[Silicon Defense logo]

SnortSnarf signature page

WEB-MISC robots.txt access

SnortSnarf v021111.1

Signature section (91123)Top 20 source IPsTop 20 dest IPs

786 alerts with this signature using input module SnortFileInput, with sources:

Earliest such alert at 18:28:16.317715 on 04/17/2003
Latest such alert at 08:22:04.099641 on 06/17/2003

WEB-MISC robots.txt access 69 sources 1 destinations
Priority: 2Classification: access to a potentially vulnerable web application
[url:cgi.nessus.org/plugins/dump.php3?id=10302] [sid:1852]

Sources triggering this attack signature

Source# Alerts (sig)# Alerts (total)# Dsts (sig)# Dsts (total)
66.196.65.2427527511
66.196.65.3512112111
216.39.48.30373711
216.39.48.64181811
216.39.48.84171711
209.237.238.174161611
216.39.48.94161611
216.39.48.114141411
209.237.238.173141411
66.196.73.77141411
216.39.48.44121211
209.237.238.172121211
216.39.50.24111111
216.39.48.13101011
209.237.238.161101011
216.39.48.104101011
216.39.48.749911
216.39.48.549911
209.237.238.1759911
216.39.48.249911
216.39.50.748811
209.237.238.1588811
209.237.238.1598811
216.39.50.1147711
216.39.50.647711
216.39.50.847711
216.39.50.547711
216.39.48.336611
216.39.48.46611
216.39.50.335511
216.39.50.945511
12.148.209.1985511
209.237.238.1604411
216.39.50.134411
216.39.50.1044411
216.39.48.2074411
64.210.196.1983311
64.68.82.343311
64.68.82.363311
216.39.50.442211
64.68.82.162211
66.27.55.142211
66.77.73.1492211
66.230.140.662211
66.77.73.642211
66.147.154.32211
65.214.36.1152211
64.68.82.392211
64.68.82.251111
64.68.82.261111
64.68.82.791111
67.68.242.1581111
216.239.46.1401111
216.239.46.1341111
64.68.82.521111
209.237.238.1621111
66.237.60.231111
64.68.82.141111
66.196.65.131111
64.158.138.481111
216.239.46.821111
66.77.73.2091111
193.155.74.661111
80.58.5.441111
64.68.82.461111
216.39.50.1541111
65.214.36.1141111
64.68.82.371111
64.68.82.561111

Destinations receiving this attack signature

Destinations# Alerts (sig)# Alerts (total)# Srcs (sig)# Srcs (total)
192.168.1.6786777069624
SnortSnarf brought to you courtesy of Silicon Defense
Authors: Jim Hoagland and Stuart Staniford
See also the Snort Page by Marty Roesch
Page generated at Tue Jun 17 09:03:47 2003