![[Silicon Defense logo]](../SDlogo.gif)
|
SnortSnarf signature pageWEB-MISC bad HTTP/1.1 request, Potentially worm attackSnortSnarf v021111.1 |
| Signature section (91123) | Top 20 source IPs | Top 20 dest IPs |
3 alerts with this signature using input module SnortFileInput, with sources:
Earliest such alert at 08:28:49.547817 on 04/24/2003
Latest such alert at 20:23:57.831377 on 06/08/2003
| WEB-MISC bad HTTP/1.1 request, Potentially worm attack | 3 sources | 1 destinations |
| Priority: 2 | Classification: access to a potentially vulnerable web application | |
| [url:securityresponse.symantec.com/avcenter/security/Content/2002.09.13.html] [sid:1881] | ||
| Source | # Alerts (sig) | # Alerts (total) | # Dsts (sig) | # Dsts (total) |
| 206.98.253.78 | 1 | 1 | 1 | 1 |
| 210.164.186.94 | 1 | 1 | 1 | 1 |
| 203.94.78.130 | 1 | 1 | 1 | 1 |
| Destinations | # Alerts (sig) | # Alerts (total) | # Srcs (sig) | # Srcs (total) |
| 192.168.1.6 | 3 | 7770 | 3 | 624 |