[Snort-sigs] Bleeding Edge Threats Daily Signature Changes

bleeding at ...3254... bleeding at ...3254...
Fri Oct 5 20:00:22 EDT 2007


[***] Results from Oinkmaster started Sat Oct  6 00:00:22 2007 [***]

[///]     Modified active rules:     [///]

 2006398 - BLEEDING-EDGE TROJAN Socks666 Checkin Packet (bleeding-virus.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-sid-msg.map (5):
        2006398 || BLEEDING-EDGE TROJAN Socks666 Checkin Packet || url,doc.bleedingthreats.net/2006396
        2500525 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (526) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500526 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (527) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510525 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (526) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510526 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (527) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts

[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-sid-msg.map (1):
        2006398 || BLEEDING-EDGE ROJAN Socks666 Checkin Packet || url,doc.bleedingthreats.net/2006396





More information about the Snort-sigs mailing list