[Emerging-Sigs] [Fwd: alert: New event: ET COMPROMISED Known Compromised or Hostile Host Traffic (25)]

Matt Jonkman jonkman at jonkmans.com
Sun Jan 11 09:39:22 EST 2009


Hmmm, I'm not seeing that, but it may have been in yesterday's list and
gone today. What rev were you on there?

Matt

Michael Scheidell wrote:
> ip 202.103.0.117
> <https://success-nj.hackertrap.net/base/base_stat_ipaddr.php?ip=202.103.0.117>
> 
> is on list 25 and 26.
> 
> <https://success-nj.hackertrap.net/base/base_stat_ipaddr.php?ip=202.103.0.117>
> 
> -- 
> Michael Scheidell, CTO
> Phone: 561-999-5000, x 1259
>> *| *SECNAP Network Security Corporation
> 
>     * Certified SNORT Integrator
>     * King of Spam Filters, SC Magazine 2008
>     * Information Security Award 2008, Info Security Products Guide
>     * CRN Magazine Top 40 Emerging Security Vendors
> 
> 
> ------------------------------------------------------------------------
> 
> This email has been scanned and certified safe by SpammerTrap®.
> For Information please see www.secnap.com/products/spammertrap/
> <http://www.secnap.com/products/spammertrap/>
> 
> ------------------------------------------------------------------------
> 
> 
> ------------------------------------------------------------------------
> 
> Subject:
> alert: New event: ET COMPROMISED Known Compromised or Hostile Host
> Traffic (25)
> From:
> Success-AZ Alert <security at successfactors.com>
> Date:
> Sun, 11 Jan 2009 03:31:29 -0700 (MST)
> To:
> security-alert at success-az.hackertrap.net
> 
> To:
> security-alert at success-az.hackertrap.net
> 
> 
> 01/11-03:31:01 UDP 202.103.0.117:53
> <https://success-az.hackertrap.net/base/base_stat_ipaddr.php?ip=202.103.0.117>
> --> 10.4.30.205:51107
> <https://success-az.hackertrap.net/base/base_stat_ipaddr.php?ip=10.4.30.205>
> [1:2500024:1389] <http://www.snort.org/pub-bin/sigs.cgi?sid=2500024> ET
> COMPROMISED Known Compromised or Hostile Host Traffic (25)
> [Classification: Misc Attack] [Priority: 2]
> ------------------------------------------------------------------------
> 
> Subject:
> alert: New event: ET COMPROMISED Known Compromised or Hostile Host
> Traffic (26)
> From:
> Success-nj Alert <security at successfactors.com>
> Date:
> Sun, 11 Jan 2009 05:29:38 -0500 (EST)
> To:
> security-alert at success-nj.hackertrap.net
> 
> To:
> security-alert at success-nj.hackertrap.net
> 
> 
> 01/11-05:15:30 UDP 202.103.0.117:53
> <https://success-nj.hackertrap.net/base/base_stat_ipaddr.php?ip=202.103.0.117>
> --> 170.224.103.142:50813
> <https://success-nj.hackertrap.net/base/base_stat_ipaddr.php?ip=170.224.103.142>
> [1:2500025:1391] <http://www.snort.org/pub-bin/sigs.cgi?sid=2500025> ET
> COMPROMISED Known Compromised or Hostile Host Traffic (26)
> [Classification: Misc Attack] [Priority: 2]
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at emergingthreats.net
> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs

-- 
--------------------------------------------
Matthew Jonkman
Emerging Threats
Phone 765-429-0398
Fax 312-264-0205
http://www.emergingthreats.net
--------------------------------------------

PGP: http://www.jonkmans.com/mattjonkman.asc




More information about the Emerging-sigs mailing list