From r.fulton at auckland.ac.nz Thu Oct 1 01:04:47 2009 From: r.fulton at auckland.ac.nz (Russell Fulton) Date: Thu, 1 Oct 2009 18:04:47 +1300 Subject: [Emerging-Sigs] FP ?? ET TROJAN Possible Armitage Loader Request References: <200909300515.n8U5F4B4014424@localhost.localdomain> Message-ID: <4AA47CA8-3794-475F-8658-BBD1889980C1@auckland.ac.nz> I've seen several of these to this site from this referer and I can't decide of these are 'legit' ad requests or trojan traffic. I am also seeing rather different traffic to other sites... Russell > > Packet data: > > GET /exe.php? > c > = > 4478204401 > &s > = > 5331227034&i=1217625952&t=6&a=0&n=25&l=0&d=0&q=0&p=1&x=0&z=1&k=0&b=1 > HTTP/1.1 > Host: ads.clicmanager.fr > User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.4; en-US; > rv:1.9.1.3) Gecko/20090824 Firefox/3.5.3 > Accept: */* > Accept-Language: en-us,en;q=0.5 > Accept-Encoding: gzip,deflate > Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 > Keep-Alive: 300 > Connection: keep-alive > Referer: http://www.africawin.com/give2.php?site=4888&f=728x90&tst=906027902806 > > From signatures at stillsecure.com Thu Oct 1 01:42:10 2009 From: signatures at stillsecure.com (signatures) Date: Wed, 30 Sep 2009 23:42:10 -0600 Subject: [Emerging-Sigs] StillSecure: 10 New Signatures - Sep - 30 - 2009 References: <5C9E8CCEEB81ED498AC0C3B0054704F3054C2940@webmail.latis.com> <4AC406D8.6050405@jonkmans.com> Message-ID: <5C9E8CCEEB81ED498AC0C3B0054704F3054C2941@webmail.latis.com> Matt, Based on your comments, we can overcome the common factor looking at the vulnerability spec's by replacing the (uricontent:"/delreq.php?") with (uricontent:"/torrenttrader109/delreq.php?"). Modified Signature: WEB-PHP TorrentTrader Classic delreq.php categ Parameter Sql Injection alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP TorrentTrader Classic delreq.php categ Parameter Sql Injection"; flow:to_server,established; content:"GET "; depth:4; uricontent:"/torrenttrader109/delreq.php?"; nocase; uricontent:"categ="; nocase; uricontent:"UNION"; nocase; uricontent:"SELECT"; nocase; pcre:"/UNION.+SELECT/Ui"; classtype:web-application-attack; reference:url,milw0rm.com/exploits/8958; reference:bugtraq,35369; sid:7678; rev:1;) Looking forward for your comments, if any... Thanks & Regards, StillSecure ________________________________ From: Matt Jonkman [mailto:jonkman at jonkmans.com] Sent: Wed 9/30/2009 7:33 PM To: signatures Cc: emerging-sigs at emergingthreats.net Subject: Re: [Emerging-Sigs] StillSecure: 10 New Signatures - Sep - 30 - 2009 The first one's uricontent matches are pretty common, I'm afraid that could Fp a lot. The rest are posted, thanks as always!! MAtt signatures wrote: > Hi Matt, > > Please find 10 New Signatures below: > > 1. WEB-PHP TorrentTrader Classic delreq.php categ Parameter Sql > Injection > alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP > TorrentTrader Classic delreq.php categ Parameter Sql Injection"; > flow:to_server,established; content:"GET "; depth:4; > uricontent:"/delreq.php?"; nocase; uricontent:"categ="; nocase; > uricontent:"UNION"; nocase; uricontent:"SELECT"; nocase; > pcre:"/UNION.+SELECT/Ui"; classtype:web-application-attack; > reference:url,milw0rm.com/exploits/8958; reference:bugtraq,35369; > sid:7678; rev:1;) > > 2. WEB-PHP SHOP-INET show_cat2.php grid Parameter SQL Injection > alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP > SHOP-INET show_cat2.php grid Parameter SQL Injection"; > flow:to_server,established; content:"GET "; depth:4; > uricontent:"/show_cat2.php?"; nocase; uricontent:"grid="; nocase; > uricontent:"UNION"; nocase; uricontent:"SELECT"; nocase; > pcre:"/UNION.