SnortSnarf alert page

Source: 192.168.24.52: #101-200

SnortSnarf v021111.1

Signature section (16810)

Top 20 source IPs

Top 20 dest IPs

Looking using input module SnortFileInput, with sources:

/var/log/snort/alert

Earliest: 22:48:33.753350 on 10/04/2009
Latest: 22:33:16.506214 on 11/18/2009

6 different signatures are present for 192.168.24.52 as a source

1 instances of (snort_decoder) WARNING: TCP Data Offset is less than 5!
4 instances of (http_inspect) DOUBLE DECODING ATTACK
12 instances of (http_inspect) OVERSIZE CHUNK ENCODING
32 instances of (http_inspect) OVERSIZE REQUEST-URI DIRECTORY
326 instances of (http_inspect) BARE BYTE UNICODE ENCODING
328 instances of (http_inspect) IIS UNICODE CODEPOINT ENCODING

There are 1 distinct destination IPs in the alerts of the type on this page.

192.168.24.52 Whois lookup at: ARIN RIPE APNIC Geektools

DNS lookup at: Amenesi TRIUMF Princeton

More lookup links: Dshield Sam Spade

Go to: previous range, next range, all alerts, overview page

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/04-22:48:33.753350 192.168.24.52:1690 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:32310 IpLen:20 DgmLen:406 DF
***AP*** Seq: 0xAB31E3D6  Ack: 0x14BED3D7  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/06-00:05:55.374765 192.168.24.52:1716 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2258
***AP*** Seq: 0x75556FAA  Ack: 0x4AA46639  Win: 0x578  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/08-22:57:38.693867 192.168.24.52:1075 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1901 IpLen:20 DgmLen:1118 DF
***AP*** Seq: 0x2F694863  Ack: 0x2F35C1E4  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/09-22:56:20.284091 192.168.24.52:1189 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5160 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8F87F761  Ack: 0x67CF4651  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/10-22:40:14.779201 192.168.24.52:1149 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4496 IpLen:20 DgmLen:454 DF
***AP*** Seq: 0xA50887D9  Ack: 0x68A9F651  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/11-00:13:47.168572 192.168.24.52:2178 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:38822 IpLen:20 DgmLen:184 DF
***AP*** Seq: 0xBDD81B38  Ack: 0xC9DB7AD5  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/16-22:59:46.454305 192.168.24.52:1593 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:32632 IpLen:20 DgmLen:612 DF
***AP*** Seq: 0xF44EA8CF  Ack: 0x25DB7E77  Win: 0xFB34  TcpLen: 20

[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
10/16-23:14:31.159883 192.168.24.52:1781 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1145
***AP*** Seq: 0x200E0ECA  Ack: 0x5D8BD064  Win: 0xFB34  TcpLen: 20

[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
10/17-22:47:36.877583 192.168.24.52:1188 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2530
***AP*** Seq: 0x352690C2  Ack: 0x502680C4  Win: 0x608  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:14:35.010242 192.168.24.52:1951 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:35206 IpLen:20 DgmLen:965 DF
***AP*** Seq: 0xE41AD19F  Ack: 0xD98E2BB9  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:27:41.521292 192.168.24.52:2010 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37020 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFEE027FA  Ack: 0xB73DB6A  Win: 0xFB34  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
10/18-23:27:41.521415 192.168.24.52:2010 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37021 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xFEE02D70  Ack: 0xB73DB6A  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:28:11.395855 192.168.24.52:2011 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37057 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x371A40BD  Ack: 0xC4B6120  Win: 0xFB34  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
10/18-23:28:11.395977 192.168.24.52:2011 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37058 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x371A4633  Ack: 0xC4B6120  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:28:44.968284 192.168.24.52:2012 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37092 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x726D4354  Ack: 0xE77980F  Win: 0xFB34  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
10/18-23:28:44.968401 192.168.24.52:2012 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37093 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x726D48CA  Ack: 0xE77980F  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:29:14.548576 192.168.24.52:2013 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37174 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x810BB3B4  Ack: 0x1048ABC9  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:30:51.271573 192.168.24.52:2015 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37389 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB12FA695  Ack: 0x16672A3C  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:31:30.522413 192.168.24.52:2016 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37450 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x97E82D1D  Ack: 0x19A063E4  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:31:58.868823 192.168.24.52:2018 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37537 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xCB7AEBC6  Ack: 0x1B0354E6  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:33:26.645185 192.168.24.52:2020 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37681 IpLen:20 DgmLen:104 DF
***AP*** Seq: 0xEFA4C0F8  Ack: 0x2010F335  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:35:44.981261 192.168.24.52:2021 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:38006 IpLen:20 DgmLen:146 DF
***AP*** Seq: 0xC673FB8D  Ack: 0x28534F24  Win: 0xFB34  TcpLen: 20

