[Emerging-Sigs] Compromised Rules Update
Matt Jonkman
jonkman at jonkmans.com
Mon May 5 13:39:33 EDT 2008
http://www.emergingthreats.net/rules/emerging-compromised.rules
Added a new significant source of data to the compromised ruleset. Have
a very good anonymous source of Fast Flux IPs to roll into there.
Good set to use, but as always make sure you're updating frequently.
These IPs are generally hostile for at the LEAST 48 hours. But even if
you don't update that often, these are likely ones you'll not want to
talk to for more than 48 hours later...
Thanks to our source!
Matt
--
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------
PGP: http://www.jonkmans.com/mattjonkman.asc
More information about the Emerging-sigs
mailing list