SnortSnarf alert page

Source: 192.168.24.52: #201-300

SnortSnarf v021111.1

Signature section (16810)

Top 20 source IPs

Top 20 dest IPs

Looking using input module SnortFileInput, with sources:

/var/log/snort/alert

Earliest: 22:30:59.369465 on 12/10/2009
Latest: 23:49:26.481519 on 05/03/2010

6 different signatures are present for 192.168.24.52 as a source

1 instances of (snort_decoder) WARNING: TCP Data Offset is less than 5!
4 instances of (http_inspect) DOUBLE DECODING ATTACK
12 instances of (http_inspect) OVERSIZE CHUNK ENCODING
32 instances of (http_inspect) OVERSIZE REQUEST-URI DIRECTORY
326 instances of (http_inspect) BARE BYTE UNICODE ENCODING
328 instances of (http_inspect) IIS UNICODE CODEPOINT ENCODING

There are 1 distinct destination IPs in the alerts of the type on this page.

192.168.24.52 Whois lookup at: ARIN RIPE APNIC Geektools

DNS lookup at: Amenesi TRIUMF Princeton

More lookup links: Dshield Sam Spade

Go to: previous range, next range, all alerts, overview page

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/10-22:30:59.369465 192.168.24.52:2941 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:7308
***AP*** Seq: 0x10EACB8  Ack: 0xA8898EDC  Win: 0xBCF  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/11-23:03:14.495017 192.168.24.52:2641 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:41431 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xC10258C5  Ack: 0xB9860925  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/13-22:51:05.931830 192.168.24.52:2020 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2487
***AP*** Seq: 0x63D3BD5  Ack: 0x4BE91479  Win: 0x5FE  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/15-22:32:23.238941 192.168.24.52:1364 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8189 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x55365E6F  Ack: 0x3C088E31  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/16-23:15:05.273852 192.168.24.52:2705 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:47149 IpLen:20 DgmLen:523 DF
***AP*** Seq: 0xE5E818B4  Ack: 0x19AA15CC  Win: 0xFB05  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/23-22:07:52.854441 192.168.24.52:1826 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:62418 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE8B4C9E0  Ack: 0xCCB3E982  Win: 0xFB05  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/23-22:08:46.129538 192.168.24.52:1827 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:62597 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x855C58A8  Ack: 0xD29F9CD9  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/23-22:36:31.300578 192.168.24.52:1861 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:63652 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x65027D20  Ack: 0x3A618701  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/23-22:39:02.972872 192.168.24.52:1862 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:63860 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xEF2571DD  Ack: 0x43AFC4C7  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/23-22:41:13.243963 192.168.24.52:1866 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:64289 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6724210E  Ack: 0x4CA4503F  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/23-22:50:39.701733 192.168.24.52:1889 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:64975 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x58FC63A2  Ack: 0x6F49209C  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/23-22:51:37.790439 192.168.24.52:1891 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:65219 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x1B69E4A0  Ack: 0x73245F21  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/23-22:52:15.823773 192.168.24.52:1892 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:65286 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA9A9DCA3  Ack: 0x7637FD19  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/23-23:00:39.473751 192.168.24.52:1922 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1463 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8D69302C  Ack: 0x9595DA12  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/23-23:03:17.512483 192.168.24.52:1929 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1853 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4EA406C1  Ack: 0xA0881699  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/24-22:13:09.936366 192.168.24.52:1999 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:62326 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9E997B58  Ack: 0x2052710E  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/24-22:13:38.018621 192.168.24.52:2000 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:62493 IpLen:20 DgmLen:384 DF
***AP*** Seq: 0x7BB838F6  Ack: 0x22B5B302  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
12/25-22:54:11.314637 192.168.24.52:1836 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:31698 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4B7BD594  Ack: 0xF96C48C2  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/25-22:55:05.512974 192.168.24.52:1841 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:31887 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xEA903C7F  Ack: 0xFC7C3B60  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
