![[Silicon Defense logo]](../SDlogo.gif)
|
SnortSnarf signature pageSERVER-WEBAPP GPON Router authentication bypass and command injection attemptSnortSnarf v021111.1 |
| Signature section (614) | Top 20 source IPs | Top 20 dest IPs |
49 alerts with this signature using input module SnortFileInput, with sources:
Earliest such alert at 14:59:52.288820 on 09/24/2019
Latest such alert at 20:43:13.449779 on 09/19/2020
| SERVER-WEBAPP GPON Router authentication bypass and command injection attempt | 49 sources | 1 destinations |
| Priority: 1 | Classification: Web Application Attack | |
| [sid:46624] [CVE:2018-10562] | ||
| Source | # Alerts (sig) | # Alerts (total) | # Dsts (sig) | # Dsts (total) |
| 218.21.171.194 | 1 | 1 | 1 | 1 |
| 180.127.114.174 | 1 | 1 | 1 | 1 |
| 223.149.253.148 | 1 | 1 | 1 | 1 |
| 111.43.223.19 | 1 | 1 | 1 | 1 |
| 182.57.210.165 | 1 | 1 | 1 | 1 |
| 182.219.86.118 | 1 | 1 | 1 | 1 |
| 36.113.196.139 | 1 | 1 | 1 | 1 |
| 115.52.244.181 | 1 | 1 | 1 | 1 |
| 31.146.129.174 | 1 | 1 | 1 | 1 |
| 91.234.62.17 | 1 | 1 | 1 | 1 |
| 222.244.252.34 | 1 | 1 | 1 | 1 |
| 223.155.81.11 | 1 | 1 | 1 | 1 |
| 222.247.180.104 | 1 | 1 | 1 | 1 |
| 222.142.238.178 | 1 | 1 | 1 | 1 |
| 61.2.151.222 | 1 | 1 | 1 | 1 |
| 49.115.64.149 | 1 | 1 | 1 | 1 |
| 162.212.115.158 | 1 | 1 | 1 | 1 |
| 79.101.58.72 | 1 | 1 | 1 | 1 |
| 91.234.62.242 | 1 | 1 | 1 | 1 |
| 115.97.67.12 | 1 | 1 | 1 | 1 |
| 197.50.215.155 | 1 | 1 | 1 | 1 |
| 27.7.198.19 | 1 | 1 | 1 | 1 |
| 116.75.70.206 | 1 | 1 | 1 | 1 |
| 182.113.203.95 | 1 | 1 | 1 | 1 |
| 61.163.128.65 | 1 | 1 | 1 | 1 |
| 222.247.2.196 | 1 | 1 | 1 | 1 |
| 115.99.221.202 | 1 | 1 | 1 | 1 |
| 202.83.45.19 | 1 | 1 | 1 | 1 |
| 177.223.58.162 | 1 | 1 | 1 | 1 |
| 222.244.167.128 | 1 | 1 | 1 | 1 |
| 203.212.251.173 | 1 | 1 | 1 | 1 |
| 114.234.159.218 | 1 | 1 | 1 | 1 |
| 125.99.237.229 | 1 | 1 | 1 | 1 |
| 117.90.42.46 | 1 | 1 | 1 | 1 |
| 222.247.249.26 | 1 | 1 | 1 | 1 |
| 66.38.90.20 | 1 | 1 | 1 | 1 |
| 182.123.241.94 | 1 | 1 | 1 | 1 |
| 94.43.139.142 | 1 | 1 | 1 | 1 |
| 49.81.99.137 | 1 | 1 | 1 | 1 |
| 175.11.215.159 | 1 | 1 | 1 | 1 |
| 116.114.95.201 | 1 | 1 | 1 | 1 |
| 118.250.154.36 | 1 | 1 | 1 | 1 |
| 115.49.146.96 | 1 | 1 | 1 | 1 |
| 111.40.111.202 | 1 | 1 | 1 | 1 |
| 203.212.237.85 | 1 | 1 | 1 | 1 |
| 91.234.62.165 | 1 | 1 | 1 | 1 |
| 91.234.62.31 | 1 | 1 | 1 | 1 |
| 177.93.67.226 | 1 | 1 | 1 | 1 |
| 223.155.153.82 | 1 | 1 | 1 | 1 |
| Destinations | # Alerts (sig) | # Alerts (total) | # Srcs (sig) | # Srcs (total) |
| 192.168.0.38 | 49 | 610 | 49 | 343 |