![[Silicon Defense logo]](../SDlogo.gif)
|
SnortSnarf signature pageATTACK RESPONSES 403 ForbiddenSnortSnarf v021111.1 |
| Signature section (91123) | Top 20 source IPs | Top 20 dest IPs |
29 alerts with this signature using input module SnortFileInput, with sources:
Earliest such alert at 11:11:54.474181 on 04/27/2003
Latest such alert at 23:05:09.371977 on 06/16/2003
| ATTACK RESPONSES 403 Forbidden | 1 sources | 18 destinations |
| Priority: 2 | Classification: Attempted Information Leak | |
| [sid:1201] | ||
| Source | # Alerts (sig) | # Alerts (total) | # Dsts (sig) | # Dsts (total) |
| 192.168.1.6 | 29 | 49361 | 18 | 19 |
| Destinations | # Alerts (sig) | # Alerts (total) | # Srcs (sig) | # Srcs (total) |
| 211.157.36.6 | 4 | 4 | 1 | 1 |
| 209.237.238.161 | 3 | 3 | 1 | 1 |
| 63.148.99.247 | 3 | 3 | 1 | 1 |
| 211.157.36.4 | 3 | 3 | 1 | 1 |
| 194.1.191.34 | 2 | 2 | 1 | 1 |
| 192.234.167.242 | 2 | 2 | 1 | 1 |
| 24.209.29.187 | 1 | 1 | 1 | 1 |
| 65.27.144.125 | 1 | 1 | 1 | 1 |
| 64.158.138.48 | 1 | 1 | 1 | 1 |
| 66.196.72.95 | 1 | 1 | 1 | 1 |
| 62.190.226.172 | 1 | 1 | 1 | 1 |
| 209.144.45.46 | 1 | 1 | 1 | 1 |
| 12.2.177.190 | 1 | 1 | 1 | 1 |
| 129.137.89.83 | 1 | 1 | 1 | 1 |
| 209.237.238.172 | 1 | 1 | 1 | 1 |
| 192.136.70.8 | 1 | 1 | 1 | 1 |
| 216.39.48.30 | 1 | 1 | 1 | 1 |
| 128.16.10.130 | 1 | 1 | 1 | 1 |