alert.txt

一款轻量级的入侵检测系统 对于网页中的shellcode有一定的防范能力

(2007/5/16/9:59:11)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:11)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:11)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:11)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:11)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:11)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:11)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:12)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:13)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:13)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:13)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:13)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:13)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:13)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:14)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:21)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:22)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:22)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:22)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:22)alert:  httpget   192.168.188.163 to 209.85.143.164
(2007/5/16/9:59:22)alert:  httpget   192.168.188.163 to 209.85.143.164
(2007/5/16/9:59:23)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:23)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:23)alert:  httpget   192.168.188.163 to 209.85.143.164
(2007/5/16/9:59:25)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:25)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:26)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:26)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:26)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:26)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:26)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:26)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:26)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:26)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:32)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:32)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/9:59:36)alert:  httpget   192.168.188.163 to 202.103.213.198
(2007/5/16/9:59:39)alert:  httpget   192.168.188.163 to 202.103.213.198
(2007/5/16/10:3:57)alert:  httpget   192.168.188.163 to 63.245.213.21
(2007/5/16/10:5:45)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/10:5:47)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/10:5:48)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/10:5:48)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/10:5:49)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/10:5:49)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/10:5:49)alert:  httpget   192.168.188.163 to 219.129.216.139
(2007/5/16/10:5:49)alert:  httpget   192.168.188.163 to 202.165.98.230
(2007/5/16/10:7:15)alert:  httpget   192.168.188.163 to 72.14.235.165
(2007/5/16/10:7:16)alert:  httpget   192.168.188.163 to 72.14.235.164
(2007/5/16/10:7:16)alert:  httpget   192.168.188.163 to 72.14.235.96
(2007/5/16/10:7:16)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:16)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:17)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:17)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:17)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:18)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:18)alert:  httpget   192.168.188.163 to 59.44.127.149
(2007/5/16/10:7:18)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:18)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:18)alert:  httpget   192.168.188.163 to 222.88.91.83
(2007/5/16/10:7:18)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:19)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:19)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:19)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:19)alert:  httpget   192.168.188.163 to 222.88.90.231
(2007/5/16/10:7:19)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:19)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:19)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:7:20)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:8:24)alert:  httpget   192.168.188.163 to 60.28.178.204
(2007/5/16/10:9:27)alert:  httpget   192.168.188.163 to 63.245.213.21
(2007/5/16/10:15:1)alert:  httpget   192.168.188.163 to 63.245.209.21
(2007/5/16/10:17:46)alert:  httpget   192.168.188.163 to 218.244.136.78
(2007/5/16/10:17:49)alert:  httpget   192.168.188.163 to 59.44.127.149
(2007/5/16/10:17:49)alert:  httpget   192.168.188.163 to 59.44.127.149
(2007/5/16/10:17:49)alert:  httpget   192.168.188.163 to 222.88.90.231
(2007/5/16/10:17:49)alert:  httpget   192.168.188.163 to 222.88.90.40
(2007/5/16/10:17:49)alert:  httpget   192.168.188.163 to 222.88.90.231
(2007/5/16/10:20:27)alert:  httpget   192.168.188.163 to 63.245.213.21
(2007/5/16/10:22:31)alert:  httpget   192.168.188.163 to 58.60.15.210
(2007/5/16/10:22:31)alert:  httpget   192.168.188.163 to 121.14.73.71
(2007/5/16/10:23:1)alert:  httpget   192.168.188.163 to 89.202.149.49
(2007/5/16/10:26:1)alert:  httpget   192.168.188.163 to 63.245.209.21
(2007/5/16/10:28:47)alert:  httpget   192.168.188.163 to 219.133.51.69
(2007/5/16/10:28:47)alert:  httpget   192.168.188.163 to 58.60.11.230
(2007/5/16/10:28:47)alert:  httpget   192.168.188.163 to 58.60.11.230
(2007/5/16/10:28:47)alert:  httpget   192.168.188.163 to 58.60.11.230
(2007/5/16/10:28:47)alert:  httpget   192.168.188.163 to 219.133.49.96
(2007/5/16/10:28:48)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:48)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:48)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:48)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:48)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:48)alert:  httpget   192.168.188.163 to 58.60.11.230
(2007/5/16/10:28:48)alert:  httpget   192.168.188.163 to 58.60.11.219
(2007/5/16/10:28:48)alert:  httpget   192.168.188.163 to 58.60.11.230
(2007/5/16/10:28:48)alert:  httpget   192.168.188.163 to 58.60.11.219
(2007/5/16/10:28:48)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:49)alert:  httpget   192.168.188.163 to 219.133.49.96
(2007/5/16/10:28:49)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:49)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:49)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:50)alert:  httpget   192.168.188.163 to 219.133.41.215
(2007/5/16/10:28:51)alert:  httpget   192.168.188.163 to 58.60.11.219
(2007/5/16/10:28:51)alert:  httpget   192.168.188.163 to 219.133.49.96
(2007/5/16/10:28:51)alert:  httpget   192.168.188.163 to 58.60.11.219
(2007/5/16/10:28:52)alert:  httpget   192.168.188.163 to 219.133.49.96
(2007/5/16/10:28:52)alert:  httpget   192.168.188.163 to 58.60.11.219
(2007/5/16/10:28:52)alert:  httpget   192.168.188.163 to 58.60.11.219
(2007/5/16/10:28:52)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:52)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:52)alert:  httpget   192.168.188.163 to 219.133.49.96
(2007/5/16/10:28:53)alert:  httpget   192.168.188.163 to 219.133.49.96
(2007/5/16/10:28:53)alert:  httpget   192.168.188.163 to 219.133.49.96
(2007/5/16/10:28:53)alert:  httpget   192.168.188.163 to 58.60.11.219
(2007/5/16/10:28:53)alert:  httpget   192.168.188.163 to 58.60.11.219
(2007/5/16/10:28:53)alert:  httpget   192.168.188.163 to 219.133.41.215
(2007/5/16/10:28:54)alert:  httpget   192.168.188.163 to 61.152.112.125
(2007/5/16/10:28:54)alert:  httpget   192.168.188.163 to 58.60.11.230
(2007/5/16/10:28:55)alert:  httpget   192.168.188.163 to 58.60.11.230
(2007/5/16/10:28:55)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:56)alert:  httpget   192.168.188.163 to 58.60.13.68
(2007/5/16/10:28:56)alert:  httpget   192.168.188.163 to 121.14.73.75
(2007/5/16/10:28:58)alert:  httpget   192.168.188.163 to 219.133.51.71
(2007/5/16/10:28:59)alert:  httpget   192.168.188.163 to 58.60.11.230
(2007/5/16/10:31:32)alert:  httpget   192.168.188.163 to 63.245.209.21
(2007/5/16/10:37:3)alert:  httpget   192.168.188.163 to 63.245.209.21
(2007/5/16/10:37:11)alert:  BLEEDING-EDGE Behavioral Unusual Port 3389 traffic, Potential Scan or Infection   192.168.188.163 to 192.168.188.38
(2007/5/16/10:42:28)alert:  httpget   192.168.188.163 to 63.245.209.21
(2007/5/16/10:46:9)alert:  httpget   192.168.188.163 to 63.245.209.21
(2007/5/16/10:46:16)alert:  httpget   192.168.188.163 to 220.181.38.4
(2007/5/16/10:46:16)alert:  httpget   192.168.188.163 to 220.181.38.4
(2007/5/16/10:46:16)alert:  httpget   192.168.188.163 to 220.181.3.22
(2007/5/16/10:46:16)alert:  httpget   192.168.188.163 to 220.181.38.4
(2007/5/16/10:46:29)alert:  httpget   192.168.188.163 to 220.181.38.4
(2007/5/16/10:46:29)alert:  httpget   192.168.188.163 to 220.181.38.4
(2007/5/16/10:46:30)alert:  httpget   192.168.188.163 to 220.181.18.186
(2007/5/16/10:46:30)alert:  httpget   192.168.188.163 to 220.181.18.124
(2007/5/16/10:46:47)alert:  httpget   192.168.188.163 to 220.181.38.4
(2007/5/16/10:46:47)alert:  httpget   192.168.188.163 to 220.181.18.186
(2007/5/16/10:46:47)alert:  httpget   192.168.188.163 to 220.181.18.124
(2007/5/16/10:46:51)alert:  httpget   192.168.188.163 to 220.181.18.124
(2007/5/16/10:46:52)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:46:53)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:46:53)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:46:53)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:46:54)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:46:54)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:46:54)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:46:55)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:46:55)alert:  httpget   192.168.188.163 to 219.153.56.37
(2007/5/16/10:46:55)alert:  httpget   192.168.188.163 to 219.153.56.37
(2007/5/16/10:46:55)alert:  httpget   192.168.188.163 to 219.153.56.37
(2007/5/16/10:46:55)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:46:55)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:46:55)alert:  httpget   192.168.188.163 to 218.201.44.62
(2007/5/16/10:46:56)alert:  httpget   192.168.188.163 to 218.201.44.252
(2007/5/16/10:46:56)alert:  httpget   192.168.188.163 to 218.201.44.252
(2007/5/16/10:46:57)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:46:58)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:47:0)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:47:0)alert:  httpget   192.168.188.163 to 61.188.37.42
(2007/5/16/10:47:0)alert:  httpget   192.168.188.163 to 61.188.37.42
(2007/5/16/10:47:0)alert:  httpget   192.168.188.163 to 61.188.37.42
(2007/5/16/10:47:0)alert:  httpget   192.168.188.163 to 61.188.37.42
(2007/5/16/10:47:0)alert:  httpget   192.168.188.163 to 61.188.37.42
(2007/5/16/10:47:0)alert:  httpget   192.168.188.163 to 61.188.37.42
(2007/5/16/10:47:1)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 219.239.88.122
(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 219.239.88.122
(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 219.239.88.122