SnortSnarf alert page

Source: 192.168.24.52: #101-200

SnortSnarf v021111.1

Signature section (16810)

Top 20 source IPs

Top 20 dest IPs

Looking using input module SnortFileInput, with sources:

/var/log/snort/alert

Earliest: 23:01:31.602102 on 10/31/2009
Latest: 22:30:55.234151 on 12/10/2009

6 different signatures are present for 192.168.24.52 as a source

1 instances of (snort_decoder) WARNING: TCP Data Offset is less than 5!
4 instances of (http_inspect) DOUBLE DECODING ATTACK
12 instances of (http_inspect) OVERSIZE CHUNK ENCODING
32 instances of (http_inspect) OVERSIZE REQUEST-URI DIRECTORY
326 instances of (http_inspect) BARE BYTE UNICODE ENCODING
328 instances of (http_inspect) IIS UNICODE CODEPOINT ENCODING

There are 1 distinct destination IPs in the alerts of the type on this page.

192.168.24.52 Whois lookup at: ARIN RIPE APNIC Geektools

DNS lookup at: Amenesi TRIUMF Princeton

More lookup links: Dshield Sam Spade

Go to: previous range, next range, all alerts, overview page

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/31-23:01:31.602102 192.168.24.52:1095 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5251 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x777DF1AE  Ack: 0xCA2341D6  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/31-23:04:11.986663 192.168.24.52:1097 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5562 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x1D0560FC  Ack: 0xD601A117  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/31-23:04:51.958225 192.168.24.52:1099 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5810 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB5B7B095  Ack: 0xD7ADECC0  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/31-23:05:17.638220 192.168.24.52:1101 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6074 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA3500F48  Ack: 0xD976289F  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/31-23:06:31.794441 192.168.24.52:1103 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6177 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9DA82DE1  Ack: 0xDF2260B9  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/31-23:10:17.883262 192.168.24.52:1104 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6260 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x61A9FE03  Ack: 0xEC50221D  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/01-22:20:16.892456 192.168.24.52:1920 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:33687 IpLen:20 DgmLen:775 DF
***AP*** Seq: 0x3D329A12  Ack: 0x6C3EAB14  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/01-22:24:35.141368 192.168.24.52:1923 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:33984 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x30CF2321  Ack: 0x7D4B8519  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/01-22:33:21.327071 192.168.24.52:1924 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:34316 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9B74388D  Ack: 0x9F9931C2  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/01-22:33:24.235760 192.168.24.52:1924 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:7375
***AP*** Seq: 0x9F994F04  Ack: 0x9B744D85  Win: 0xBD8  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/02-23:51:59.015766 192.168.24.52:1667 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:24739 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xF4E0B894  Ack: 0x6551321  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/02-23:52:43.640224 192.168.24.52:1670 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:25047 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x26AA31EC  Ack: 0x8C52C97  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/02-23:53:14.830832 192.168.24.52:1671 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:25179 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xEE9EFD6F  Ack: 0xA8F200A  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/03-00:26:02.758830 192.168.24.52:1723 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:26841 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xAB2F5CE8  Ack: 0x85771D0B  Win: 0xFB1C  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/03-00:29:41.745237 192.168.24.52:1724 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:26924 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x67D2C720  Ack: 0x9464319A  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/03-23:09:06.308370 192.168.24.52:2387 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:50667 IpLen:20 DgmLen:854 DF
***AP*** Seq: 0x2F63BFA0  Ack: 0xA20E58D5  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/06-23:31:30.700628 192.168.24.52:1259 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7517 IpLen:20 DgmLen:502 DF
***AP*** Seq: 0x91D8463F  Ack: 0xB0139630  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/07-23:04:48.334047 192.168.24.52:2598 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:8093
***AP*** Seq: 0x881DA40A  Ack: 0xEE355686  Win: 0xBC0  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/07-23:05:04.654718 192.168.24.52:2601 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:7893
***AP*** Seq: 0x59909F4E  Ack: 0x899D117C  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/07-23:19:07.293516 192.168.24.52:2724 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:49687 IpLen:20 DgmLen:848 DF
***AP*** Seq: 0xD4B0D35A  Ack: 0xBEBC0E67  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/07-23:23:34.629111 192.168.24.52:2748 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:52493 IpLen:20 DgmLen:1154 DF
***AP*** Seq: 0x9A8BDA30  Ack: 0xCFCE4187  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/08-23:15:50.383848 192.168.24.52:2286 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:49121 IpLen:20 DgmLen:1430 DF
***AP*** Seq: 0xE76B1D3B  Ack: 0xF00FC706  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/11-00:01:48.407209 