12/25-22:57:07.257445 192.168.24.52:1844 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:31985 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xCFCB7F4D  Ack: 0x36FE548  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/03-21:46:57.747343 192.168.24.52:2449 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:53223 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xBA869695  Ack: 0x274FAB66  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/03-21:51:51.943264 192.168.24.52:2454 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:53502 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFE468AC3  Ack: 0x39F35A25  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/03-21:57:34.365813 192.168.24.52:2471 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:53858 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x5D6368D3  Ack: 0x4EB4008B  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/03-21:59:00.195483 192.168.24.52:2484 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:54104 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2E1BDF92  Ack: 0x55421836  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/03-22:04:22.266548 192.168.24.52:2488 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:54326 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6BB4BF2B  Ack: 0x69B140FB  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/03-22:09:09.204394 192.168.24.52:2518 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:55331 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4E0E791A  Ack: 0x7B3E2C08  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/03-22:11:50.940936 192.168.24.52:2521 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:55579 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4419EF00  Ack: 0x8581E5BC  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/03-22:14:25.914187 192.168.24.52:2524 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:55836 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x5327EED3  Ack: 0x90269FAD  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/07-00:14:20.196505 192.168.24.52:1834 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:23642 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xBCD65C81  Ack: 0xE65BDA4  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/09-23:40:36.604383 192.168.24.52:2248 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:13123
***AP*** Seq: 0x80FF1FA9  Ack: 0x47230091  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/09-23:40:49.007416 192.168.24.52:2270 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:5760
***AP*** Seq: 0x48284654  Ack: 0xD7017F3B  Win: 0x8A6  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/09-23:48:00.789766 192.168.24.52:2309 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:41648 IpLen:20 DgmLen:229 DF
***AP*** Seq: 0x51505437  Ack: 0x63D1F205  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/10-00:00:47.720378 192.168.24.52:2396 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:43149 IpLen:20 DgmLen:1371 DF
***AP*** Seq: 0xD37C1B6F  Ack: 0x93E66639  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/15-23:08:38.482180 192.168.24.52:1342 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9663 IpLen:20 DgmLen:874 DF
***AP*** Seq: 0x309D680B  Ack: 0x427EC53A  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/16-23:14:46.495968 192.168.24.52:1180 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5007 IpLen:20 DgmLen:860 DF
***AP*** Seq: 0xC2069EB6  Ack: 0x97DBF50C  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/18-22:05:15.711935 192.168.24.52:1244 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6446 IpLen:20 DgmLen:427 DF
***AP*** Seq: 0x50776A40  Ack: 0xCC162DC  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/20-22:20:09.242504 192.168.24.52:1458 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9438 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA33C1F98  Ack: 0xC092232E  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/21-00:04:00.154569 192.168.24.52:2201 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3467
***AP*** Seq: 0xA514862E  Ack: 0x482755D5  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/21-22:09:51.901565 192.168.24.52:1776 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1794
***AP*** Seq: 0xD6317BCF  Ack: 0x9F00BA15  Win: 0x491  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/21-22:11:07.078619 192.168.24.52:1786 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1795
***AP*** Seq: 0xDAD913E8  Ack: 0x9F175BDE  Win: 0x491  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/21-22:28:51.732352 192.168.24.52:1851 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2436
***AP*** Seq: 0x5DC3943B  Ack: 0x1EDAF1EF  Win: 0xFAF7  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/21-22:49:47.339126 192.168.24.52:1904 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:13661 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x91EC1082  Ack: 0x6C6990AF  Win: 0xFB34  TcpLen: 20

