[Snort-sigs] Bleedingsnort.com Daily Update

bleeding at ...2727... bleeding at ...2727...
Sun Sep 17 21:00:14 EDT 2006


[***] Results from Oinkmaster started Sun Sep 17 21:00:13 2006 [***]

[+++]          Added rules:          [+++]

 2003100 - BLEEDING-EDGE POLICY Porn-Sports-Gambling site designed to bypass restrictions (bleeding-policy.rules)
 2003101 - BLEEDING-EDGE VIRUS Win32.SMTP-Mailer SMTP Outbound v.2 (bleeding-virus.rules)


[///]     Modified active rules:     [///]

 2402000 - BLEEDING-EDGE DROP Dshield Block Listed Source (bleeding-dshield.rules)
 2403000 - BLEEDING-EDGE DROP Dshield Block Listed Source - BLOCKING (bleeding-dshield-BLOCK.rules)
 2410000 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 1)  (bleeding-botcc.rules)
 2410001 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 2)  (bleeding-botcc.rules)
 2410002 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 3)  (bleeding-botcc.rules)
 2410003 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 4)  (bleeding-botcc.rules)
 2410004 - BLEEDING-EDGE DROP Known Bot C&C Server Traffic (group 5)  (bleeding-botcc.rules)
 2411000 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 1) - BLOCKING SOURCE (bleeding-botcc-BLOCK.rules)
 2411001 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 2) - BLOCKING SOURCE (bleeding-botcc-BLOCK.rules)
 2411002 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 3) - BLOCKING SOURCE (bleeding-botcc-BLOCK.rules)
 2411003 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 4) - BLOCKING SOURCE (bleeding-botcc-BLOCK.rules)
 2411004 - BLEEDING-EDGE DROP Known Bot C&C Traffic (group 5) - BLOCKING SOURCE (bleeding-botcc-BLOCK.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-dshield-BLOCK.rules (2):
        # Rules to block Dshield identified Top Attackers (www.shield.org)
        # Please submit any feedback or ideas to bleeding at ...2727... or the bleeding-sigs mailing list

     -> Added to bleeding-dshield.rules (2):
        # Rules to block Dshield identified Top Attackers (www.shield.org)
        # Please submit any feedback or ideas to bleeding at ...2727... or the bleeding-sigs mailing list

     -> Added to bleeding-policy.rules (5):
        # Submitted 2006-09-17 by Mark Warren
        # This signature was designed to detect access to http://www.bodog.com
        # This website contains pornography, gambling, sports and sports related betting
        # The commercials for this website state that portions of the site were designed
        # to bypass security filters.

     -> Added to bleeding-sid-msg.map (2):
        2003100 || BLEEDING-EDGE POLICY Porn-Sports-Gambling site designed to bypass restrictions || url,www.bodog.com
        2003101 || BLEEDING-EDGE VIRUS Win32.SMTP-Mailer SMTP Outbound v.2 || url,research.sunbelt-software.com/threatdisplay.aspx?name=Win32.SMTP-Mailer&threatid=48095

     -> Added to bleeding-virus.rules (1):
        # Submitted 2006-09-17 by Russ McRee

[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-dshield-BLOCK.rules (6):
        # $Id: bleeding-dshield.rules $
        # Bleeding Snort DShield drop rules.
        #These are generated from the Dshield Block Lists at:
        #  http://feeds.dshield.org/block.txt
        # SID's are 2400000+ to avoid conflicts
        # Please submit any custom rules or ideas to bleeding at ...2727... or the snort-sigs mailing list

     -> Removed from bleeding-dshield.rules (6):
        # $Id: bleeding-dshield.rules $
        # Bleeding Snort DShield drop rules.
        #These are generated from the Dshield Block Lists at:
        #  http://feeds.dshield.org/block.txt
        # SID's are 2400000+ to avoid conflicts
        # Please submit any custom rules or ideas to bleeding at ...2727... or the snort-sigs mailing list





More information about the Snort-sigs mailing list