192.168.24.52:1992 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:32434 IpLen:20 DgmLen:1012 DF
***AP*** Seq: 0x43CF0019  Ack: 0x1A98327B  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/11-22:33:02.120820 192.168.24.52:2093 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37892 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD792C034  Ack: 0x8FC8C39  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-15:49:31.001754 192.168.24.52:1494 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:57407 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9E2E0ABE  Ack: 0x5225D28E  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-15:50:37.811848 192.168.24.52:1498 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:57520 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x1602E004  Ack: 0x56D333CC  Win: 0xFB34  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
11/12-15:50:37.813030 192.168.24.52:1498 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:57527 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x1603063E  Ack: 0x56D333CC  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-16:09:05.029773 192.168.24.52:1574 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1315 IpLen:20 DgmLen:237 DF
***AP*** Seq: 0xF73591B2  Ack: 0x9CC2555D  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-16:13:38.820258 192.168.24.52:1578 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1864 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x97279817  Ack: 0xADA44BD6  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-16:17:44.635530 192.168.24.52:1579 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1981 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x63F40D8B  Ack: 0xBD2C49AD  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-16:24:47.303713 192.168.24.52:1636 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3888 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x75174D4F  Ack: 0xD80B7F9B  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-16:26:08.970569 192.168.24.52:1650 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4065 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x293CBC6A  Ack: 0xDCDE482C  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/13-22:16:19.014013 192.168.24.52:1194 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8291 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDAEF45A7  Ack: 0x44369B90  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/13-22:17:24.850852 192.168.24.52:1198 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8475 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x62212138  Ack: 0x4905A8B2  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/13-22:19:46.502481 192.168.24.52:1202 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8690 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF802C438  Ack: 0x51BF82B5  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/13-22:21:45.750631 192.168.24.52:1204 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8861 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF95A021F  Ack: 0x58B502CD  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/13-22:23:52.572633 192.168.24.52:1206 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9058 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x1A37CDBD  Ack: 0x61EF4520  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/13-22:23:56.487625 192.168.24.52:1206 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:8017
***AP*** Seq: 0x61EF69EF  Ack: 0x1A37E537  Win: 0xD45  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/15-23:34:11.403679 192.168.24.52:2238 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:52824 IpLen:20 DgmLen:775 DF
***AP*** Seq: 0xA23EC0DA  Ack: 0xE53E4BA0  Win: 0xFB05  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/15-23:35:00.378684 192.168.24.52:2241 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:52959 IpLen:20 DgmLen:996 DF
***AP*** Seq: 0x376056C6  Ack: 0xE973ECFF  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/16-23:28:43.364523 192.168.24.52:1724 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:22611 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x138604D  Ack: 0xFF32539  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/16-23:29:37.241729 192.168.24.52:1729 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:22778 IpLen:20 DgmLen:852 DF
***AP*** Seq: 0x1A0886FE  Ack: 0x1331986B  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/18-22:26:02.397213 192.168.24.52:2471 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:58769 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFDCD1D2C  Ack: 0x9E822117  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/18-22:27:00.151449 192.168.24.52:2474 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:58895 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFE77B41A  Ack: 0xA1394288  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/18-22:27:33.389744 192.168.24.52:2475 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:58998 IpLen:20 DgmLen:1324 DF
***AP*** Seq: 0xA25F10BA  Ack: 0xA53F2D0B  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/18-22:31:36.829188 192.168.24.52:2477 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:59149 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9956FEA5  Ack: 0xB31D8504  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/18-22:32:22.496706 192.168.24.52:2478 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:59292 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF30703B5  Ack: 0xB63AF3EF  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/18-22:33:16.506214 192.168.24.52:2479 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:59429 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9459B966  Ack: 0xBA7A1A75  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/19-20:24:08.469669 192.168.24.52:1537 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2233
***AP*** Seq: 0xEFD0154  Ack: 0x10E01075  Win: 0x578  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/19-21:49:24.710801 192.168.24.52:2118 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:47755 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2EAFCC1D  Ack: 0x517D6315  Win: 0xFB05  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
11/19-21:49:24.820814 192.168.24.52:2118 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:47875 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x2EB252FE  Ack: 0x517D6315  Win: 0xFB05  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/20-22:38:34.831698 192.168.24.52:1233 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7079 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x291384F3  Ack: 0x499E7EE5  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/21-22:21:21.293265 192.168.24.52:1222 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2064
***AP*** Seq: 0xC9F06836  Ack: 0x45FD08E3  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/21-22:21:40.150890 192.168.24.52:1221 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:43343 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x9A937E0A  Ack: 0x460C9ABF  Win: 0xFB05  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/21-22:24:11.964424 192.168.24.52:1226 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:43701 IpLen:20 DgmLen:1381 DF
***AP*** Seq: 0x62ED5960  Ack: 0x51DBAE50  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/22-23:13:25.123769 192.168.24.52:1957 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1119
***AP*** Seq: 0xAB4DE2D  Ack: 0x49C163AD  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/22-23:16:30.165434 192.168.24.52:1969 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:61549 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4BC1ED58  Ack: 0x540ADD22  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/22-23:18:48.846988 192.168.24.52:1976 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:61728 IpLen:20 DgmLen:1248 DF
***AP*** Seq: 0xCF4B8888  Ack: 0x5D69A5A2  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/23-22:02:07.952637 192.168.24.52:2000 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:38104 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xCC8AEC7A  Ack: 0x79CC6E23  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/23-22:04:00.024190 192.168.24.52:2001 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:38154 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x7A29BD7  Ack: 0x80E74C4A  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/24-22:47:24.509111 192.168.24.52:1430 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:46593 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x71BCBBF7  Ack: 0x62FF9D27  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/24-22:52:07.386550 192.168.24.52:1436 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:46827 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x5E95DD9D  Ack: 0x753B2123  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/24-22:53:41.251943 192.168.24.52:1437 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:46964 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFFC1E6E  Ack: 0x7A74EB61  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/24-22:55:13.949668 192.168.24.52:1443 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:47130 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x24F340D4  Ack: 0x7F2770C5  Win: 0xFB34  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
11/24-22:55:14.058381 192.168.24.52:1443 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:47222 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x24F534A5  Ack: 0x7F2770C5  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/24-22:57:40.942892 192.168.24.52:1444 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:47452 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA9C54185  Ack: 0x87ACF413  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/25-22:49:18.360993 192.168.24.52:1780 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19377 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xE50EE1A6  Ack: 0xA79A5D9E  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/27-22:18:52.858436 192.168.24.52:1352 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8314 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xE136C89A  Ack: 0xAFEDE6AE  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/27-22:21:54.282191 192.168.24.52:1416 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9409 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDBA84CB5  Ack: 0xB9FBD1C0  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/27-22:23:47.831066 192.168.24.52:1417 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9721 IpLen:20 DgmLen:775 DF
***AP*** Seq: 0xFCA0986B  Ack: 0xC27A5141  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/27-22:24:26.447959 192.168.24.52:1423 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10112 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD8AD3232  Ack: 0xC57759AA  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/30-00:03:09.663395 192.168.24.52:1245 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:63907 IpLen:20 DgmLen:1120 DF
***AP*** Seq: 0x5FFBDB02  Ack: 0xB5E1082C  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/01-22:29:21.474381 192.168.24.52:1382 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4069 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x1EFC8306  Ack: 0xCF5AF348  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/01-22:30:12.829484 192.168.24.52:1387 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4262 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x25C46DC3  Ack: 0xD257255E  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/01-22:32:20.676747 192.168.24.52:1405 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5146 