[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
10/18-23:38:27.067996 192.168.24.52:2023 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:7543
***AP*** Seq: 0x81DAB22A  Ack: 0x331D2F78  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:40:51.226682 192.168.24.52:2024 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:38554 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA631A42A  Ack: 0x3BBAC7BE  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:41:47.180226 192.168.24.52:2026 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:38609 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xEF398F4D  Ack: 0x3FE9B476  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:43:17.507293 192.168.24.52:2032 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:38703 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9C7DF1EA  Ack: 0x45DA9553  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:43:43.704481 192.168.24.52:2033 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:38745 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2AE1A7C8  Ack: 0x471BE792  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:45:34.146271 192.168.24.52:2035 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:38807 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x67EE161C  Ack: 0x4E3D229E  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:49:05.502397 192.168.24.52:2039 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:39037 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4B125CED  Ack: 0x5B24A90A  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/18-23:50:02.941423 192.168.24.52:2041 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:39136 IpLen:20 DgmLen:178 DF
***AP*** Seq: 0x2B5EBDB1  Ack: 0x5EE59B42  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/29-23:10:29.861773 192.168.24.52:1937 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:44688 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8B54F081  Ack: 0x714198AB  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/29-23:14:19.525774 192.168.24.52:1941 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:44950 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB5F8E627  Ack: 0x80E37CE4  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/29-23:15:48.956933 192.168.24.52:1946 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:47079 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xC41A2E39  Ack: 0x8570CF07  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/29-23:30:55.286963 192.168.24.52:1974 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:47891 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x197C07DB  Ack: 0xBE7D57C2  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/29-23:32:18.414001 192.168.24.52:1976 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:47964 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB6DE4757  Ack: 0xC454682D  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/29-23:32:34.407760 192.168.24.52:1976 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:47998 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB6DE8417  Ack: 0xC454F2E7  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/29-23:35:37.362620 192.168.24.52:1982 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:48343 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA3EDBB9B  Ack: 0xD048B4C8  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/29-23:37:41.227442 192.168.24.52:1986 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:48755 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4F188F05  Ack: 0xD8F14599  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/29-23:37:59.845636 192.168.24.52:1986 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:14013
***AP*** Seq: 0xD8F1D54B  Ack: 0x4F18BE0D  Win: 0x12F0  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/29-23:40:01.871987 192.168.24.52:1987 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:48842 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB40B58AF  Ack: 0xE07E4EA0  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/29-23:42:20.384793 192.168.24.52:1993 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:49121 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x2FE279F2  Ack: 0xE9AFBAF4  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/29-23:47:45.890226 192.168.24.52:1995 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:49379 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF146E53C  Ack: 0xFF1C23F5  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/29-23:47:51.345322 192.168.24.52:1995 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:23215
***AP*** Seq: 0xFF1CBCFE  Ack: 0xF1473836  Win: 0x1E2A  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/29-23:48:13.535525 192.168.24.52:1997 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:49509 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x29FD4516  Ack: 0x11ED8B8  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/29-23:51:38.291965 192.168.24.52:2042 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:50365 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x390F0DC0  Ack: 0xDA060D4  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/29-23:52:17.844830 192.168.24.52:2043 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:50444 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x3B97BE72  Ack: 0x10AA5F5F  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/29-23:53:26.593213 192.168.24.52:2046 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:50612 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xCD6DEE8F  Ack: 0x1466B4BF  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/29-23:57:12.782347 192.168.24.52:2053 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:50935 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA2CB0455  Ack: 0x2254EF34  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/30-00:01:37.215093 192.168.24.52:2054 