Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | [Snort-sigs] Emerging Threats Daily Signature Changes |
|---|---|
| Date: | Thu, 17 Jan 2008 17:00:08 -0500 (EST) |
[***] Results from Oinkmaster started Thu Jan 17 17:00:08 2008 [***]
[+++] Added rules: [+++]
2007762 - BLEEDING-EDGE POLICY Majestic-12 Spider Bot User-Agent Inbound
(MJ12bot) (bleeding-policy.rules)
2007763 - BLEEDING-EDGE POLICY CBS Streaming Video (bleeding-policy.rules)
2007764 - BLEEDING-EDGE POLICY NBC Streaming Video (bleeding-policy.rules)
[///] Modified active rules: [///]
2406000 - BLEEDING-EDGE RBN Known Russian Business Network Traffic - Hosting
Nets (bleeding-rbn.rules)
2406001 - BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Individual Hosts (bleeding-rbn.rules)
2406002 - BLEEDING-EDGE RBN Known Russian Business Network Traffic - Chinese
Nets (bleeding-rbn.rules)
2406003 - BLEEDING-EDGE RBN Known Russian Business Network Traffic - Known
Trojan C&Cs (bleeding-rbn.rules)
2406004 - BLEEDING-EDGE RBN Known Russian Business Network Traffic - Central
American Nets (bleeding-rbn.rules)
2406005 - BLEEDING-EDGE RBN Known Russian Business Network Monitored Domains
(1) (bleeding-rbn.rules)
2406006 - BLEEDING-EDGE RBN Known Russian Business Network Monitored Domains
(2) (bleeding-rbn.rules)
2406007 - BLEEDING-EDGE RBN Known Russian Business Network Monitored Domains
(3) (bleeding-rbn.rules)
2406008 - BLEEDING-EDGE RBN Known Russian Business Network Monitored Domains
(4) (bleeding-rbn.rules)
2407000 - BLEEDING-EDGE RBN Known Russian Business Network Traffic - Hosting
Nets - BLOCKING (bleeding-rbn-BLOCK.rules)
2407001 - BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Individual Hosts - BLOCKING (bleeding-rbn-BLOCK.rules)
2407002 - BLEEDING-EDGE RBN Known Russian Business Network Traffic - Chinese
Nets - BLOCKING (bleeding-rbn-BLOCK.rules)
2407003 - BLEEDING-EDGE RBN Known Russian Business Network Traffic - Known
Trojan C&Cs - BLOCKING (bleeding-rbn-BLOCK.rules)
2407004 - BLEEDING-EDGE RBN Known Russian Business Network Traffic - Central
American Nets (bleeding-rbn-BLOCK.rules)
2407005 - BLEEDING-EDGE RBN Known Russian Business Network Monitored Domains -
BLOCKING (1) (bleeding-rbn-BLOCK.rules)
2407006 - BLEEDING-EDGE RBN Known Russian Business Network Monitored Domains -
BLOCKING (2) (bleeding-rbn-BLOCK.rules)
2407007 - BLEEDING-EDGE RBN Known Russian Business Network Monitored Domains -
BLOCKING (3) (bleeding-rbn-BLOCK.rules)
2407008 - BLEEDING-EDGE RBN Known Russian Business Network Monitored Domains -
BLOCKING (4) (bleeding-rbn-BLOCK.rules)
[+++] Added non-rule lines: [+++]
-> Added to bleeding-policy.rules (1):
#by cunningpike
-> Added to bleeding-rbn-BLOCK.rules (7):
# $Id: bleeding-rbn-BLOCK.rules $
# Emerging Threats RBN rules.
# More information available at
doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
# Please submit any feedback or ideas to emerging@emergingthreats.net
or the emerging-sigs mailing list
# Copyright (c) 2003-2008, Emerging Threats
# VERSION 26
# Updated 2008-01-16 09:06:08
-> Added to bleeding-rbn.rules (7):
# $Id: bleeding-rbn.rules $
# Emerging Threats RBN rules.
# More information available at
doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
# Please submit any feedback or ideas to emerging@emergingthreats.net
or the emerging-sigs mailing list
# Copyright (c) 2003-2008, Emerging Threats
# VERSION 26
# Updated 2008-01-16 09:06:08
-> Added to bleeding-sid-msg.map (13):
2007762 || BLEEDING-EDGE POLICY Majestic-12 Spider Bot User-Agent
Inbound (MJ12bot) || url,www.majestic12.co.uk/
2007763 || BLEEDING-EDGE POLICY CBS Streaming Video
2007764 || BLEEDING-EDGE POLICY NBC Streaming Video
2406000 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Hosting Nets || url,doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
2406001 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Individual Hosts ||
url,doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
2406002 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Chinese Nets || url,doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
2406003 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Known Trojan C&Cs ||
url,doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
2406004 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Central American Nets ||
url,doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
2407000 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Hosting Nets - BLOCKING ||
url,doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
2407001 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Individual Hosts - BLOCKING ||
url,doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
2407002 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Chinese Nets - BLOCKING ||
url,doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
2407003 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Known Trojan C&Cs - BLOCKING ||
url,doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
2407004 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Central American Nets ||
url,doc.emergingthreats.net/bin/view/Main/RussianBusinessNetwork
[---] Removed non-rule lines: [---]
-> Removed from bleeding-rbn-BLOCK.rules (5):
# More information available at
doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
# Please submit any feedback or ideas to bleeding@bleedingthreats.net
or the bleeding-sigs mailing list
# Copyright (c) 2003-2007, Bleeding Edge Threats
# VERSION 25
# Updated 2008-01-09 17:42:11
-> Removed from bleeding-rbn.rules (5):
# More information available at
doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
# Please submit any feedback or ideas to bleeding@bleedingthreats.net
or the bleeding-sigs mailing list
# Copyright (c) 2003-2007, Bleeding Edge Threats
# VERSION 25
# Updated 2008-01-09 17:42:11
-> Removed from bleeding-sid-msg.map (10):
2406000 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Hosting Nets || url,doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
2406001 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Individual Hosts ||
url,doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
2406002 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Chinese Nets || url,doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
2406003 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Known Trojan C&Cs ||
url,doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
2406004 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Central American Nets ||
url,doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
2407000 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Hosting Nets - BLOCKING ||
url,doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
2407001 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Individual Hosts - BLOCKING ||
url,doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
2407002 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Chinese Nets - BLOCKING ||
url,doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
2407003 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Known Trojan C&Cs - BLOCKING ||
url,doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
2407004 || BLEEDING-EDGE RBN Known Russian Business Network Traffic -
Central American Nets ||
url,doc.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork
[+] Added files (consider updating your snort.conf to include them if needed):
[+]
-> bleeding-sid-msg.map.txt
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
| Previous by Date: | [Snort-sigs] Emerging Threats Daily Signature Changes, emerging |
|---|---|
| Next by Date: | [Snort-sigs] Emerging Threats Daily Signature Changes, emerging |
| Previous by Thread: | [Snort-sigs] Emerging Threats Daily Signature Changes, emerging |
| Next by Thread: | [Snort-sigs] Emerging Threats Daily Signature Changes, emerging |
| Indexes: | [Date] [Thread] [Top] [All Lists] |