![[Silicon Defense logo]](../SDlogo.gif)
|
SnortSnarf signature pageWEB-IIS view source via translate headerSnortSnarf v021111.1 |
| Signature section (91123) | Top 20 source IPs | Top 20 dest IPs |
58 alerts with this signature using input module SnortFileInput, with sources:
Earliest such alert at 00:52:15.002880 on 05/02/2003
Latest such alert at 02:15:30.229948 on 06/11/2003
| WEB-IIS view source via translate header | 16 sources | 1 destinations |
| Priority: 2 | Classification: access to a potentially vulnerable web application | |
| [sid:1042] [arachNIDS:305] | ||
| Source | # Alerts (sig) | # Alerts (total) | # Dsts (sig) | # Dsts (total) |
| 129.137.203.234 | 11 | 11 | 1 | 1 |
| 129.137.185.125 | 10 | 10 | 1 | 1 |
| 144.13.120.66 | 7 | 7 | 1 | 1 |
| 67.162.149.169 | 7 | 7 | 1 | 1 |
| 129.137.91.78 | 5 | 5 | 1 | 1 |
| 129.137.204.172 | 3 | 3 | 1 | 1 |
| 129.137.186.208 | 3 | 3 | 1 | 1 |
| 24.87.96.216 | 2 | 2 | 1 | 1 |
| 12.217.238.13 | 2 | 2 | 1 | 1 |
| 129.137.194.128 | 2 | 2 | 1 | 1 |
| 217.35.41.34 | 1 | 1 | 1 | 1 |
| 151.204.211.128 | 1 | 1 | 1 | 1 |
| 129.142.34.137 | 1 | 1 | 1 | 1 |
| 216.221.81.96 | 1 | 1 | 1 | 1 |
| 24.201.63.54 | 1 | 1 | 1 | 1 |
| 24.210.203.121 | 1 | 1 | 1 | 1 |
| Destinations | # Alerts (sig) | # Alerts (total) | # Srcs (sig) | # Srcs (total) |
| 192.168.1.6 | 58 | 7770 | 16 | 624 |