+SELECT/Ui"; classtype:web-application-attack; > reference:bugtraq,33471; reference:url,milw0rm.com/exploits/7874; > reference:url,secunia.com/advisories/33660/; sid:7697; rev:1;) > > 3. WEB-PHP RS-CMS rscms_mod_newsview.php key Parameter Processing > Remote SQL Injection > alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP > RS-CMS rscms_mod_newsview.php key Parameter Processing Remote SQL > Injection"; flow:to_server,established; content:"GET "; depth:4; > uricontent:"/rscms_mod_newsview.php?"; nocase; uricontent:"key="; > nocase; uricontent:"UNION"; nocase; uricontent:"SELECT"; nocase; > pcre:"/UNION.+SELECT/Ui"; classtype:web-application-attack; > reference:url,milw0rm.com/exploits/9000; > reference:url,vupen.com/english/advisories/2009/1658; sid:7698; rev:1;) > > 4. WEB-PHP AdaptWeb a_index.php CodigoDisciplina Parameter Remote > SQL Injection > alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP > AdaptWeb a_index.php CodigoDisciplina Parameter Remote SQL Injection"; > flow:to_server,established; content:"GET "; depth:4; > uricontent:"/a_index.php?"; nocase; uricontent:"CodigoDisciplina="; > nocase; uricontent:"UNION"; nocase; uricontent:"SELECT"; nocase; > pcre:"/UNION.+SELECT/Ui"; classtype:web-application-attack; > reference:cve,CVE-2009-2152; > reference:url,en.securitylab.ru/nvd/381723.php; > reference:url,milw0rm.com/exploits/8954; sid:7699; rev:1;) > > 5. WEB-PHP LightOpenCMS smarty.php cwd Parameter Local File Inclusion > alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP > LightOpenCMS smarty.php cwd Parameter Local File Inclusion"; > flow:to_server,established; content:"GET "; depth:4; > uricontent:"/locms/smarty.php?"; nocase; uricontent:"cwd="; nocase; > content:"../"; depth:200; classtype:web-application-attack; > reference:url,milw0rm.com/exploits/9015; > reference:url,en.securitylab.ru/nvd/381880.php; sid:7736; rev:1;) > > 6. WEB-PHP LightOpenCMS smarty.php cwd Parameter Remote File Inclusion > alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP > LightOpenCMS smarty.php cwd Parameter Remote File Inclusion"; > flow:to_server,established; content:"GET "; depth:4; > uricontent:"/locms/smarty.php?"; nocase; uricontent:"cwd="; nocase; > pcre:"/cwd=\s*(https?|ftps?|php)\:\//Ui"; > classtype:web-application-attack; > reference:url,milw0rm.com/exploits/9015; > reference:url,en.securitylab.ru/nvd/381880.php; sid:7737; rev:1;) > > 7. WEB-PHP DM Albums album.php SECURITY_FILE Parameter Local File > Inclusion > alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP > DM Albums album.php SECURITY_FILE Parameter Local File Inclusion"; > flow:to_server,established; content:"GET "; depth:4; > uricontent:"/dm-albums/template/album.php?"; nocase; > uricontent:"SECURITY_FILE="; nocase; content:"../"; depth:200; > classtype:web-application-attack; > reference:url,secunia.com/advisories/35622/;reference:bugtraq,35521; > reference:url,milw0rm.com/exploits/9044; sid:7739; rev:1;) > > 8. WEB-PHP DM Albums album.php SECURITY_FILE Parameter Remote File > Inclusion > alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP > DM Albums album.php SECURITY_FILE Parameter Remote File Inclusion"; > flow:to_server,established; content:"GET "; depth:4; > uricontent:"/dm-albums/template/album.php?"; nocase; > uricontent:"SECURITY_FILE="; nocase; > pcre:"/SECURITY_FILE=\s*(https?|ftps?|php)\:\//Ui"; > classtype:web-application-attack; > reference:url,secunia.com/advisories/35622/; reference:bugtraq,35521; > reference:url,milw0rm.com/exploits/9044; sid:7740; rev:1;) > > 9. WEB-PHP NewSolved newsscript.php jahr Parameter SQL Injection > alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP > NewSolved newsscript.php jahr Parameter SQL Injection"; > flow:to_server,established; content:"GET "; depth:4; > uricontent:"/newsscript.php?"; nocase; uricontent:"m=archive"; nocase; > uricontent:"jahr="; nocase; uricontent:"UNION"; nocase; > uricontent:"SELECT"; nocase; pcre:"/UNION.