SnortSnarf summary pageTop 20 source IPsSnortSnarf v021111.1 |
Signature section (91123) | Top 20 source IPs | Top 20 dest IPs |
This page provides summary information about alerts acquired using input module SnortFileInput, with sources:
The most active source IPs are shown. Rank is determined by the number of alerts with that IP as the source. Within a rank, IPs are sorted by # of signatures, then by IP number.
Rank | Total # Alerts | Source IP | # Signatures triggered | Destinations involved |
rank #1 | 49361 alerts | 192.168.1.6 | 5 signatures | (19 destination IPs) |
rank #2 | 27816 alerts | 192.168.1.7 | 2 signatures | 192.168.1.1 |
rank #3 | 4196 alerts | 192.168.1.4 | 7 signatures | (5 destination IPs) |
rank #4 | 569 alerts | 128.242.172.242 | 2 signatures | 192.168.1.101 |
rank #5 | 326 alerts | 24.209.39.246 | 7 signatures | 192.168.1.6 |
rank #6 | 306 alerts | 24.209.105.156 | 7 signatures | 192.168.1.6 |
rank #7 | 286 alerts | 128.10.252.10 | 2 signatures | 192.168.1.7, 192.168.1.92 |
rank #8 | 275 alerts | 66.196.65.24 | 1 signatures | 192.168.1.6 |
rank #9 | 250 alerts | 24.209.174.0 | 6 signatures | 192.168.1.6 |
rank #10 | 213 alerts | 24.209.219.162 | 6 signatures | 192.168.1.6 |
rank #11 | 156 alerts | 128.121.10.67 | 2 signatures | 192.168.1.101 |
rank #12 | 154 alerts | 207.172.2.141 | 1 signatures | 192.168.1.91 |
rank #13 | 136 alerts | 24.209.191.91 | 7 signatures | 192.168.1.6 |
rank #14 | 134 alerts | 24.209.196.254 | 2 signatures | 192.168.1.6 |
rank #15 | 129 alerts | 24.209.36.194 | 7 signatures | 192.168.1.6 |
rank #16 | 125 alerts | 24.209.98.148 | 2 signatures | 192.168.1.6 |
rank #17 | 121 alerts | 66.196.65.35 | 1 signatures | 192.168.1.6 |
rank #18 | 120 alerts | 24.209.26.198 | 2 signatures | 192.168.1.6 |
rank #19 | 99 alerts | 24.209.11.98 | 6 signatures | 192.168.1.6 |
rank #20 | 81 alerts | 24.209.219.95 | 6 signatures | 192.168.1.6 |