[Emerging-Sigs] [Fwd: alert: New event: ET RBN Known Russian Business Network Monitored Domains (30)]

[Matt Jonkman]

Got it, thanks. There was an overlapping supernet.

Matt

SECNAP Network Security wrote:
> same ip on two lists.
> 
> 
> -------- Original Message --------
> Subject: 	alert: New event: ET RBN Known Russian Business Network 
> Monitored Domains (29)
> Date: 	Wed, 23 Apr 2008 07:11:27 -0400 (EDT)
> From: 	SECNAP Alert <security at secnap.com>
> Reply-To: 	security at secnap.com
> To: 	security-alert at scanner.secnap.net
> 
> 
> 
> 04/23-07:11:27 UDP 85.255.112.242:53 
> <http://scanner.hackertrap.net/base/base_stat_ipaddr.php?ip=85.255.112.242> 
> --> 204.89.241.129:58918 
> <http://scanner.hackertrap.net/base/base_stat_ipaddr.php?ip=204.89.241.129>
> [1:2406033:42] <http://www.snort.org/pub-bin/sigs.cgi?sid=2406033> ET 
> RBN Known Russian Business Network Monitored Domains (29)
> [Classification: Misc Attack] [Priority: 2]
> 
> -------- Original Message --------
> Subject: 	alert: New event: ET RBN Known Russian Business Network 
> Monitored Domains (30)
> Date: 	Wed, 23 Apr 2008 07:11:27 -0400 (EDT)
> From: 	SECNAP Alert <security at secnap.com>
> Reply-To: 	security at secnap.com
> To: 	security-alert at scanner.secnap.net
> 
> 
> 
> 04/23-07:11:27 UDP 85.255.112.242:53 
> <http://scanner.hackertrap.net/base/base_stat_ipaddr.php?ip=85.255.112.242> 
> --> 204.89.241.129:58918 
> <http://scanner.hackertrap.net/base/base_stat_ipaddr.php?ip=204.89.241.129>
> [1:2406034:42] <http://www.snort.org/pub-bin/sigs.cgi?sid=2406034> ET 
> RBN Known Russian Business Network Monitored Domains (30)
> [Classification: Misc Attack] [Priority: 2]
> ------------------------------------------------------------------------
> This email has been scanned and certified safe by SpammerTrap™.
> For Information please see www.spammertrap.com <http://www.spammertrap.com>
> ------------------------------------------------------------------------
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at emergingthreats.net
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc