rooted....?

Snort Logs:

Snort Logs:

[root@ns1 root]# cd /var/log/snort
[root@ns1 snort]# dir
alert snort.log.1051945955 snort.log.1052881071
portscan.log snort.log.1052716946
[root@ns1 snort]# view alert
05/14-10:57:32.530639 [**] [1:1390:3] SHELLCODE x86 inc ebx NOOP [**] [Classification: Executable code was detected] [Priority: 1] {TCP} 207.44.216.55:80 -> 204.128.70.6:18362
05/14-10:57:44.700286 [**] [1:1394:3] SHELLCODE x86 NOOP [**] [Classification: Executable code was detected] [Priority: 1] {TCP} 207.44.216.55:80 -> 199.43.32.22:12701
05/14-10:57:54.091995 [**] [1:1394:3] SHELLCODE x86 NOOP [**] [Classification: Executable code was detected] [Priority: 1] {TCP} 207.44.216.55:80 -> 199.43.32.22:13647
05/14-10:58:14.308767 [**] [1:1394:3] SHELLCODE x86 NOOP [**] [Classification: Executable code was detected] [Priority: 1] {TCP} 207.44.216.55:80 -> 199.43.32.22:15935
05/14-10:58:18.801482 [**] [1:1394:3] SHELLCODE x86 NOOP [**] [Classification: Executable code was detected] [Priority: 1] {TCP} 207.44.216.55:80 -> 199.43.32.22:16382
05/14-10:58:31.402782 [**] [1:1394:3] SHELLCODE x86 NOOP [**] [Classification: Executable code was detected] [Priority: 1] {TCP} 207.44.216.55:80 -> 199.43.32.22:17756
05/14-10:58:37.858426 [**] [1:1394:3] SHELLCODE x86 NOOP [**] [Classification: Executable code was detected] [Priority: 1] {TCP} 207.44.216.55:80 -> 199.43.32.22:18466
05/14-11

I'm fairly certain what this means...anyone care to offer an insight though?

:rooted....?tarts digging thru bash and access logs::

Thanks

-Daniel

 

 

 

 

Top