[Silicon Defense logo]

SnortSnarf summary page

Top 20 source IPs

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

This page provides summary information about alerts acquired using input module SnortFileInput, with sources:

The most active source IPs are shown. Rank is determined by the number of alerts with that IP as the source. Within a rank, IPs are sorted by # of signatures, then by IP number.

RankTotal # AlertsSource IP# Signatures triggeredDestinations involved
rank #149361 alerts192.168.1.65 signatures(19 destination IPs)
rank #227816 alerts192.168.1.72 signatures192.168.1.1
rank #34196 alerts192.168.1.47 signatures(5 destination IPs)
rank #4569 alerts128.242.172.2422 signatures192.168.1.101
rank #5326 alerts24.209.39.2467 signatures192.168.1.6
rank #6306 alerts24.209.105.1567 signatures192.168.1.6
rank #7286 alerts128.10.252.102 signatures192.168.1.7, 192.168.1.92
rank #8275 alerts66.196.65.241 signatures192.168.1.6
rank #9250 alerts24.209.174.06 signatures192.168.1.6
rank #10213 alerts24.209.219.1626 signatures192.168.1.6
rank #11156 alerts128.121.10.672 signatures192.168.1.101
rank #12154 alerts207.172.2.1411 signatures192.168.1.91
rank #13136 alerts24.209.191.917 signatures192.168.1.6
rank #14134 alerts24.209.196.2542 signatures192.168.1.6
rank #15129 alerts24.209.36.1947 signatures192.168.1.6
rank #16125 alerts24.209.98.1482 signatures192.168.1.6
rank #17121 alerts66.196.65.351 signatures192.168.1.6
rank #18120 alerts24.209.26.1982 signatures192.168.1.6
rank #1999 alerts24.209.11.986 signatures192.168.1.6
rank #2081 alerts24.209.219.956 signatures192.168.1.6
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:09:58 2003