SnortSnarf signature page

WEB-MISC Invalid HTTP Version String

SnortSnarf v021111.1

Signature section (16810)

Top 20 source IPs

Top 20 dest IPs

144 alerts with this signature using input module SnortFileInput, with sources:

/var/log/snort/alert

Earliest such alert at 22:51:09.411512 on 09/17/2009
Latest such alert at 16:41:30.878689 on 08/30/2010

WEB-MISC Invalid HTTP Version String	54 sources	1 destinations
Priority: 2	Classification: Detection of a non-standard protocol or event
[sid:2570] [BUGTRAQ:9809]

Sources triggering this attack signature

Source	# Alerts (sig)	# Alerts (total)	# Dsts (sig)	# Dsts (total)
221.187.5.138	13	13	1	1
136.187.19.99	13	23	1	1
130.54.208.201	11	25	1	1
202.23.125.131	11	11	1	1
210.188.189.65	10	10	1	1
130.54.208.193	9	698	1	1
210.249.184.60	6	6	1	1
210.2.158.3	6	6	1	1
210.128.52.4	4	4	1	1
202.246.252.97	4	4	1	1
198.209.42.9	4	4	1	1
195.150.76.184	4	5	1	1
66.249.66.39	2	22	1	1
202.249.200.11	2	2	1	1
220.96.213.7	2	4	1	1
217.83.150.86	2	2	1	1
205.188.116.74	2	2	1	1
58.13.255.194	2	2	1	1
219.176.196.101	2	2	1	1
64.121.61.54	1	1	1	1
202.32.132.4	1	1	1	1
67.184.234.224	1	2	1	1
126.112.32.226	1	1	1	1
124.84.133.232	1	1	1	1
202.166.172.251	1	1	1	1
80.80.111.200	1	1	1	1
58.1.110.250	1	1	1	1
151.198.75.34	1	1	1	1
218.219.14.142	1	1	1	1
196.20.38.10	1	1	1	1
221.114.175.253	1	1	1	1
213.236.139.130	1	2	1	1
24.225.178.217	1	1	1	1
220.104.237.254	1	1	1	1
58.188.73.204	1	1	1	1
210.168.228.162	1	1	1	1
71.192.139.21	1	1	1	1
83.167.112.1	1	1	1	1
218.117.11.54	1	1	1	1
87.206.88.41	1	1	1	1
163.143.94.112	1	1	1	1
217.83.133.72	1	1	1	1
150.162.181.200	1	2	1	1
200.88.46.58	1	1	1	1
80.35.163.52	1	1	1	1
125.203.97.17	1	2	1	1
222.8.39.56	1	2	1	1
58.188.73.27	1	1	1	1
200.47.37.1	1	2	1	1
58.88.124.9	1	1	1	1
87.185.175.162	1	1	1	1
60.38.168.71	1	1	1	1
205.188.117.68	1	1	1	1
210.251.71.137	1	1	1	1

Destinations receiving this attack signature

Destinations	# Alerts (sig)	# Alerts (total)	# Srcs (sig)	# Srcs (total)
192.168.24.11	144	16803	54	935

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Sep 14 05:05:17 2010