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDB4D0DE5  Ack: 0xDA9FAF23  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/01-22:32:51.571640 192.168.24.52:1405 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:10738
***AP*** Seq: 0xDAA065BC  Ack: 0xDB4D2FEB  Win: 0x12B0  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/01-22:37:05.130979 192.168.24.52:1418 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6127 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x3745C893  Ack: 0xEAFCC4F2  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/01-22:57:08.026916 192.168.24.52:1464 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7417 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9ECC98BD  Ack: 0x38200EBE  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/01-22:58:28.222535 192.168.24.52:1465 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7647 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x61AF1755  Ack: 0x3D4A092E  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/03-22:51:48.563666 192.168.24.52:2357 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:60234 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x691B6A7D  Ack: 0x9EC43FC4  Win: 0xFB05  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/03-22:53:07.370987 192.168.24.52:2359 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:60364 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFD858ADC  Ack: 0xA53F4931  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/03-23:08:31.537112 192.168.24.52:2397 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:62442 IpLen:20 DgmLen:416 DF
***AP*** Seq: 0xB380E1E1  Ack: 0xDE9CFB71  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/04-22:32:45.960697 192.168.24.52:1185 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9390 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x67174BCC  Ack: 0x95C55DD0  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/04-22:33:22.408586 192.168.24.52:1186 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9488 IpLen:20 DgmLen:366 DF
***AP*** Seq: 0x6B2559F4  Ack: 0x988F9D9F  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/05-23:53:31.719018 192.168.24.52:1762 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:28439 IpLen:20 DgmLen:775 DF
***AP*** Seq: 0x2741052C  Ack: 0x409C423  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/05-23:55:55.641344 192.168.24.52:1777 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:28743 IpLen:20 DgmLen:1297 DF
***AP*** Seq: 0xDF2A86BB  Ack: 0xD580757  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/06-23:27:57.651044 192.168.24.52:1603 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9032 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xAD373A70  Ack: 0xE1FE87AA  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/08-22:39:11.887691 192.168.24.52:1951 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:27220 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x293BF276  Ack: 0xA5A2C347  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/10-22:04:21.561016 192.168.24.52:2863 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2108
***AP*** Seq: 0x9C68B717  Ack: 0xFAAA522C  Win: 0x578  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/10-22:17:50.567872 192.168.24.52:2909 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:25932 IpLen:20 DgmLen:775 DF
***AP*** Seq: 0xE273F749  Ack: 0xD03C1A49  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/10-22:18:45.876467 192.168.24.52:2910 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:26127 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x8AE94C69  Ack: 0xD36D2D28  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/10-22:19:47.180260 192.168.24.52:2911 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:26318 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x53270D58  Ack: 0xD7185FAB  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/10-22:20:46.437068 192.168.24.52:2914 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:26489 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xDD3D7CC2  Ack: 0xDAE3BB3D  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/10-22:22:46.883498 192.168.24.52:2916 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:26672 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x68C8CEFB  Ack: 0xE2721AC4  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/10-22:23:44.582429 192.168.24.52:2917 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:26819 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xC0764461  Ack: 0xE60A716B  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/10-22:25:01.268141 192.168.24.52:2922 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:26991 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD8C133B3  Ack: 0xEB6D842F  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/10-22:25:28.415672 192.168.24.52:2922 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:8541
***AP*** Seq: 0xEB6E9EDA  Ack: 0xD8C14D39  Win: 0x114E  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/10-22:27:02.156694 192.168.24.52:2940 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:27239 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x730E12DA  Ack: 0xF2D731C7  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/10-22:27:03.689740 192.168.24.52:2940 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:6463
***AP*** Seq: 0xF2D7AEB8  Ack: 0x730E2464  Win: 0xA72  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/10-22:30:55.234151 192.168.24.52:2941 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:27312 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA8897A05  Ack: 0x10E8F80  Win: 0xFB34  TcpLen: 20

Go to: previous range, next range, all alerts, overview page

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Sep 14 05:05:29 2010

192.168.24.52	Whois lookup at:	ARIN	RIPE	APNIC	Geektools
	DNS lookup at:	Amenesi	TRIUMF	Princeton
	More lookup links:	Dshield	Sam Spade