[Emerging-Sigs] RBN fake codec and security software sites
James McQuaid
jim.mcquaid at gmail.com
Sun May 11 19:12:52 EDT 2008
I added these fake codec and security software sites to
http://doc.emergingthreats.net/pub/Main/SnortConfSamples/RussianBusinessNetworkIPs.txt
today:
69.50.166.130/32 ns2.antivirprotect.com
69.50.166.139/32 mail.antivirprotect.com
69.50.190.3/32 ns2.dictionarysearch.net
69.50.190.6/32 dictionarysearch.net, ns1.dictionarysearch.net
69.50.190.14/32 antivirprotect.com
85.255.116.211/32 safehomesite.com
85.255.118.34/32 toolbarusage.com
85.255.118.212/32 secureprior.com
85.255.118.214/32 protectalerts.com
85.255.118.245/32 dns404rule.com
85.255.120.110/32 flwplayer.com
216.255.179.243/32 asearchflame.com, asearchpool.com, asearchreview.com
explorertool.net, gateietool.com, gatetofind.com
getnewfiles.com, homepagerestart.com, ieservicegate.com
iqsearches.com, linkietool.com, renewfiles.com
searchinggate.com, searchthruweb.com, shareownfiles.com
trysearchhere.com
--
James McQuaid
http://www.jamesmcquaid.com
More information about the Emerging-sigs
mailing list