![[Silicon Defense logo]](../SDlogo.gif)
|
SnortSnarf signature pageSERVER-WEBAPP Wordpress timthumb.php webshot source attack attemptSnortSnarf v021111.1 |
| Signature section (933) | Top 20 source IPs | Top 20 dest IPs |
22 alerts with this signature using input module SnortFileInput, with sources:
Earliest such alert at 07:41:47.825177 on 07/25/2021
Latest such alert at 07:06:20.090853 on 09/12/2021
| SERVER-WEBAPP Wordpress timthumb.php webshot source attack attempt | 19 sources | 1 destinations |
| Priority: 1 | Classification: Web Application Attack | |
| [url:cxsecurity.com/issue/WLB-2014060134] [sid:31356] | ||
| Source | # Alerts (sig) | # Alerts (total) | # Dsts (sig) | # Dsts (total) |
| 103.11.209.146 | 3 | 6 | 1 | 1 |
| 117.18.179.32 | 2 | 2 | 1 | 1 |
| 175.158.124.107 | 1 | 2 | 1 | 1 |
| 193.253.233.163 | 1 | 1 | 1 | 1 |
| 118.111.168.230 | 1 | 2 | 1 | 1 |
| 118.237.181.191 | 1 | 1 | 1 | 1 |
| 123.176.158.247 | 1 | 2 | 1 | 1 |
| 24.116.216.11 | 1 | 1 | 1 | 1 |
| 221.16.20.2 | 1 | 1 | 1 | 1 |
| 124.141.28.58 | 1 | 2 | 1 | 1 |
| 185.43.149.23 | 1 | 1 | 1 | 1 |
| 220.213.210.218 | 1 | 1 | 1 | 1 |
| 133.208.222.45 | 1 | 1 | 1 | 1 |
| 122.233.234.24 | 1 | 1 | 1 | 1 |
| 221.132.101.247 | 1 | 2 | 1 | 1 |
| 126.90.59.69 | 1 | 2 | 1 | 1 |
| 42.148.255.70 | 1 | 2 | 1 | 1 |
| 151.20.30.116 | 1 | 1 | 1 | 1 |
| 124.150.236.51 | 1 | 2 | 1 | 1 |
| Destinations | # Alerts (sig) | # Alerts (total) | # Srcs (sig) | # Srcs (total) |
| 192.168.0.38 | 22 | 929 | 19 | 557 |