![[Silicon Defense logo]](../SDlogo.gif)
|
SnortSnarf signature pageIMAP fetch overflow attemptSnortSnarf v021111.1 |
| Signature section (16810) | Top 20 source IPs | Top 20 dest IPs |
470 alerts with this signature using input module SnortFileInput, with sources:
Earliest such alert at 17:30:25.524878 on 09/18/2009
Latest such alert at 09:46:42.816591 on 08/06/2010
| IMAP fetch overflow attempt | 11 sources | 1 destinations |
| Priority: 2 | Classification: Misc Attack | |
| [sid:3070] [BUGTRAQ:11775] | ||
| Source | # Alerts (sig) | # Alerts (total) | # Dsts (sig) | # Dsts (total) |
| 130.54.208.193 | 428 | 698 | 1 | 1 |
| 62.153.90.225 | 18 | 18 | 1 | 1 |
| 62.153.90.230 | 10 | 16 | 1 | 1 |
| 203.180.88.108 | 4 | 15 | 1 | 1 |
| 62.153.90.228 | 3 | 3 | 1 | 1 |
| 203.180.88.6 | 2 | 9 | 1 | 1 |
| 62.153.90.232 | 1 | 1 | 1 | 1 |
| 202.221.174.244 | 1 | 2 | 1 | 1 |
| 70.166.192.152 | 1 | 1 | 1 | 1 |
| 131.112.174.57 | 1 | 6 | 1 | 1 |
| 203.180.17.80 | 1 | 9 | 1 | 1 |
| Destinations | # Alerts (sig) | # Alerts (total) | # Srcs (sig) | # Srcs (total) |
| 192.168.24.11 | 470 | 16803 | 11 | 935 |