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:51090 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xC8D2C2FF  Ack: 0x33BDEEE8  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/30-23:35:07.403748 192.168.24.52:1161 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4448 IpLen:20 DgmLen:1094 DF
***AP*** Seq: 0x77B5119D  Ack: 0xCD68220  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/31-22:56:04.985247 192.168.24.52:1087 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4790 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x139C0D4  Ack: 0xB60DEFEB  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/31-22:58:34.516220 192.168.24.52:1089 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5030 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xBB3D1923  Ack: 0xC00CD419  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/31-23:01:31.602102 192.168.24.52:1095 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5251 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x777DF1AE  Ack: 0xCA2341D6  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/31-23:04:11.986663 192.168.24.52:1097 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5562 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x1D0560FC  Ack: 0xD601A117  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
10/31-23:04:51.958225 192.168.24.52:1099 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5810 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB5B7B095  Ack: 0xD7ADECC0  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/31-23:05:17.638220 192.168.24.52:1101 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6074 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA3500F48  Ack: 0xD976289F  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/31-23:06:31.794441 192.168.24.52:1103 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6177 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9DA82DE1  Ack: 0xDF2260B9  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
10/31-23:10:17.883262 192.168.24.52:1104 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6260 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x61A9FE03  Ack: 0xEC50221D  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/01-22:20:16.892456 192.168.24.52:1920 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:33687 IpLen:20 DgmLen:775 DF
***AP*** Seq: 0x3D329A12  Ack: 0x6C3EAB14  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/01-22:24:35.141368 192.168.24.52:1923 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:33984 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x30CF2321  Ack: 0x7D4B8519  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/01-22:33:21.327071 192.168.24.52:1924 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:34316 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9B74388D  Ack: 0x9F9931C2  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/01-22:33:24.235760 192.168.24.52:1924 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:7375
***AP*** Seq: 0x9F994F04  Ack: 0x9B744D85  Win: 0xBD8  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/02-23:51:59.015766 192.168.24.52:1667 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:24739 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xF4E0B894  Ack: 0x6551321  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/02-23:52:43.640224 192.168.24.52:1670 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:25047 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x26AA31EC  Ack: 0x8C52C97  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/02-23:53:14.830832 192.168.24.52:1671 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:25179 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xEE9EFD6F  Ack: 0xA8F200A  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/03-00:26:02.758830 192.168.24.52:1723 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:26841 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xAB2F5CE8  Ack: 0x85771D0B  Win: 0xFB1C  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/03-00:29:41.745237 192.168.24.52:1724 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:26924 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x67D2C720  Ack: 0x9464319A  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/03-23:09:06.308370 192.168.24.52:2387 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:50667 IpLen:20 DgmLen:854 DF
***AP*** Seq: 0x2F63BFA0  Ack: 0xA20E58D5  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/06-23:31:30.700628 192.168.24.52:1259 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7517 IpLen:20 DgmLen:502 DF
***AP*** Seq: 0x91D8463F  Ack: 0xB0139630  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/07-23:04:48.334047 192.168.24.52:2598 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:8093
***AP*** Seq: 0x881DA40A  Ack: 0xEE355686  Win: 0xBC0  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/07-23:05:04.654718 192.168.24.52:2601 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:7893
***AP*** Seq: 0x59909F4E  Ack: 0x899D117C  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/07-23:19:07.293516 192.168.24.52:2724 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:49687 IpLen:20 DgmLen:848 DF
***AP*** Seq: 0xD4B0D35A  Ack: 0xBEBC0E67  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/07-23:23:34.629111 192.168.24.52:2748 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:52493 IpLen:20 DgmLen:1154 DF
***AP*** Seq: 0x9A8BDA30  Ack: 0xCFCE4187  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/08-23:15:50.383848 192.168.24.52:2286 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:49121 IpLen:20 DgmLen:1430 DF
***AP*** Seq: 0xE76B1D3B  Ack: 0xF00FC706  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/11-00:01:48.407209 192.168.24.52:1992 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:32434 IpLen:20 DgmLen:1012 DF
***AP*** Seq: 0x43CF0019  Ack: 0x1A98327B  