[Silicon Defense logo]

SnortSnarf alert page

Source: 10.53.96.1

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

17 such alerts found using input module SnortFileInput, with sources:
Earliest: 16:54:58.418010 on 05/23/2003
Latest: 14:38:12.644801 on 06/08/2003

1 different signatures are present for 10.53.96.1 as a source

There are 1 distinct destination IPs in the alerts of the type on this page.

10.53.96.1 Whois lookup at: ARIN RIPE APNIC Geektools
DNS lookup at: Amenesi TRIUMF Princeton
More lookup links: Dshield Sam Spade

[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
05/23-16:54:58.418010 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:17435 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:2797 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:37386 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
05/27-01:00:19.521905 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:63071 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:2797 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:15599 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
05/27-01:10:37.586222 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:16940 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:2797 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:15682 IpLen:20 DgmLen:106
Len: 78
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
05/28-00:26:17.845015 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:4278 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1030 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:28797 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
05/28-00:26:36.744592 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:4768 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1030 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:28800 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
05/28-00:36:55.392798 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:22523 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1030 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:33884 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
05/28-00:37:01.396977 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:22663 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1030 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:33896 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/01-19:23:01.044217 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:41068 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1030 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:31605 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/01-19:23:13.300008 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:41389 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1030 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:31607 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/06-14:47:54.946149 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:20241 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1027 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:10159 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/06-14:58:18.865252 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:37824 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1027 -> 10.52.11.251:161
UDP TTL:126 TOS:0x0 ID:14933 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/06-15:09:13.245821 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:56927 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1027 -> 10.52.11.251:161
UDP TTL:126 TOS:0x0 ID:16052 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/06-15:20:01.818508 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:10689 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1027 -> 10.52.11.251:161
UDP TTL:126 TOS:0x0 ID:17664 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/06-15:42:16.219639 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:51919 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1027 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:20303 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/08-14:02:38.834783 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:18295 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1030 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:15057 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/08-14:37:53.642858 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:20855 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1030 -> 10.52.11.251:161
UDP TTL:126 TOS:0x0 ID:19983 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
[**] [1:485:2] ICMP Destination Unreachable (Communication Administratively Prohibited) [**]
[Classification: Misc activity] [Priority: 3]
06/08-14:38:12.644801 10.53.96.1 -> 192.168.1.105
ICMP TTL:254 TOS:0x0 ID:21468 IpLen:20 DgmLen:56
Type:3 Code:13 DESTINATION UNREACHABLE: ADMINISTRATIVELY PROHIBITED,
PACKET FILTERED
** ORIGINAL DATAGRAM DUMP:
192.168.1.105:1030 -> 10.63.2.252:161
UDP TTL:126 TOS:0x0 ID:19986 IpLen:20 DgmLen:105
Len: 77
** END OF DUMP
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:52 2003