[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
01/26-21:37:27.975408 192.168.24.52:2217 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:12134
***AP*** Seq: 0xCDAF883  Ack: 0x9124BE89  Win: 0xFABC  TcpLen: 20

[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
01/26-21:37:33.337358 192.168.24.52:2218 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:8763
***AP*** Seq: 0x90F89DC9  Ack: 0xE8181E44  Win: 0xC50  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/26-21:49:05.889028 192.168.24.52:2251 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:48629 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB4BEE0BF  Ack: 0xBDEAA84C  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/26-21:49:34.202285 192.168.24.52:2252 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:48883 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD9509C97  Ack: 0xBFFC8710  Win: 0xFB34  TcpLen: 20

[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
01/26-21:49:34.301381 192.168.24.52:2252 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:60154
***AP*** Seq: 0xBFFC8710  Ack: 0xD952B939  Win: 0x17F  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/26-22:01:40.114767 192.168.24.52:2334 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:51413 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8730BA60  Ack: 0xECFBFCB2  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/26-22:04:36.908091 192.168.24.52:2335 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:51513 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA02604A3  Ack: 0xF8A97751  Win: 0xFB34  TcpLen: 20

[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
01/26-22:04:36.908219 192.168.24.52:2335 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:16619
***AP*** Seq: 0xF8A97751  Ack: 0xA0260F8F  Win: 0x14CA  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/26-22:17:49.468701 192.168.24.52:2387 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:53280 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x7C511313  Ack: 0x2A450227  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/26-22:19:24.302955 192.168.24.52:2389 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:53539 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA7FAF6DC  Ack: 0x2FE54ED4  Win: 0xFAB7  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/26-22:20:59.213643 192.168.24.52:2394 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:53810 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xBB6B034D  Ack: 0x360CB0E0  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/26-22:22:54.958821 192.168.24.52:2411 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:54065 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD91DEAE9  Ack: 0x3D1F322C  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/27-23:19:12.197160 192.168.24.52:1696 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:17096 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x96B8C677  Ack: 0x506F74EA  Win: 0xFB05  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/27-23:26:43.151506 192.168.24.52:1708 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:17553 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x215B1EFA  Ack: 0x6C952303  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
01/27-23:26:47.644397 192.168.24.52:1708 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:6097
***AP*** Seq: 0x6C954035  Ack: 0x215B2EEE  Win: 0xA6C  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/28-23:11:18.734735 192.168.24.52:2391 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:61185 IpLen:20 DgmLen:729 DF
***AP*** Seq: 0x394A9ADD  Ack: 0x70880F3B  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
01/30-23:07:27.749928 192.168.24.52:1469 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:54864 IpLen:20 DgmLen:1338 DF
***AP*** Seq: 0xE2BACC1A  Ack: 0xDCD5B3A6  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/03-22:49:51.144456 192.168.24.52:1709 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2123
***AP*** Seq: 0x50404A87  Ack: 0x91D01417  Win: 0xFAE3  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/03-22:50:14.279474 192.168.24.52:1708 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:10668
***AP*** Seq: 0x91030FB9  Ack: 0x4EB422A1  Win: 0xEE4  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
02/03-22:58:51.900176 192.168.24.52:1831 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:20268 IpLen:20 DgmLen:770 DF
***AP*** Seq: 0x5AF4EDD6  Ack: 0xB530949F  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/04-21:30:33.719243 192.168.24.52:1647 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1805
***AP*** Seq: 0xA3C80A54  Ack: 0x747E24AC  Win: 0x494  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/04-21:38:33.870516 192.168.24.52:1678 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1805
***AP*** Seq: 0xC0FB7C39  Ack: 0x8A7E50DD  Win: 0x494  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/04-22:27:14.201738 192.168.24.52:1772 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2877
***AP*** Seq: 0xA200B335  Ack: 0x7A3D6262  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/04-23:09:26.775371 192.168.24.52:1893 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1910
***AP*** Seq: 0x19F98EFF  Ack: 0x9476D233  Win: 0x519  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/05-23:47:44.246300 192.168.24.52:1100 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2672 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF38768DE  Ack: 0xE7738AB4  Win: 0xFB05  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
02/05-23:51:06.797086 192.168.24.52:1114 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3187 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xC0A84295  Ack: 0xF50590E9  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/11-21:42:51.928471 192.168.24.52:2426 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:64795 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2AE06995  Ack: 0x830FA306  Win: 0xFB05  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
02/11-21:49:19.536452 192.168.24.52:2427 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:65371 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB0CE431D  Ack: 0x9C4F208C  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/11-22:23:15.753891 192.168.24.52:2535 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1858
***AP*** Seq: 0x9B9D26BD  Ack: 0x1A01F968  Win: 0xFAC2  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/11-22:55:02.891651 192.168.24.52:2602 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2482
***AP*** Seq: 0x2C46B706  Ack: 0x946BB22E  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/11-22:55:39.500920 192.168.24.52:2603 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:4906
***AP*** Seq: 0xC5C0D00C  Ack: 0x970A42E1  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/11-22:58:27.013886 192.168.24.52:2609 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2481
***AP*** Seq: 0xDAC7B61F  Ack: 0xA12A593B  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/11-22:59:37.396729 192.168.24.52:2610 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3719
***AP*** Seq: 0xA59E16D2  Ack: 0x3E2DB2EA  Win: 0x6ED  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/11-23:00:14.139813 192.168.24.52:2615 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:6655
***AP*** Seq: 0xA75FFC15  Ack: 0xDE2ED387  Win: 0x908  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/11-23:01:34.351186 192.168.24.52:2616 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:7779
***AP*** Seq: 0xAC8A818F  Ack: 0xD972B261  Win: 0xA1D  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/11-23:03:32.178258 192.168.24.52:2625 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1960
***AP*** Seq: 0xB3CBDB09  Ack: 0x2F33AACA  Win: 0x517  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
02/11-23:04:42.577978 192.168.24.52:2631 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2031
***AP*** Seq: 0xB9A824D7  Ack: 0x4F503590  Win: 0x517  TcpLen: 20

