Snort Application

The following page provides details on domains, networks, IPs, hosting services, and content delivery networks used by Snort.

Description

Snort is an open-source, free and lightweight network intrusion detection system (NIDS) software for Linux and Windows to detect emerging threats.

Category	Cybersecurity
Web Link	Snort - Home Page

Application Domains

The application domains data shown here is available in our Netify Data Feeds solution. The data is accessible via our IP API as well as downloadable datasets.

Learn More »

Domains

Primary Domains

snort.org

Primary Domains are owned and managed by the application vendor.

Platform Domains are often provided by hosting providers, content delivery networks, SaaS platforms and other third parties. It is important to identify these domains for DNS filters and hostname blocklists.

Platform Domains

Amazon S3

{hidden}.amazonaws.com

Core Networks

Applications are sometimes deployed on partner networks, parent company networks, or regional hosting providers. The following is a sample of Snort IP addresses deployed on this type of network.

Network	PoP	Category	Location	IP
Google	Core Network	Business	Colombia	2800:3f0:4005:401::2013
Google	Core Network	Business	Colombia	2800:3f0:4005:40a::2013
Google	Core Network	Business	Argentina	2800:3f0:4002:809::2013

SaaS - Software-as-a-Service

Applications often use various third party platforms for providing authentication, advertising, cybersecurity, e-mail services and more. The Software-as-a-Service (SaaS) platforms used by Snort are summarized below.

SaaS	# of IPs
SendGrid	15

Service	Category	Sample IP	IP Count
SendGrid	Mail	54.250.209.117	15 IPs

Hosting

Cloud hosting vendors like AWS and Microsoft Azure provide cloud-based computing and network resources to deliver applications. The hosting platforms used by Snort are summarized below by geographical points-of-presence (PoP). Each PoP can host many IPs to deliver an application.

Cloud Hosts	# of IPs
Amazon S3	2936
Google Hosted	365

Host	PoP	Location	IPs
Amazon S3	Ashburn	United States	2936 IPs
Google Hosted	Core	Finland	11 IPs
Google Hosted	Core	Singapore	12 IPs
Google Hosted	Core	United States	66 IPs
Google Hosted	Core	Chile	7 IPs
Google Hosted	Core	Australia	12 IPs
Google Hosted	Core	India	22 IPs
Google Hosted	Core	Canada	11 IPs
Google Hosted	Core	Hong Kong	19 IPs
Google Hosted	Core	Sweden	8 IPs
Google Hosted	Core	Israel	7 IPs
Google Hosted	Core	United Kingdom	6 IPs
Google Hosted	Core	France	24 IPs
Google Hosted	Core	Spain	13 IPs
Google Hosted	Core	Netherlands	3 IPs
Google Hosted	Core	Italy	7 IPs
Google Hosted	Core	Hungary	9 IPs
Google Hosted	Core	Germany	23 IPs
Google Hosted	Core	Poland	10 IPs
Google Hosted	Core	Bulgaria	13 IPs
Google Hosted	Core	Taiwan	5 IPs
Google Hosted	Core	Oman	5 IPs
Google Hosted	Core	Thailand	4 IPs
Google Hosted	Core	Brazil	15 IPs
Google Hosted	Core	Czechia	4 IPs
Google Hosted	Core	Japan	7 IPs
Google Hosted	Johannesburg	South Africa	2 IPs
Google Hosted	Johannesburg	South Africa	2 IPs
Google Hosted	Johannesburg	South Africa	1 IP
Google Hosted	Core	Argentina	6 IPs
Google Hosted	Core	Mexico	3 IPs
Google Hosted	Core	Philippines	1 IP
Google Hosted	Core	Malaysia	3 IPs
Google Hosted	Core	Colombia	1 IP
Google Hosted	Core	Switzerland	3 IPs
Google Hosted	Core	Kenya	7 IPs
Google Hosted	Core	South Africa	8 IPs
Google Hosted	Core	United Arab Emirates	4 IPs
Google Hosted	Core	Norway	1 IP

Content Delivery Networks - CDNs

In order to get information to end users more quickly, many applications are distributed from multiple geographical points-of-presence (PoPs) using Content Delivery Networks (CDNs). Each PoP can host many IPs to deliver an application. A sample IP is provided.

Take special note of CDNs that use Anycast technology. Anycast makes it possible to route a single IP address to a variety of different geographic locations. In other words, one global Anycast IP is hosted in multiple geographic locations.