![[Silicon Defense logo]](../SDlogo.gif)
|
SnortSnarf signature pageWEB-MISC http directory traversalSnortSnarf v021111.1 |
| Signature section (16810) | Top 20 source IPs | Top 20 dest IPs |
38 alerts with this signature using input module SnortFileInput, with sources:
Earliest such alert at 20:57:40.434518 on 11/04/2009
Latest such alert at 12:30:31.128428 on 06/01/2010
| WEB-MISC http directory traversal | 18 sources | 1 destinations |
| Priority: 2 | Classification: Attempted Information Leak | |
| [sid:1113] [arachNIDS:297] | ||
| Source | # Alerts (sig) | # Alerts (total) | # Dsts (sig) | # Dsts (total) |
| 130.54.208.193 | 9 | 698 | 1 | 1 |
| 200.192.140.144 | 7 | 7 | 1 | 1 |
| 203.144.144.164 | 5 | 5 | 1 | 1 |
| 66.249.65.113 | 3 | 15 | 1 | 1 |
| 222.13.35.52 | 1 | 1 | 1 | 1 |
| 200.47.37.1 | 1 | 2 | 1 | 1 |
| 84.54.26.249 | 1 | 3 | 1 | 1 |
| 213.236.139.130 | 1 | 2 | 1 | 1 |
| 122.16.181.4 | 1 | 1 | 1 | 1 |
| 210.236.178.117 | 1 | 1 | 1 | 1 |
| 24.22.15.237 | 1 | 1 | 1 | 1 |
| 66.249.66.39 | 1 | 22 | 1 | 1 |
| 212.23.137.114 | 1 | 1 | 1 | 1 |
| 219.89.202.230 | 1 | 1 | 1 | 1 |
| 86.72.164.104 | 1 | 1 | 1 | 1 |
| 213.16.133.2 | 1 | 1 | 1 | 1 |
| 69.73.187.141 | 1 | 1 | 1 | 1 |
| 131.112.174.57 | 1 | 6 | 1 | 1 |
| Destinations | # Alerts (sig) | # Alerts (total) | # Srcs (sig) | # Srcs (total) |
| 192.168.24.11 | 38 | 16803 | 18 | 935 |