alert.txt

一款轻量级的入侵检测系统 对于网页中的shellcode有一定的防范能力

(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 219.153.56.37
(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 219.153.56.37
(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 219.153.56.37
(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 219.153.56.37
(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 220.181.37.106
(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 218.201.44.252
(2007/5/16/10:47:2)alert:  httpget   192.168.188.163 to 218.201.44.252
(2007/5/16/10:47:5)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:47:5)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:47:5)alert:  httpget   192.168.188.163 to 209.85.143.104
(2007/5/16/10:47:6)alert:  httpget   192.168.188.163 to 209.85.143.104
(2007/5/16/10:47:9)alert:  httpget   192.168.188.163 to 208.113.173.247
(2007/5/16/10:47:51)alert:  BLEEDING-EDGE Behavioral Unusual Port 3389 traffic, Potential Scan or Infection   192.168.188.163 to 192.168.188.38
(2007/5/16/10:49:18)alert:  httpget   192.168.188.163 to 58.61.164.11
(2007/5/16/10:49:23)alert:  httpget   192.168.188.163 to 58.61.164.11
(2007/5/16/10:49:28)alert:  httpget   192.168.188.163 to 58.61.164.11
(2007/5/16/10:50:3)alert:  httpget   192.168.188.163 to 58.61.164.11
(2007/5/16/10:50:13)alert:  httpget   192.168.188.163 to 58.61.164.11
(2007/5/16/10:51:38)alert:  httpget   192.168.188.163 to 63.245.209.21
(2007/5/16/10:53:5)alert:  httpget   192.168.188.163 to 218.30.108.60
(2007/5/16/10:53:5)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:6)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:6)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:6)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:6)alert:  httpget   192.168.188.163 to 218.30.66.7
(2007/5/16/10:53:6)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:6)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:7)alert:  httpget   192.168.188.163 to 218.30.66.7
(2007/5/16/10:53:7)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:7)alert:  httpget   192.168.188.163 to 58.63.234.144
(2007/5/16/10:53:8)alert:  httpget   192.168.188.163 to 58.63.234.143
(2007/5/16/10:53:8)alert:  httpget   192.168.188.163 to 58.63.234.143
(2007/5/16/10:53:8)alert:  httpget   192.168.188.163 to 218.30.66.7
(2007/5/16/10:53:8)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:9)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:10)alert:  httpget   192.168.188.163 to 218.30.108.56
(2007/5/16/10:53:10)alert:  httpget   192.168.188.163 to 218.30.108.56
(2007/5/16/10:53:10)alert:  httpget   192.168.188.163 to 58.63.234.144
(2007/5/16/10:53:11)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:11)alert:  httpget   192.168.188.163 to 218.30.108.56
(2007/5/16/10:53:11)alert:  httpget   192.168.188.163 to 218.30.108.56
(2007/5/16/10:53:11)alert:  httpget   192.168.188.163 to 218.30.108.56
(2007/5/16/10:53:14)alert:  httpget   192.168.188.163 to 202.108.33.51
(2007/5/16/10:53:17)alert:  httpget   192.168.188.163 to 210.51.186.72
(2007/5/16/10:53:18)alert:  httpget   192.168.188.163 to 210.51.186.72
(2007/5/16/10:53:18)alert:  httpget   192.168.188.163 to 218.30.108.60
(2007/5/16/10:53:35)alert:  httpget   192.168.188.163 to 218.30.108.72
(2007/5/16/10:53:37)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:37)alert:  httpget   192.168.188.163 to 58.63.234.144
(2007/5/16/10:53:37)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:37)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:37)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:37)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:38)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:38)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:38)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:38)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:39)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:39)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:40)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:40)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:40)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:41)alert:  httpget   192.168.188.163 to 61.135.179.135
(2007/5/16/10:53:41)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:41)alert:  httpget   192.168.188.163 to 58.63.234.143
(2007/5/16/10:53:41)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:41)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:42)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:42)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:42)alert:  httpget   192.168.188.163 to 58.63.234.144
(2007/5/16/10:53:42)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:42)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:42)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:43)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:43)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:43)alert:  httpget   192.168.188.163 to 58.63.234.144
(2007/5/16/10:53:43)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:43)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:43)alert:  httpget   192.168.188.163 to 58.63.234.144
(2007/5/16/10:53:43)alert:  httpget   192.168.188.163 to 58.63.234.144
(2007/5/16/10:53:43)alert:  httpget   192.168.188.163 to 58.63.234.143
(2007/5/16/10:53:43)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:44)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:44)alert:  httpget   192.168.188.163 to 58.63.234.143
(2007/5/16/10:53:44)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:44)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:44)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:44)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:44)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:45)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:45)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:45)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:45)alert:  httpget   192.168.188.163 to 218.30.20.251
(2007/5/16/10:53:45)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:46)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:47)alert:  httpget   192.168.188.163 to 218.30.108.72
(2007/5/16/10:53:47)alert:  httpget   192.168.188.163 to 218.83.153.241
(2007/5/16/10:53:48)alert:  httpget   192.168.188.163 to 218.83.153.241
(2007/5/16/10:53:48)alert:  httpget   192.168.188.163 to 218.83.153.241
(2007/5/16/10:53:51)alert:  httpget   192.168.188.163 to 218.83.153.241
(2007/5/16/10:53:52)alert:  httpget   192.168.188.163 to 58.63.234.145
(2007/5/16/10:53:55)alert:  httpget   192.168.188.163 to 218.83.153.241
(2007/5/16/10:53:58)alert:  httpget   192.168.188.163 to 218.83.153.241
(2007/5/16/10:54:16)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:17)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:17)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:17)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:17)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:17)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:21)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:21)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:22)alert:  httpget   192.168.188.163 to 202.106.184.200
(2007/5/16/10:54:25)alert:  httpget   192.168.188.163 to 202.106.184.200
(2007/5/16/10:54:25)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:25)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:25)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:25)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:26)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:26)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:29)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:29)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:29)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:29)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:29)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:29)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:29)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:32)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:32)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:32)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:32)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:32)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:32)alert:  httpget   192.168.188.163 to 202.108.33.38
(2007/5/16/10:54:33)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:33)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:33)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:33)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:33)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:34)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:34)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:37)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:38)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:41)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:41)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:41)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:41)alert:  httpget   192.168.188.163 to 202.108.33.38
(2007/5/16/10:54:41)alert:  httpget   192.168.188.163 to 218.30.115.246
(2007/5/16/10:54:41)alert:  httpget   192.168.188.163 to 202.108.33.38
(2007/5/16/10:54:44)alert:  httpget   192.168.188.163 to 202.108.33.38
(2007/5/16/10:54:45)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:51)alert:  httpget   192.168.188.163 to 202.108.33.38
(2007/5/16/10:54:52)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:52)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:53)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:53)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:53)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:55)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:55)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:57)alert:  httpget   192.168.188.163 to 202.108.33.38
(2007/5/16/10:54:58)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:58)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:58)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:58)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:58)alert:  httpget   192.168.188.163 to 210.51.186.72
(2007/5/16/10:54:58)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:58)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:54:58)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:54:59)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:55:6)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:55:6)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:55:6)alert:  httpget   192.168.188.163 to 219.142.78.37
(2007/5/16/10:55:6)alert:  httpget   192.168.188.163 to 218.30.108.73
(2007/5/16/10:55:6)alert:  httpget   192.168.188.163 to 202.108.33.57
(2007/5/16/10:55:6)alert:  httpget   192.168.188.163 to 202.108.33.51
(2007/5/16/10:55:6)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:55:6)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:55:7)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:55:7)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:55:7)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:55:7)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:55:7)alert:  httpget   192.168.188.163 to 58.63.234.146
(2007/5/16/10:55:9)alert:  httpget   192.168.188.163 to 202.108.33.38
(2007/5/16/10:55:11)alert:  httpget   192.168.188.163 to 2