SnortSnarf alert page

Source: 192.168.24.52: #401-500

SnortSnarf v021111.1

Signature section (16810)

Top 20 source IPs

Top 20 dest IPs

Looking using input module SnortFileInput, with sources:

/var/log/snort/alert

Earliest: 21:49:18.543452 on 05/19/2010
Latest: 23:30:04.853646 on 05/25/2010

6 different signatures are present for 192.168.24.52 as a source

1 instances of (snort_decoder) WARNING: TCP Data Offset is less than 5!
4 instances of (http_inspect) DOUBLE DECODING ATTACK
12 instances of (http_inspect) OVERSIZE CHUNK ENCODING
32 instances of (http_inspect) OVERSIZE REQUEST-URI DIRECTORY
326 instances of (http_inspect) BARE BYTE UNICODE ENCODING
328 instances of (http_inspect) IIS UNICODE CODEPOINT ENCODING

There are 1 distinct destination IPs in the alerts of the type on this page.

192.168.24.52 Whois lookup at: ARIN RIPE APNIC Geektools

DNS lookup at: Amenesi TRIUMF Princeton

More lookup links: Dshield Sam Spade

Go to: previous range, next range, all alerts, overview page

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:49:18.543452 192.168.24.52:1208 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5863 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD62913F1  Ack: 0xDA4ADAD6  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:52:24.684766 192.168.24.52:1215 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6101 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x22ADFFAB  Ack: 0xE5B3525C  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:58:25.956489 192.168.24.52:1254 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:6939 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD44EAE31  Ack: 0xFC8E2031  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-21:59:49.577458 192.168.24.52:1255 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7326 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x75079794  Ack: 0x14760B0  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:08:27.161147 192.168.24.52:1268 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7846 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6FB8C256  Ack: 0x228610F9  Win: 0xFAA2  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:17:30.989885 192.168.24.52:1279 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8120 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x53020801  Ack: 0x456D5843  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:19:32.947979 192.168.24.52:1280 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8201 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4C39B461  Ack: 0x4B8AC0B1  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:23:05.382646 192.168.24.52:1286 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8751 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x75BD22D8  Ack: 0x5A013CCD  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:23:40.763755 192.168.24.52:1287 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9129 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xAB83DAC5  Ack: 0x5B7EA976  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:24:51.810916 192.168.24.52:1288 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9394 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xB38AD8DF  Ack: 0x6026234C  Win: 0xFB33  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/19-22:24:52.604420 192.168.24.52:1288 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9434 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xB38BB34F  Ack: 0x6026234C  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:26:11.672678 192.168.24.52:1289 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:9823 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x3B2C778E  Ack: 0x64B6FE5A  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:27:43.730764 192.168.24.52:1290 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:21701
***AP*** Seq: 0x6B9A86E8  Ack: 0xE09FE9E5  Win: 0xCA0E  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:29:53.648221 192.168.24.52:1296 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10322 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xC8D64AB2  Ack: 0x734AEC72  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:30:33.505025 192.168.24.52:1297 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10635 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xF96C8501  Ack: 0x753A02CB  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:31:08.422764 192.168.24.52:1298 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:10918 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x373EAABA  Ack: 0x7737D6E4  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:32:25.729200 192.168.24.52:1299 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11220 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD005F1C8  Ack: 0x7D5B65C8  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:33:26.083251 192.168.24.52:1303 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11427 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x43AE147F  Ack: 0x811556A6  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:34:56.829033 192.168.24.52:1304 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11726 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD219CF08  Ack: 0x866B7F08  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:35:25.049008 192.168.24.52:1306 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11963 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4D229CB7  Ack: 0x87A559EB  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:42:00.712329 192.168.24.52:1309 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12105 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6A90CB50  Ack: 0xA02E93B7  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:42:47.955820 192.168.24.52:1310 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12312 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDAD4F381  Ack: 0xA436F619  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:44:33.050620 192.168.24.52:1312 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12775 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x7F839845  Ack: 0xAA11950B  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:46:51.105425 192.168.24.52:1315 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12978 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6CF04AF9  Ack: 0xB25BE286  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:47:13.615111 192.168.24.52:1315 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:13299 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6CF6B506  Ack: 0xB25C01F7  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/19-22:49:48.526562 192.168.24.52:1321 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:13932 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA2831773  Ack: 0xBEA85506  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/19-22:50:07.596786 192.168.24.52:1321 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:978
***AP*** Seq: 0xA28334D2  Ack: 0xBEA99B8A  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/20-09:47:51.573285 192.168.24.52:1547 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:29581 IpLen:20 DgmLen:191 DF
***AP*** Seq: 0xBAD359D6  Ack: 0x6FD82F5D  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-09:55:40.295061 192.168.24.52:1582 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:6504
***AP*** Seq: 0x8CC29E19  Ack: 0x5710E62C  Win: 0x5C20  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-10:20:34.095860 192.168.24.52:1722 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1454
***AP*** Seq: 0x937D489F  Ack: 0xEB4E3CD9  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:25:23.716231 192.168.24.52:1071 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1164 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA49CFEBE  Ack: 0xB5DAAD4B  Win: 0xFB34  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/20-21:25:24.535285 192.168.24.52:1071 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1246 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xA49EBE8A  Ack: 0xB5DAAD4B  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:27:21.157081 192.168.24.52:1072 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1435 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8544804  Ack: 0xBCAD8084  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:28:28.900973 192.168.24.52:1074 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1720 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x74A12B63  Ack: 0xC163E302  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:30:32.904852 192.168.24.52:1075 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:1958 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xC8589669  Ack: 0xC912E621  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:33:48.488710 192.168.24.52:1076 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2236 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xEAC56A2F  Ack: 0xD51F333E  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:38:13.200369 192.168.24.52:1097 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2858 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xFFA614D7  Ack: 0xE5EE1E32  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:41:21.985528 192.168.24.52:1098 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3180 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x11946FF  Ack: 0xF157DF29  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:44:33.250962 192.168.24.52:1101 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3414 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xC83F0EFE  Ack: 0xFD76C220  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:45:17.480500 192.168.24.52:1102 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4033 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x674F758B  Ack: 0x30A0CE  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:47:41.534819 192.168.24.52:1108 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4457 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8BCC123B  Ack: 0x9D82F49  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:49:30.708704 192.168.24.52:1109 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:4807 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xD6ABE21  Ack: 0x1091EEBB  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:50:15.345564 192.168.24.52:1110 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5001 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x3427FD20  Ack: 0x13517CFA  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/20-21:50:57.191653 192.168.24.52:1111 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5293 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xAD205D  Ack: 0x15EB64F9  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:50:58.326558 192.168.24.52:1111 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:13218
***AP*** Seq: 0x15EB64F9  Ack: 0xAD4E61  Win: 0x8310  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/20-21:51:46.358112 192.168.24.52:1113 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5520 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xC9F7A87C  Ack: 0x191429DD  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/20-21:51:47.436746 192.168.24.52:1113 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:13269
***AP*** Seq: 0x191429DD  Ack: 0xC9F7D6B3  Win: 0x8310  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/20-22:12:20.015514 192.168.24.52:1148 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7515 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x333F2004  Ack: 0x6681E725  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/20-22:16:12.429392 192.168.24.52:1153 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7618 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x3D5F4718  Ack: 0x74F2D52D  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/20-22:17:17.297022 192.168.24.52:1154 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:7730 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x1BD4486E  Ack: 0x78DF78FC  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/20-23:38:39.439670 192.168.24.52:1187 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:8395 IpLen:20 DgmLen:976 DF
***AP*** Seq: 0x1FE30037  Ack: 0xAC9695B2  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-22:53:51.841558 192.168.24.52:1209 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5592 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDCED0176  Ack: 0x38FAB624  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-22:54:59.464373 192.168.24.52:1214 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:5882 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x2CF1375B  Ack: 0x3C0697DC  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-22:57:40.592212 192.168.24.52:1221 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11123 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x71DF523  Ack: 0x47C27CAC  Win: 0xFB34  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/21-22:57:41.493466 192.168.24.52:1221 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11293 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x7219009  Ack: 0x47C27CAC  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:03:32.570270 192.168.24.52:1262 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:11941 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xADA1AB9  Ack: 0x5C5F4ABB  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:04:32.853816 192.168.24.52:1263 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12192 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xA844CC85  Ack: 0x603B22C3  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:09:52.241898 192.168.24.52:1273 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12544 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x166FE70B  Ack: 0x743EFEB3  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:12:22.348727 192.168.24.52:1280 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:12847 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x41A49F54  Ack: 0x7E42D72B  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:16:31.049676 192.168.24.52:1287 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:13721 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x8E2937CF  Ack: 0x8D0081C2  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:20:16.120430 192.168.24.52:1319 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:14638 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xFBE5E090  Ack: 0x9B562C31  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:22:23.826753 192.168.24.52:1320 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:14895 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDF9744BB  Ack: 0xA4664BAF  Win: 0xFB33  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/21-23:22:24.686216 192.168.24.52:1320 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:15037 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xDF9A46B9  Ack: 0xA4664BAF  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:23:51.632526 192.168.24.52:1321 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:15112 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x80C3F4BA  Ack: 0xA9DACA06  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:25:18.468531 192.168.24.52:1322 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:27293
***AP*** Seq: 0xAED26EB5  Ack: 0x746AEF92  Win: 0xBF22  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:26:08.625379 192.168.24.52:1323 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:15655 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x6159219A  Ack: 0xB17C87C8  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:26:58.127909 192.168.24.52:1324 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:15951 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4829E023  Ack: 0xB555380D  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:27:43.897413 192.168.24.52:1325 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:16313 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xE0E7C11E  Ack: 0xB8351C3C  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:28:34.022901 192.168.24.52:1326 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:16558 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x2ABBC129  Ack: 0xBBF69534  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:32:34.394623 192.168.24.52:1328 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:16828 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x588DDD7D  Ack: 0xCB1CD192  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:34:17.330222 192.168.24.52:1331 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:17080 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x237AA93F  Ack: 0xD12B8181  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:35:42.842892 192.168.24.52:1332 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:17215 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x1387800C  Ack: 0xD6383772  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:37:28.977352 192.168.24.52:1333 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:17467 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xE538103C  Ack: 0xDD68E8FB  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/21-23:38:12.149690 192.168.24.52:1334 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:17686 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9C6ED485  Ack: 0xE06D5E2B  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/21-23:40:29.342129 192.168.24.52:1341 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:18055 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x4D8CF5A7  Ack: 0xE863EE49  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/21-23:44:54.730927 192.168.24.52:1384 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19127 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xF8F71E4D  Ack: 0xF8E44100  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/21-23:45:53.281597 192.168.24.52:1386 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19269 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x264E3C30  Ack: 0xFCB0BC3E  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:51:43.793182 192.168.24.52:1389 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19450 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x3CE3B385  Ack: 0x12DD7D99  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:52:49.004462 192.168.24.52:1392 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19708 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0x83DBF922  Ack: 0x17533603  Win: 0xFB33  TcpLen: 20

[**] [119:15:1] (http_inspect) OVERSIZE REQUEST-URI DIRECTORY [**]
05/21-23:52:49.814578 192.168.24.52:1392 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19771 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x83DD512C  Ack: 0x17533603  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:54:02.238817 192.168.24.52:1393 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:19990 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x8559400  Ack: 0x1B8D7F96  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:55:15.419261 192.168.24.52:1398 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:20252 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x795C608E  Ack: 0x1FF87DB8  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/21-23:58:36.339251 192.168.24.52:1399 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:20565 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x35C1B863  Ack: 0x2CFE7B29  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/22-00:01:04.640712 192.168.24.52:1409 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:21040 IpLen:20 DgmLen:1438 DF
***AP*** Seq: 0xFBE09902  Ack: 0x35C2AA06  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/22-00:01:50.842204 192.168.24.52:1410 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:21240 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0xC80F29FC  Ack: 0x38065505  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/22-00:02:20.399801 192.168.24.52:1411 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:21529 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x69A270D7  Ack: 0x3A23496C  Win: 0xFB33  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/22-00:03:37.000765 192.168.24.52:1412 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:21835 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x30B3CC2F  Ack: 0x3F7CB534  Win: 0xFB33  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/22-00:07:05.454257 192.168.24.52:1416 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:22052 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x9E0E6F3D  Ack: 0x4CF09363  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/22-00:10:01.924539 192.168.24.52:1421 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:22286 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x23A3FB70  Ack: 0x57EB25CF  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/22-22:14:05.789124 192.168.24.52:1154 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3781 IpLen:20 DgmLen:1053 DF
***AP*** Seq: 0xCB242B97  Ack: 0xD8E641D8  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/22-23:45:54.082455 192.168.24.52:1609 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1396
***AP*** Seq: 0xE2443D06  Ack: 0x3292C4E3  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/22-23:57:43.790458 192.168.24.52:1623 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1396
***AP*** Seq: 0xA089B1C2  Ack: 0x604D69C3  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/23-00:00:37.742383 192.168.24.52:1629 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1397
***AP*** Seq: 0x662637A6  Ack: 0x6A1C679F  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/23-00:12:54.090695 192.168.24.52:1647 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1399
***AP*** Seq: 0xD7084F94  Ack: 0x999D6314  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/23-00:29:05.831449 192.168.24.52:1670 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:2076
***AP*** Seq: 0x17F33E9F  Ack: 0xD5FB80E7  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/23-07:21:39.720707 192.168.24.52:1124 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1841
***AP*** Seq: 0x81F11434  Ack: 0xE92680C1  Win: 0xFB34  TcpLen: 20

[**] [119:4:1] (http_inspect) BARE BYTE UNICODE ENCODING [**]
05/23-07:35:15.854249 192.168.24.52:1143 -> 192.168.24.11:80
TCP TTL:240 TOS:0x10 ID:0 IpLen:20 DgmLen:1564
***AP*** Seq: 0x1B8BD1D  Ack: 0x1CADE22C  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/23-22:52:13.142393 192.168.24.52:2273 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:20371 IpLen:20 DgmLen:1438 DF
***A**** Seq: 0x353DB366  Ack: 0x9E5DCAEA  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/24-23:02:17.022198 192.168.24.52:1138 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:3842 IpLen:20 DgmLen:1076 DF
***AP*** Seq: 0xBAF7AD5B  Ack: 0xF9A6046C  Win: 0xFB34  TcpLen: 20

[**] [119:7:1] (http_inspect) IIS UNICODE CODEPOINT ENCODING [**]
05/25-23:30:04.853646 192.168.24.52:1143 -> 192.168.24.11:80
TCP TTL:128 TOS:0x0 ID:2833 IpLen:20 DgmLen:1308 DF
***AP*** Seq: 0x5B85AC22  Ack: 0x97B55754  Win: 0xFB34  TcpLen: 20

Go to: previous range, next range, all alerts, overview page

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Sep 14 05:05:29 2010

192.168.24.52	Whois lookup at:	ARIN	RIPE	APNIC	Geektools
	DNS lookup at:	Amenesi	TRIUMF	Princeton
	More lookup links:	Dshield	Sam Spade