[Emerging-Sigs] RBN IP Addresses

[Matt Jonkman]

Adding to the RBN lists, thanks as always Jim!

Matt

James McQuaid wrote:
> I've updated http://doc.emergingthreats.net/pub/Main/SnortConfSamples/RussianBusinessNetworkIPs.txt
> 
> Here are the additional entries:
> 89.149.220.21/32    *.dolcevido.com, *.easyvideoaccess.com,
> *.online-malwarescanner.com
>                     89-149-220-21.internetserviceteam.com,
> dolcevido.com, easyvideoaccess.com
>                     online-malwarescanner.com
> 89.149.220.22/32    *.videovideoiditenah.com,
> 89-149-220-22.internetserviceteam.com
>                     videovideoiditenah.com, www.videovideoiditenah.com
> 
> These are Est domains; we have seen their name servers on other RBN IP
> addresses.
> 

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc