[Emerging-Sigs] same ip on two lists: [Fwd: alert: New event: ET RBN Known Russian Business Network Monitored Domains (9)]

[Matt Jonkman]

Thanks, had some overlap in a supernet. All cleared out.

Matt

Michael Scheidell wrote:
> same ip on two lists.
> 
> 
> -------- Original Message --------
> Subject: 	alert: New event: ET RBN Known Russian Business Network 
> Monitored Domains (9)
> Date: 	Tue, 13 May 2008 04:20:32 -0400 (EDT)
> From: 	SECNAP Alert <security at secnap.com>
> Reply-To: 	security at secnap.com
> To: 	security-alert at scanner.secnap.net
> 
> 
> 
> 05/13-04:20:28 UDP 58.65.239.66:53 
> <http://scanner.hackertrap.net/base/base_stat_ipaddr.php?ip=58.65.239.66> 
> --> 204.89.241.173:53237 
> <http://scanner.hackertrap.net/base/base_stat_ipaddr.php?ip=204.89.241.173>
> [1:2406013:43] <http://www.snort.org/pub-bin/sigs.cgi?sid=2406013> ET 
> RBN Known Russian Business Network Monitored Domains (9)
> [Classification: Misc Attack] [Priority: 2]
> 
> 
> 05/13-04:20:28 UDP 58.65.239.66:53 
> <http://scanner.hackertrap.net/base/base_stat_ipaddr.php?ip=58.65.239.66> 
> --> 204.89.241.173:53237 
> <http://scanner.hackertrap.net/base/base_stat_ipaddr.php?ip=204.89.241.173>
> [1:2406015:43] <http://www.snort.org/pub-bin/sigs.cgi?sid=2406015> ET 
> RBN Known Russian Business Network Monitored Domains (11)
> [Classification: Misc Attack] [Priority: 2]
> -- 
> Michael Scheidell, CTO
> Main: 561-999-5000, Office: 561-939-7259
>  > *| *SECNAP Network Security Corporation
> Winner 2008 Technosium hot company award.
> www.technosium.com/hotcompanies/ <http://www.technosium.com/hotcompanies/>
> 
> 
> ------------------------------------------------------------------------
> 
> This email has been scanned and certified safe by SpammerTrap®.
> For Information please see www.spammertrap.com <http://www.spammertrap.com>
> 
> ------------------------------------------------------------------------
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at emergingthreats.net
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc