[Silicon Defense logo]

SnortSnarf signature page

WEB-CGI newdesk access

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

3 alerts with this signature using input module SnortFileInput, with sources:

Earliest such alert at 21:29:54.287864 on 04/18/2003
Latest such alert at 19:48:18.278085 on 05/27/2003

WEB-CGI newdesk access 3 sources 1 destinations
Priority: 2Classification: access to a potentially vulnerable web application
[sid:1714]

Sources triggering this attack signature

Source# Alerts (sig)# Alerts (total)# Dsts (sig)# Dsts (total)
216.28.165.1811111
12.2.177.1901111
204.210.234.901111

Destinations receiving this attack signature

Destinations# Alerts (sig)# Alerts (total)# Srcs (sig)# Srcs (total)
192.168.1.6377703624

SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:48 2003