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/11-22:33:02.120820 192.168.24.52:2093 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:37892 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD792C034  Ack: 0x8FC8C39  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-15:49:31.001754 192.168.24.52:1494 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:57407 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9E2E0ABE  Ack: 0x5225D28E  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-15:50:37.811848 192.168.24.52:1498 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:57520 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x1602E004  Ack: 0x56D333CC  Win: 0xFB34  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
11/12-15:50:37.813030 192.168.24.52:1498 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:57527 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x1603063E  Ack: 0x56D333CC  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-16:09:05.029773 192.168.24.52:1574 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1315 IpLen:20 DgmLen:237 DF
***AP*** Seq: 0xF73591B2  Ack: 0x9CC2555D  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-16:13:38.820258 192.168.24.52:1578 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1864 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x97279817  Ack: 0xADA44BD6  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-16:17:44.635530 192.168.24.52:1579 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1981 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x63F40D8B  Ack: 0xBD2C49AD  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-16:24:47.303713 192.168.24.52:1636 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3888 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x75174D4F  Ack: 0xD80B7F9B  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/12-16:26:08.970569 192.168.24.52:1650 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4065 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x293CBC6A  Ack: 0xDCDE482C  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/13-22:16:19.014013 192.168.24.52:1194 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8291 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDAEF45A7  Ack: 0x44369B90  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/13-22:17:24.850852 192.168.24.52:1198 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8475 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x62212138  Ack: 0x4905A8B2  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/13-22:19:46.502481 192.168.24.52:1202 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8690 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF802C438  Ack: 0x51BF82B5  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/13-22:21:45.750631 192.168.24.52:1204 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8861 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF95A021F  Ack: 0x58B502CD  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/13-22:23:52.572633 192.168.24.52:1206 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9058 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x1A37CDBD  Ack: 0x61EF4520  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/13-22:23:56.487625 192.168.24.52:1206 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:8017
***AP*** Seq: 0x61EF69EF  Ack: 0x1A37E537  Win: 0xD45  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/15-23:34:11.403679 192.168.24.52:2238 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:52824 IpLen:20 DgmLen:775 DF
***AP*** Seq: 0xA23EC0DA  Ack: 0xE53E4BA0  Win: 0xFB05  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/15-23:35:00.378684 192.168.24.52:2241 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:52959 IpLen:20 DgmLen:996 DF
***AP*** Seq: 0x376056C6  Ack: 0xE973ECFF  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/16-23:28:43.364523 192.168.24.52:1724 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:22611 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x138604D  Ack: 0xFF32539  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/16-23:29:37.241729 192.168.24.52:1729 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:22778 IpLen:20 DgmLen:852 DF
***AP*** Seq: 0x1A0886FE  Ack: 0x1331986B  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/18-22:26:02.397213 192.168.24.52:2471 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:58769 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFDCD1D2C  Ack: 0x9E822117  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/18-22:27:00.151449 192.168.24.52:2474 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:58895 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFE77B41A  Ack: 0xA1394288  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/18-22:27:33.389744 192.168.24.52:2475 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:58998 IpLen:20 DgmLen:1324 DF
***AP*** Seq: 0xA25F10BA  Ack: 0xA53F2D0B  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/18-22:31:36.829188 192.168.24.52:2477 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:59149 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9956FEA5  Ack: 0xB31D8504  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
11/18-22:32:22.496706 192.168.24.52:2478 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:59292 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF30703B5  Ack: 0xB63AF3EF  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
11/18-22:33:16.506214 192.168.24.52:2479 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:59429 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9459B966  Ack: 0xBA7A1A75  Win: 0xFB34  TcpLen: 20

Go to: previous range, next range, all alerts, overview page

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Fri Jul 30 05:05:23 2010

192.168.24.52	Whois lookup at:	ARIN	RIPE	APNIC	Geektools
	DNS lookup at:	Amenesi	TRIUMF	Princeton
	More lookup links:	Dshield	Sam Spade