[***] Results from Oinkmaster started Wed Sep 28 20:00:14 2005 [***]
[+++] Added rules: [+++]
2002383 - BLEEDING-EDGE ATTACK RESPONSE Potential FTP Brute-Force attempt
(bleeding-attack_response.rules)
2002384 - BLEEDING-EDGE TROJAN BOT - potential misc bot commands
(bleeding-virus.rules)
2002385 - BLEEDING-EDGE TROJAN BOT - channel/topic reptile commands
(bleeding-virus.rules)
2002386 - BLEEDING-EDGE TROJAN BOT - channel/topic misc bot commands
(bleeding-virus.rules)
[///] Modified active rules: [///]
2000494 - BLEEDING-EDGE VIRUS Possible Atak.mm Worm Outbound
(bleeding-virus.rules)
2000561 - BLEEDING-EDGE VIRUS Possible Bagle.AI Worm Outbound
(bleeding-virus.rules)
2001292 - BLEEDING-EDGE VIRUS Possible Bagle.AI Worm (bleeding-virus.rules)
2002023 - BLEEDING-EDGE TROJAN IRC USER command (bleeding-virus.rules)
2002024 - BLEEDING-EDGE TROJAN IRC NICK command (bleeding-virus.rules)
2002031 - BLEEDING-EDGE TROJAN BOT - potential update/download
(bleeding-virus.rules)
2002382 - BLEEDING-EDGE EXPLOIT Wzdftpd SITE command arbitrary command
execution attempt (bleeding-exploit.rules)
[///] Modified inactive rules: [///]
2002363 - BLEEDING-EDGE TROJAN BOT - potential reptile commands
(bleeding-virus.rules)
[+++] Added non-rule lines: [+++]
-> Added to bleeding-attack_response.rules (1):
#by atomic-penguin
-> Added to bleeding-sid-msg.map (5):
2002382 || BLEEDING-EDGE EXPLOIT Wzdftpd SITE command arbitrary command
execution attempt || url,www.securiteam.com/exploits/5CP0R1PGUE.html ||
bugtraq,14935
2002383 || BLEEDING-EDGE ATTACK RESPONSE Potential FTP Brute-Force
attempt
2002384 || BLEEDING-EDGE TROJAN BOT - potential misc bot commands
2002385 || BLEEDING-EDGE TROJAN BOT - channel/topic reptile commands
2002386 || BLEEDING-EDGE TROJAN BOT - channel/topic misc bot commands
[---] Removed non-rule lines: [---]
-> Removed from bleeding-sid-msg.map (1):
2002382 || BLEEDING-EDGE EXPLOIT Wzdftpd SITE command arbitrary command
execution attempt || bugtraq,14935
-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
