED58D7 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/12-08:29:18.158860 130.54.208.193:2584 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:25369 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x5AED59E0 Ack: 0x1096DDCB Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/12-08:29:23.565015 130.54.208.193:2584 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:273
***AP*** Seq: 0x10977270 Ack: 0x5AED5B9C Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/12-08:29:24.951076 130.54.208.193:2584 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:497
***AP*** Seq: 0x5AED5D2E Ack: 0x10977C84 Win: 0xFCF4 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/12-09:12:26.426941 130.54.208.193:57014 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:469
***AP*** Seq: 0xB979E659 Ack: 0x3917DA4A Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/12-11:33:51.248578 130.54.208.193:45010 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:253
***AP*** Seq: 0xC98034B0 Ack: 0x4A6F43E5 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/12-11:33:54.116065 130.54.208.193:45010 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:486
***AP*** Seq: 0xC9803AE9 Ack: 0x4A6F45A3 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:1497:6] WEB-MISC cross site scripting attempt [**]
[Classification: Web Application Attack] [Priority: 1]
06/12-21:12:52.117317 130.54.208.193:4378 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:17711
***AP*** Seq: 0x559382E8 Ack: 0x7175BD33 Win: 0x8306 TcpLen: 20
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/12-21:37:39.232810 130.54.208.193:4300 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:345
***AP*** Seq: 0x4F44F3BE Ack: 0x48A97EA6 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/12-21:37:42.633366 130.54.208.193:4300 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:536
***AP*** Seq: 0x48A98082 Ack: 0x4F450DE1 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/13-09:13:27.567875 130.54.208.193:4445 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:7183 IpLen:20 DgmLen:249 DF
***AP*** Seq: 0x344F6ECD Ack: 0xE75DF3BA Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/13-09:18:09.526240 130.54.208.193:49862 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:471
***AP*** Seq: 0x4E7FD35 Ack: 0x8CEF49F9 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/13-09:28:36.516500 130.54.208.193:49862 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:407
***AP*** Seq: 0x4E8CEC1 Ack: 0x8CEF529A Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
06/13-12:44:45.577966 130.54.208.193:33753 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2777
***AP*** Seq: 0xF5B2CEB Ack: 0xECEF2973 Win: 0x4B60 TcpLen: 20
[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
06/13-12:44:47.329190 130.54.208.193:33752 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3559
***AP*** Seq: 0x10005B5E Ack: 0xEC3CFA94 Win: 0x81D0 TcpLen: 20
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/13-17:29:50.975262 130.54.208.193:1652 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0x400ABD31 Ack: 0xA9395DD3 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/13-17:29:52.025266 130.54.208.193:1652 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:223
***AP*** Seq: 0x400B42CD Ack: 0xA9395E8A Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/13-17:29:54.105189 130.54.208.193:1652 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:512
***AP*** Seq: 0x400B4750 Ack: 0xA9396062 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/14-09:16:13.480083 130.54.208.193:45239 -> 192.168.24.11:143
TCP TTL:49 TOS:0x0 ID:50204 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0xBF19A87D Ack: 0x2E843E2A Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 588929858 578197798
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/14-09:16:25.769485 130.54.208.193:45239 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:241
***AP*** Seq: 0x2E850157 Ack: 0xBF19AA6B Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/14-09:16:26.129327 130.54.208.193:45239 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:331
***AP*** Seq: 0x2E850533 Ack: 0xBF19AB8E Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/14-09:16:28.870661 130.54.208.193:45239 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:243
***AP*** Seq: 0x2E85200E Ack: 0xBF19AC59 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
06/14-10:31:18.358651 130.54.208.193:1331 -> 192.168.24.11:80
TCP TTL:113 TOS:0x0 ID:10650 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB615F165 Ack: 0x4DFA73CB Win: 0xFFFF TcpLen: 20
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/14-16:40:21.666249 130.54.208.193:46633 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:183
