[Silicon Defense logo]

SnortSnarf signature page

(http_inspect) BARE BYTE UNICODE ENCODING

SnortSnarf v021111.1

Signature section (16810)Top 20 source IPsTop 20 dest IPs

432 alerts with this signature using input module SnortFileInput, with sources:

Earliest such alert at 00:50:14.218041 on 09/20/2009
Latest such alert at 23:24:06.051254 on 09/12/2010

(http_inspect) BARE BYTE UNICODE ENCODING 51 sources 1 destinations
Priority: N/AClassification: N/A

Sources triggering this attack signature

Source# Alerts (sig)# Alerts (total)# Dsts (sig)# Dsts (total)
192.168.24.5232670311
192.168.24.51203411
121.93.134.232101011
124.25.91.99101011
130.54.208.193569811
64.15.155.505511
192.168.24.534411
130.54.208.20132511
146.197.243.163311
220.24.212.282211
220.96.213.72411
125.195.45.1402211
220.102.251.552211
214.13.149.101111
121.115.115.2481111
218.228.125.1421111
222.5.137.1521111
128.141.41.2281111
218.183.212.801111
61.116.175.951111
148.233.159.241111
58.3.142.2121111
216.32.84.621111
72.232.67.2441111
222.1.135.2131111
217.83.143.1021111
84.110.241.1631111
210.191.216.2091111
218.228.125.1481111
217.83.185.2411111
202.219.51.1611111
210.168.56.821111
201.66.86.241111
125.173.117.1881111
216.9.250.61111
60.34.11.2121111
222.8.39.561211
202.212.223.1231111
133.11.95.991111
219.66.135.1551111
131.112.174.571611
211.135.155.271111
61.90.228.1061111
60.46.165.1231111
195.14.65.1571111
124.110.60.751211
216.32.84.611111
72.232.67.2431111
61.196.158.61111
58.70.15.2051111
200.223.48.781111

Destinations receiving this attack signature

Destinations# Alerts (sig)# Alerts (total)# Srcs (sig)# Srcs (total)
192.168.24.114321680351935
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Sep 14 05:05:17 2010