[Emerging-Sigs] RBN IP Addresses

James McQuaid jim.mcquaid at gmail.com
Wed May 7 21:43:19 EDT 2008


I've updated http://doc.emergingthreats.net/pub/Main/SnortConfSamples/RussianBusinessNetworkIPs.txt

Here are the additional entries:
89.149.220.21/32    *.dolcevido.com, *.easyvideoaccess.com,
*.online-malwarescanner.com
                    89-149-220-21.internetserviceteam.com,
dolcevido.com, easyvideoaccess.com
                    online-malwarescanner.com
89.149.220.22/32    *.videovideoiditenah.com,
89-149-220-22.internetserviceteam.com
                    videovideoiditenah.com, www.videovideoiditenah.com

These are Est domains; we have seen their name servers on other RBN IP
addresses.

-- 
James McQuaid
http://www.jamesmcquaid.com


More information about the Emerging-sigs mailing list