***AP*** Seq: 0xBE59129C Ack: 0x4F8420B5 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/14-16:40:24.028847 130.54.208.193:46633 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:525
***AP*** Seq: 0xBE5941ED Ack: 0x4F84229A Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/14-16:40:24.028847 130.54.208.193:46633 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:525
***AP*** Seq: 0xBE5941ED Ack: 0x4F84229A Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/14-18:47:09.676760 130.54.208.193:58067 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1430
***AP*** Seq: 0x9AA54EFE Ack: 0x2EBFEBCD Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/14-18:47:10.193747 130.54.208.193:58067 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:362
***AP*** Seq: 0x9AA5534C Ack: 0x2EBFED0F Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/14-18:56:39.679922 130.54.208.193:58067 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1502
***AP*** Seq: 0x9AA596A2 Ack: 0x2EBFF3FE Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/14-18:56:42.510096 130.54.208.193:58067 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:596
***AP*** Seq: 0x9AA5B756 Ack: 0x2EBFF62A Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/15-08:31:23.587547 130.54.208.193:53773 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:471
***AP*** Seq: 0xBF613B0F Ack: 0x57C43C42 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/15-08:34:32.549037 130.54.208.193:53773 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:625
***AP*** Seq: 0xBF615522 Ack: 0x57C44278 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/15-08:34:35.221551 130.54.208.193:53773 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:540
***AP*** Seq: 0xBF61840A Ack: 0x57C4446C Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/15-08:34:39.655042 130.54.208.193:53773 -> 192.168.24.11:143
TCP TTL:49 TOS:0x0 ID:56425 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0x57C446AB Ack: 0xBF61E6AF Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 672854205 586588631
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/15-08:34:49.920857 130.54.208.193:53773 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:270
***AP*** Seq: 0xBF627AE5 Ack: 0x57C44864 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/15-08:35:07.498496 130.54.208.193:53773 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:286
***AP*** Seq: 0xBF6356E7 Ack: 0x57C44BCF Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/15-08:35:08.848266 130.54.208.193:53773 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:274
***AP*** Seq: 0xBF63DEC5 Ack: 0x57C44CB9 Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
06/15-15:58:42.625556 130.54.208.193:4609 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:4048
***AP*** Seq: 0x569C7C34 Ack: 0x585040E2 Win: 0x35A0 TcpLen: 20
[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
06/15-17:13:45.818004 130.54.208.193:4646 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2906
***AP*** Seq: 0x71668B57 Ack: 0xA236E292 Win: 0x2C88 TcpLen: 20
[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
06/15-17:14:01.358932 130.54.208.193:4648 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:9737
***AP*** Seq: 0x71B76F82 Ack: 0x2B74CA2A Win: 0x65C7 TcpLen: 20
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/15-17:27:22.268827 130.54.208.193:39559 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0xF7AE9A16 Ack: 0x5CF09F06 Win: 0x9E4 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/16-09:32:23.587424 130.54.208.193:55766 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:253
***AP*** Seq: 0xDCA93A07 Ack: 0x7C8DA1FA Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2]
06/16-09:35:22.683138 130.54.208.193:4942 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1742
***AP*** Seq: 0xE5A9FD15 Ack: 0x4321131C Win: 0x7359 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]
[**] [1:1497:6] WEB-MISC cross site scripting attempt [**]
[Classification: Web Application Attack] [Priority: 1]
06/16-13:19:08.765037 130.54.208.193:1718 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:20607
***AP*** Seq: 0x66A6ED71 Ack: 0x32D877D0 Win: 0xFFFF TcpLen: 20
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/19-08:53:52.821045 130.54.208.193:49925 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:304
***AP*** Seq: 0xE45DB44E Ack: 0x9DAD4F4D Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/19-08:53:54.715032 130.54.208.193:49925 -> 192.168.24.11:143
TCP TTL:49 TOS:0x0 ID:11202 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x9DAD4FCB Ack: 0xE45DE950 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 1019684286 621265010
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/19-08:54:03.701996 130.54.208.193:49925 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:461
***AP*** Seq: 0xE45E9512 Ack: 0x9DAD5345 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/19-08:54:41.320174 130.54.208.193:49925 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:483
***AP*** Seq: 0xE45EC6DB Ack: 0x9DAD5500 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/19-08:54:44.520631 130.54.208.193:49925 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:303
***AP*** Seq: 0xE45EEC4F Ack: 0x9DAD5607 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/19-10:08:02.275766 130.54.208.193:47781 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0x8E5A9DE2 Ack: 0xD4987B1A Win: 0x9E4 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-08:29:52.625673 130.54.208.193:2728 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:286
***AP*** Seq: 0xB0B8EB96 Ack: 0x79B17E8E Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-08:29:55.081294 130.54.208.193:2728 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:302
***AP*** Seq: 0xB0B96A60 Ack: 0x79B17F94 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-08:29:57.025823 130.54.208.193:2728 -> 192.168.24.11:143
TCP TTL:113 TOS:0x0 ID:25905 IpLen:20 DgmLen:254 DF
***AP*** Seq: 0x79B18048 Ack: 0xB0B99EE1 Win: 0xFFFF TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-08:30:01.885698 130.54.208.193:2728 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:390
***AP*** Seq: 0xB0BA1FAD Ack: 0x79B18331 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-08:30:27.088641 130.54.208.193:2728 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:325
***AP*** Seq: 0xB0BA3D87 Ack: 0x79B1844E Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-08:30:29.465382 130.54.208.193:2728 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:517
***AP*** Seq: 0xB0BA4C23 Ack: 0x79B1862B Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-08:39:30.317413 130.54.208.193:42122 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:471
***AP*** Seq: 0xEAAF7EEA Ack: 0xAC25E844 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-08:39:45.230998 130.54.208.193:42122 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1357
***AP*** Seq: 0xEAAF8C39 Ack: 0xAC25ED69 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-08:55:55.050325 130.54.208.193:42122 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1451
***AP*** Seq: 0xAC25EE4E Ack: 0xEAAF93A1 Win: 0x11A4 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-09:51:11.102924 130.54.208.193:37090 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:349
***AP*** Seq: 0xF736F15A Ack: 0xB998B6ED Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-09:51:13.224108 130.54.208.193:37090 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:276
***AP*** Seq: 0xF7375674 Ack: 0xB998B7D9 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-12:20:51.248668 130.54.208.193:54620 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:435
***AP*** Seq: 0x2C862C87 Ack: 0xEF641603 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-12:20:51.715460 130.54.208.193:54620 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:357
***AP*** Seq: 0x2C862ED7 Ack: 0xEF641740 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-12:20:53.555434 130.54.208.193:54620 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:237
***AP*** Seq: 0x2C865C72 Ack: 0xEF641805 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-12:20:53.555434 130.54.208.193:54620 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:237
***AP*** Seq: 0x2C865C72 Ack: 0xEF641805 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-20:08:52.072665 130.54.208.193:54088 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:314
***AP*** Seq: 0xA14AD6E Ack: 0xCF2EDBA1 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-20:09:03.854819 130.54.208.193:54088 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:328
***AP*** Seq: 0xA14F0BE Ack: 0xCF2EDE78 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-20:09:05.452142 130.54.208.193:54088 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:336
***AP*** Seq: 0xA14F3FC Ack: 0xCF2EDFA0 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-20:09:09.183681 130.54.208.193:54088 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:475
***AP*** Seq: 0xA159AC2 Ack: 0xCF2EE241 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-20:09:10.841786 130.54.208.193:54088 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:358
***AP*** Seq: 0xA15D80E Ack: 0xCF2EE37F Win: 0x29E0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-20:09:13.901378 130.54.208.193:54088 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:560
***AP*** Seq: 0xA15FF30 Ack: 0xCF2EE587 Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/20-20:09:15.603375 130.54.208.193:54088 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:278
***AP*** Seq: 0xA160E4D Ack: 0xCF2EE675 Win: 0x2E10 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/21-09:16:41.694093 130.54.208.193:41035 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:268
***AP*** Seq: 0xA9FC153A Ack: 0x7380EB8B Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/21-09:16:47.493827 130.54.208.193:41035 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:246
***AP*** Seq: 0xA9FC2584 Ack: 0x7380EC59 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/21-09:16:49.265181 130.54.208.193:41035 -> 192.168.24.11:143
TCP TTL:49 TOS:0x0 ID:30415 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x7380ECD7 Ack: 0xA9FC59E6 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 1193896537 638682905
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/21-09:16:53.855352 130.54.208.193:41035 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:357
***AP*** Seq: 0xA9FD2412 Ack: 0x7380EF9F Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/21-09:17:34.443836 130.54.208.193:41035 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:235
***AP*** Seq: 0xA9FD6A6B Ack: 0x7380F127 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/21-12:36:52.880007 130.54.208.193:34667 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:554
***AP*** Seq: 0x9E0FB6ED Ack: 0x68F684AB Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-09:11:19.582322 130.54.208.193:55594 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:204
***AP*** Seq: 0xC165C86F Ack: 0x9387B6C6 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-09:11:21.612085 130.54.208.193:55594 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:336
***AP*** Seq: 0xC1665903 Ack: 0x9387B7EE Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-09:11:28.418088 130.54.208.193:55594 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:270
***AP*** Seq: 0xC1666558 Ack: 0x9387B8D4 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-09:11:28.798862 130.54.208.193:55594 -> 192.168.24.11:143
TCP TTL:49 TOS:0x0 ID:24386 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0x9387B905 Ack: 0xC166992F Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 1279994701 647291080
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-09:11:34.501556 130.54.208.193:55594 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:420
***AP*** Seq: 0xC16739BB Ack: 0x9387BBE3 Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-09:11:37.381576 130.54.208.193:55594 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:349
***AP*** Seq: 0xC16761FD Ack: 0x9387BDA8 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-09:11:39.222823 130.54.208.193:55594 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:311
***AP*** Seq: 0xC1676860 Ack: 0x9387BEB7 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-13:40:56.852607 130.54.208.193:40456 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:191
***AP*** Seq: 0xC1B38A05 Ack: 0x9608D0EB Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-13:40:59.423200 130.54.208.193:40456 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:592
***AP*** Seq: 0xC1B39DA8 Ack: 0x9608D313 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-15:18:51.420748 130.54.208.193:32997 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:192
***AP*** Seq: 0x3746E889 Ack: 0xC1076DD Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-15:18:52.323143 130.54.208.193:32997 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:462
***AP*** Seq: 0x3746EAFF Ack: 0xC107883 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-15:19:08.717137 130.54.208.193:32997 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:717
***AP*** Seq: 0x3746F06E Ack: 0xC107B28 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/22-15:19:11.224685 130.54.208.193:32997 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:596
***AP*** Seq: 0x37470F96 Ack: 0xC107D54 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-09:17:06.064057 130.54.208.193:38724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:471
***AP*** Seq: 0x18CC7BE0 Ack: 0xF2F2D0B7 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-09:19:20.919087 130.54.208.193:38724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:286
***AP*** Seq: 0x18CDF83E Ack: 0xF2F2D7A9 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-09:24:15.117292 130.54.208.193:38724 -> 192.168.24.11:143
TCP TTL:49 TOS:0x0 ID:11867 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0xF2F2D9B3 Ack: 0x18CE3F9B Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 1367179924 656007923
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-09:24:19.893658 130.54.208.193:38724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:277
***AP*** Seq: 0x18CED37F Ack: 0xF2F2DB73 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-09:24:24.601579 130.54.208.193:38724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:548
***AP*** Seq: 0x18CF6D21 Ack: 0xF2F2DD6F Win: 0x2180 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-09:24:25.081200 130.54.208.193:38724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:356
***AP*** Seq: 0x18CF6F72 Ack: 0xF2F2DEAB Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-09:24:26.702080 130.54.208.193:38724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:241
***AP*** Seq: 0x18CF7F05 Ack: 0xF2F2DF74 Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-09:26:46.091805 130.54.208.193:38724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1489
***AP*** Seq: 0x18CF87EF Ack: 0xF2F2E55D Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-09:26:46.091805 130.54.208.193:38724 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1489
***AP*** Seq: 0x18CF87EF Ack: 0xF2F2E55D Win: 0x25B0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-17:31:34.393624 130.54.208.193:37172 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:816
***AP*** Seq: 0x61F026C5 Ack: 0x3F23F826 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-17:31:57.887935 130.54.208.193:37172 -> 192.168.24.11:143
TCP TTL:49 TOS:0x0 ID:19068 IpLen:20 DgmLen:266 DF
***AP*** Seq: 0x3F23F986 Ack: 0x61F02AA8 Win: 0xAF0 TcpLen: 32
TCP Options (3) => NOP NOP TS: 1396449037 658934284
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-17:31:57.964969 130.54.208.193:37172 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:399
***AP*** Seq: 0x61F02AA8 Ack: 0x3F23FA5E Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-17:32:02.284571 130.54.208.193:37172 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:264
***AP*** Seq: 0x61F09C53 Ack: 0x3F23FC1F Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-17:32:03.325249 130.54.208.193:37172 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:337
***AP*** Seq: 0x61F0A409 Ack: 0x3F23FD48 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-17:32:07.248605 130.54.208.193:37172 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:257
***AP*** Seq: 0x61F0B8FE Ack: 0x3F23FE21 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-19:39:17.648328 130.54.208.193:44501 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1448
***AP*** Seq: 0x440A507C Ack: 0x21FD6ED9 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/23-19:39:17.693154 130.54.208.193:44501 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:241
***AP*** Seq: 0x21FD6ED9 Ack: 0x440A50E4 Win: 0x9E4 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/24-13:28:38.281586 130.54.208.193:47731 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:544
***AP*** Seq: 0x3229F6B Ack: 0xE7E86D71 Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/24-13:29:03.318009 130.54.208.193:47731 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:853
***AP*** Seq: 0x322A5AC Ack: 0xE7E8709E Win: 0x16A0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/24-13:29:08.661371 130.54.208.193:47731 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:512
***AP*** Seq: 0x3232016 Ack: 0xE7E87276 Win: 0x1920 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/24-16:15:42.258417 130.54.208.193:60888 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:375
***AP*** Seq: 0x788D5F73 Ack: 0x5D440400 Win: 0x1D50 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/26-14:53:46.521460 130.54.208.193:39021 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3005
***AP*** Seq: 0x3E901CCF Ack: 0x9DF291A4 Win: 0x67E TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:2570:7] WEB-MISC Invalid HTTP Version String [**]
[Classification: Detection of a non-standard protocol or event] [Priority: 2]
06/27-17:14:42.231818 130.54.208.193:4741 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:18500
***AP*** Seq: 0xCEA35281 Ack: 0x96ED12EF Win: 0xFD18 TcpLen: 20
[Xref => http://cgi.nessus.org/plugins/dump.php3?id=11593][Xref => http://www.securityfocus.com/bid/9809]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/30-17:23:05.871119 130.54.208.193:47737 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1521
***AP*** Seq: 0xD0322781 Ack: 0x70732C90 Win: 0x9E4 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
06/30-19:43:06.881340 130.54.208.193:34615 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1890
***AP*** Seq: 0xD410C898 Ack: 0x741E0526 Win: 0x3E96 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
07/01-14:00:37.326550 130.54.208.193:37664 -> 192.168.24.11:143
TCP TTL:49 TOS:0x0 ID:45089 IpLen:20 DgmLen:261 DF
***AP*** Seq: 0xCA338EB Ack: 0xACD435EA Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2075115469 127569999
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
07/01-14:00:46.715389 130.54.208.193:37664 -> 192.168.24.11:143
TCP TTL:49 TOS:0x0 ID:45176 IpLen:20 DgmLen:260 DF
***AP*** Seq: 0xCA33AD8 Ack: 0xACD5B5B5 Win: 0x3E96 TcpLen: 32
TCP Options (3) => NOP NOP TS: 2075124860 127572349
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
07/04-21:31:38.297517 130.54.208.193:2013 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:448
***AP*** Seq: 0x11E0E030 Ack: 0xFFDCBDD9 Win: 0x3D04 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
07/20-20:07:14.924088 130.54.208.193:1690 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1572
***AP*** Seq: 0xD59309F5 Ack: 0xB01FF070 Win: 0x40E5 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
07/21-10:39:38.653297 130.54.208.193:1832 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:457
***AP*** Seq: 0xA8ECF93A Ack: 0x1A02957E Win: 0x4002 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
07/21-17:30:57.240533 130.54.208.193:2184 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:426
***AP*** Seq: 0xABDFEE9C Ack: 0x9CC7AC17 Win: 0x3F2B TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
07/24-08:48:02.943776 130.54.208.193:2949 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:714
***AP*** Seq: 0x7C69AA50 Ack: 0x8605C086 Win: 0x4069 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3070:1] IMAP fetch overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
08/06-09:46:42.816591 130.54.208.193:1306 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:4340
***AP*** Seq: 0x9F202419 Ack: 0x9D8E11B2 Win: 0x3E6A TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
08/10-10:55:40.586623 130.54.208.193:51746 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1521
***AP*** Seq: 0x9FEDAAAE Ack: 0xF243CDB Win: 0x2D4 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
[**] [1:3072:1] IMAP status overflow attempt [**]
[Classification: Misc Attack] [Priority: 2]
08/10-11:56:39.597147 130.54.208.193:36900 -> 192.168.24.11:143
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1230
***AP*** Seq: 0xF3C20C0A Ack: 0x83F75DF2 Win: 0xAF0 TcpLen: 20
[Xref => http://www.securityfocus.com/bid/11775]
Go to: overview page
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Sep 14 05:05:22 2010