[**] [119:16:1] (http_inspect) OVERSIZE CHUNK ENCODING [**]
02/11-23:20:15.868307 192.168.24.52:2667 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:3107
***AP*** Seq: 0xE8CBD7F6  Ack: 0x776877D2  Win: 0x1F4A  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/17-23:13:20.797295 192.168.24.52:1129 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3990 IpLen:20 DgmLen:544 DF
***AP*** Seq: 0x79B3B1  Ack: 0x675FF875  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/20-23:17:29.610201 192.168.24.52:1421 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:17490 IpLen:20 DgmLen:77 DF
***AP*** Seq: 0xA9384873  Ack: 0x1893893C  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/20-23:23:46.042570 192.168.24.52:1426 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:17893 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x616BF928  Ack: 0x2FF6B64E  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/21-23:17:21.227012 192.168.24.52:1414 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8964 IpLen:20 DgmLen:1086 DF
***AP*** Seq: 0x787B750D  Ack: 0x4C15AFEC  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/22-22:59:52.317606 192.168.24.52:1181 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7537 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xA9F9E5F5  Ack: 0x40BD39FF  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/22-23:33:59.533559 192.168.24.52:1355 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12437 IpLen:20 DgmLen:391 DF
***AP*** Seq: 0x74056ED5  Ack: 0xC0A6D158  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/22-23:38:56.248070 192.168.24.52:1366 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12657 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0xF6E2F015  Ack: 0xD37FE75A  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/22-23:39:32.600270 192.168.24.52:1367 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12695 IpLen:20 DgmLen:246 DF
***AP*** Seq: 0x16354131  Ack: 0xD4E23EAB  Win: 0xFA96  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/22-23:43:30.631896 192.168.24.52:1390 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:13227 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x982FE671  Ack: 0xE471F45D  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/25-23:15:36.727546 192.168.24.52:1745 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:28310 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x878A9F0A  Ack: 0x1CC952D7  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
04/27-22:12:06.396300 192.168.24.52:1219 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2616
***AP*** Seq: 0x9784C087  Ack: 0xA9ACDC17  Win: 0x2E10  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/27-22:16:24.438078 192.168.24.52:1221 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:16271 IpLen:20 DgmLen:735 DF
***AP*** Seq: 0x2DC1BD48  Ack: 0xA91E8254  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/28-22:35:51.850183 192.168.24.52:2840 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:44785 IpLen:20 DgmLen:1500 DF
***A**** Seq: 0x86F21478  Ack: 0x26AA27B8  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/29-22:46:39.765339 192.168.24.52:1396 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:15997 IpLen:20 DgmLen:1136 DF
***AP*** Seq: 0x1BB85B17  Ack: 0x85CCDE70  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/30-22:36:55.501268 192.168.24.52:1802 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:13801 IpLen:20 DgmLen:621 DF
***AP*** Seq: 0x65C8D927  Ack: 0x9670F3A6  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/30-22:40:30.401615 192.168.24.52:1806 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:13943 IpLen:20 DgmLen:676 DF
***AP*** Seq: 0xFAE4C85  Ack: 0xA3052B5C  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
04/30-22:42:17.768052 192.168.24.52:1807 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:14024 IpLen:20 DgmLen:963 DF
***AP*** Seq: 0x6BA14793  Ack: 0xAA4D51CC  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/02-22:15:50.436881 192.168.24.52:1953 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:44753 IpLen:20 DgmLen:1332 DF
***AP*** Seq: 0x9A0BA26E  Ack: 0xB17CD6E7  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/02-22:16:29.280563 192.168.24.52:1955 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:44847 IpLen:20 DgmLen:1353 DF
***AP*** Seq: 0x2B982D0E  Ack: 0xB43E1050  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/03-23:49:26.481519 192.168.24.52:1061 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1324 IpLen:20 DgmLen:1336 DF
***AP*** Seq: 0xB1D04AFC  Ack: 0x480027D0  Win: 0xFFFF  TcpLen: 20

Go to: previous range, next range, all alerts, overview page

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Sep 14 05:05:29 2010

192.168.24.52	Whois lookup at:	ARIN	RIPE	APNIC	Geektools
	DNS lookup at:	Amenesi	TRIUMF	Princeton
	More lookup links:	Dshield	Sam Spade