[Snort-sigs] Emerging Threats Daily Signature Changes

emerging at ...3335... emerging at ...3335...
Fri Jan 11 17:00:07 EST 2008


[***] Results from Oinkmaster started Fri Jan 11 17:00:07 2008 [***]

[+++]          Added rules:          [+++]

 2007749 - BLEEDING-EDGE MALWARE host-domain-lookup.com spyware related Checkin (bleeding-malware.rules)
 2007750 - BLEEDING-EDGE MALWARE host-domain-lookup.com spyware related Start Report (bleeding-malware.rules)
 2007751 - BLEEDING-EDGE TROJAN Saturn Proxy Initial Outbound Checkin (404.txt) (bleeding-virus.rules)
 2007752 - BLEEDING-EDGE TROJAN Saturn Proxy Checkin Response (bleeding-virus.rules)
 2007753 - BLEEDING-EDGE TROJAN Saturn Proxy C&C Activity (bleeding-virus.rules)
 2007754 - BLEEDING-EDGE POLICY Gold VIP Club Casino Client in Use (bleeding-policy.rules)
 2007755 - BLEEDING-EDGE TROJAN Trojan-Downloader.Win32.Small.hkp Checkin via HTTP (bleeding-virus.rules)
 2007756 - BLEEDING-EDGE TROJAN PWS-LDPinch posting data (2) (bleeding-virus.rules)


[///]     Modified active rules:     [///]

 2003195 - BLEEDING-EDGE POLICY Unusual number of DNS No Such Name Responses (bleeding-policy.rules)
 2007746 - BLEEDING-EDGE POLICY Gold VIP Club Casino Client in Use (bleeding-policy.rules)


[+++]      Added non-rule lines:     [+++]

     -> Added to bleeding-policy.rules (2):
        #  App on port 20000 for this casino stuff. Not malicious, but likely not allowed in most environments
        #  App on port 20000 for this casino stuff. Not malicious, but likely not allowed in most environments

     -> Added to bleeding-sid-msg.map (8):
        2007749 || BLEEDING-EDGE MALWARE host-domain-lookup.com spyware related Checkin
        2007750 || BLEEDING-EDGE MALWARE host-domain-lookup.com spyware related Start Report
        2007751 || BLEEDING-EDGE TROJAN Saturn Proxy Initial Outbound Checkin (404.txt)
        2007752 || BLEEDING-EDGE TROJAN Saturn Proxy Checkin Response
        2007753 || BLEEDING-EDGE TROJAN Saturn Proxy C&C Activity
        2007754 || BLEEDING-EDGE POLICY Gold VIP Club Casino Client in Use
        2007755 || BLEEDING-EDGE TROJAN Trojan-Downloader.Win32.Small.hkp Checkin via HTTP
        2007756 || BLEEDING-EDGE TROJAN PWS-LDPinch posting data (2)

     -> Added to bleeding-virus.rules (2):
        #Matt Jonkman, Trojan-Downloader.Win32.Small.hkp
        #this is a C&C, may or may not be unique to each variant, need to learn more about it...

[---]     Removed non-rule lines:    [---]

     -> Removed from bleeding-policy.rules (1):
        #  App on port 2000 for this casino stuff. Not malicious, but likely not allowed in most environments

     -> Removed from bleeding-sid-msg.map (126):
        2500001 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (2) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500002 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (3) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500003 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (4) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500004 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (5) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500005 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (6) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500006 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (7) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500007 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (8) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500008 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (9) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500009 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (10) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500010 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (11) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500011 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (12) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500012 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (13) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500013 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (14) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500014 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (15) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500015 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (16) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500016 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (17) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500017 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (18) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500018 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (19) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500019 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (20) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500020 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (21) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500021 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (22) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500022 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (23) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500023 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (24) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500024 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (25) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500025 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (26) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500026 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (27) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500027 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (28) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500028 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (29) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500029 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (30) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500030 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (31) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500031 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (32) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500032 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (33) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500033 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (34) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500034 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (35) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500035 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (36) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500036 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (37) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500037 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (38) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500038 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (39) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500039 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (40) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500040 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (41) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500041 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (42) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500042 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (43) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500043 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (44) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500044 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (45) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500045 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (46) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500046 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (47) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500047 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (48) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500048 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (49) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500049 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (50) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500050 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (51) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500051 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (52) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500052 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (53) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500053 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (54) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500054 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (55) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500055 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (56) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500056 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (57) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500057 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (58) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500058 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (59) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500059 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (60) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500060 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (61) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500061 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (62) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500062 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (63) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2500063 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic (64) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510001 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (2) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510002 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (3) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510003 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (4) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510004 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (5) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510005 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (6) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510006 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (7) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510007 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (8) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510008 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (9) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510009 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (10) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510010 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (11) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510011 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (12) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510012 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (13) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510013 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (14) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510014 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (15) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510015 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (16) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510016 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (17) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510017 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (18) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510018 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (19) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510019 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (20) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510020 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (21) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510021 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (22) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510022 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (23) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510023 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (24) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510024 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (25) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510025 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (26) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510026 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (27) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510027 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (28) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510028 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (29) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510029 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (30) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510030 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (31) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510031 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (32) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510032 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (33) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510033 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (34) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510034 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (35) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510035 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (36) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510036 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (37) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510037 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (38) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510038 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (39) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510039 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (40) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510040 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (41) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510041 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (42) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510042 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (43) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510043 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (44) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510044 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (45) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510045 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (46) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510046 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (47) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510047 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (48) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510048 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (49) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510049 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (50) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510050 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (51) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510051 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (52) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510052 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (53) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510053 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (54) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510054 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (55) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510055 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (56) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510056 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (57) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510057 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (58) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510058 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (59) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510059 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (60) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510060 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (61) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510061 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (62) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510062 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (63) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts
        2510063 || BLEEDING-EDGE COMPROMISED Known Compromised or Hostile Host Traffic - BLOCKING (64) || url,doc.bleedingthreats.net/bin/view/Main/CompromisedHosts





More information about the Snort-sigs mailing list