+SELECT/Ui"; > classtype:web-application-attack; > reference:url,secunia.com/advisories/35611/; > reference:url,milw0rm.com/exploits/9042; sid:7741; rev:1;) > > 10. WEB-ATTACKS PDFZilla 1.0.8 ActiveX DebugMsgLog method DOS CLSid > Access > alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"WEB-ATTACKS > PDFZilla 1.0.8 ActiveX DebugMsgLog method DOS CLSid Access"; > flow:established,to_client; content:"clsid"; > content:"59DBDDA6-9A80-42A4-B824-9BC50CC172F5"; nocase; distance:0; > content:"DebugMsgLog"; nocase; > pcre:"/]*\s*classid\s*=\s*(?P\x22|\x27|)\s*clsid\s*\x3a\s*{?\s*59DBDDA6-9A80-42A4-B824-9BC50CC172F5\s*}?\s*(?P=q1)(\s|>)/si"; > classtype:web-application-attack; > reference:url,packetstormsecurity.org/0908-exploits/pdfzilla-overflow.txt; > sid:9130; rev:2;) > > Looking forward for your comments, if any... > > Thanks & Regards, > StillSecure > > > ------------------------------------------------------------------------ > > _______________________________________________ > Emerging-sigs mailing list > Emerging-sigs at emergingthreats.net > http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs -- -------------------------------------------- Matthew Jonkman Emerging Threats Open Information Security Foundation (OISF) Phone 765-429-0398 Fax 312-264-0205 http://www.emergingthreats.net http://www.openinformationsecurityfoundation.org -------------------------------------------- PGP: http://www.jonkmans.com/mattjonkman.asc -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20090930/1accf8ff/attachment.html From mail at mare-system.de Thu Oct 1 06:37:07 2009 From: mail at mare-system.de (mare-technik) Date: Thu, 01 Oct 2009 12:37:07 +0200 Subject: [Emerging-Sigs] Secureworks Article / Botnet Hiding Its Commands as JPEG Images Message-ID: <4AC48653.1030203@mare-system.de> does someone can provide pcaps for that issue to build a sig? http://www.secureworks.com/research/blog/index.php/2009/9/29/monkifdlkhora-botnet-hiding-its-commands-as-jpeg-images/ i already watched rfi-scaners trying to include jpegs/gifs, that really existed, but it didn't checked if the pics contained malicious stuff. mex MARE System Kiel .:. http://www.mare-system.de From jason.weir at nhrs.org Thu Oct 1 07:15:39 2009 From: jason.weir at nhrs.org (Weir, Jason) Date: Thu, 1 Oct 2009 07:15:39 -0400 Subject: [Emerging-Sigs] duplicate sid message In-Reply-To: <5C9E8CCEEB81ED498AC0C3B0054704F3054C2941@webmail.latis.com> Message-ID: Oinkmaster started giving me these starting last night about 10:00 - anyone else seeing them WARNING: duplicate SID in downloaded archive, SID=7740, only keeping rule with highest 'rev' WARNING: duplicate SID in downloaded archive, SID=7741, only keeping rule with highest 'rev' WARNING: duplicate SID in downloaded archive, SID=9130, only keeping rule with highest 'rev' -Jason _____________________________________________________________________________________________ Please visit www.nhrs.org to subscribe to NHRS email announcements and updates. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20091001/2acbf3a7/attachment-0001.html From wolvee.x at gmail.com Thu Oct 1 07:32:18 2009 From: wolvee.x at gmail.com (Wolvee) Date: Thu, 01 Oct 2009 17:02:18 +0530 Subject: [Emerging-Sigs] escape colon for 2010008 Message-ID: <4AC49342.80600@googlemail.com> Didn't escape the colon for "content:"Oshtcp-streamtype:" Updated rule: alert udp $HOME_NET any -> $EXTERNAL_NET 8247 (msg:"ET P2P Octoshape P2P streaming media"; content:"POST / HTTP/1."; depth:64; content:"Oshtcp-streamtype\:"; threshold: type limit, track by_src, count 1, seconds 600; classtype:policy-violation; reference:url,doc.emergingthreats.net/2010008; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/P2P/P2P_Octoshape; sid:2010008; rev:2;) Thanks, Wolvee.. From mail at mare-system.de Thu Oct 1 07:38:17 2009 From: mail at mare-system.de (mare-technik) Date: Thu, 01 Oct 2009 13:38:17 +0200 Subject: [Emerging-Sigs] duplicate sid message Message-ID: <4AC494A9.3070405@mare-system.de> i think these sids are from vrt-ruleset? i have sid 774x in backdoor.rules, also included , no problems here Weir, Jason wrote: > Oinkmaster started giving me these starting last night about 10:00 - > anyone else seeing them > WARNING: duplicate SID in downloaded archive, SID=7740, only keeping > rule with highest 'rev' > > WARNING: duplicate SID in downloaded archive, SID=7741, only keeping > rule with highest 'rev' > > WARNING: duplicate SID in downloaded archive, SID=9130, only keeping > rule with highest 'rev' > > -Jason > > _____________________________________________________________________________________________ > > Please visit www.nhrs.org to subscribe to NHRS email announcements and updates. > > > ------------------------------------------------------------------------ > > _______________________________________________ > Emerging-sigs mailing list > Emerging-sigs at emergingthreats.net > http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs -- mex MARE System Kiel .:. http://www.mare-system.de -- mex Security InfoCenter .:. http://www.mare-system.de/sic.cgi MARE System Kiel .:. http://www.mare-system.de From jason.weir at nhrs.org Thu Oct 1 07:40:55 2009 From: jason.weir at nhrs.org (Weir, Jason) Date: Thu, 1 Oct 2009 07:40:55 -0400 Subject: [Emerging-Sigs] duplicate sid message In-Reply-To: <4AC494A9.3070405@mare-system.de> Message-ID: Sorry for being off topic - they are from the VRT Ruleset - just checking to see if its just me... -J -----Original Message----- From: emerging-sigs-bounces at emergingthreats.net [mailto:emerging-sigs-bounces at emergingthreats.net] On Behalf Of mare-technik Sent: Thursday, October 01, 2009 7:38 AM To: emerging-sigs at emergingthreats.net Subject: Re: [Emerging-Sigs] duplicate sid message i think these sids are from vrt-ruleset? i have sid 774x in backdoor.rules, also included , no problems here Weir, Jason wrote: > Oinkmaster started giving me these starting last night about 10:00 - > anyone else seeing them > WARNING: duplicate SID in downloaded archive, SID=7740, only keeping > rule with highest 'rev' > > WARNING: duplicate SID in downloaded archive, SID=7741, only keeping > rule with highest 'rev' > > WARNING: duplicate SID in downloaded archive, SID=9130, only keeping > rule with highest 'rev' > > -Jason _____________________________________________________________________________________________ Please visit www.nhrs.org to subscribe to NHRS email announcements and updates. From jonkman at jonkmans.com Thu Oct 1 08:06:07 2009 From: jonkman at jonkmans.com (Matt Jonkman) Date: Thu, 01 Oct 2009 08:06:07 -0400 Subject: [Emerging-Sigs] escape colon for 2010008 In-Reply-To: <4AC49342.80600@googlemail.com> References: <4AC49342.80600@googlemail.com> Message-ID: <4AC49B2F.5040708@jonkmans.com> Got it, thanks! Wolvee wrote: > Didn't escape the colon for "content:"Oshtcp-streamtype:" > > Updated rule: > alert udp $HOME_NET any -> $EXTERNAL_NET 8247 (msg:"ET P2P Octoshape P2P streaming media"; content:"POST / HTTP/1."; depth:64; content:"Oshtcp-streamtype\:"; threshold: type limit, track by_src, count 1, seconds 600; classtype:policy-violation; reference:url,doc.emergingthreats.net/2010008; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/P2P/P2P_Octoshape; sid:2010008; rev:2;) > > Thanks, > Wolvee.. > > _______________________________________________ > Emerging-sigs mailing list > Emerging-sigs at emergingthreats.net > http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs -- -------------------------------------------- Matthew Jonkman Emerging Threats Open Information Security Foundation (OISF) Phone 765-429-0398 Fax 312-264-0205 http://www.emergingthreats.net http://www.openinformationsecurityfoundation.org -------------------------------------------- PGP: http://www.jonkmans.com/mattjonkman.asc From jonkman at jonkmans.com Thu Oct 1 14:10:56 2009 From: jonkman at jonkmans.com (Matt Jonkman) Date: Thu, 01 Oct 2009 14:10:56 -0400 Subject: [Emerging-Sigs] StillSecure: 10 New Signatures - Sep - 30 - 2009 In-Reply-To: <5C9E8CCEEB81ED498AC0C3B0054704F3054C2941@webmail.latis.com> References: <5C9E8CCEEB81ED498AC0C3B0054704F3054C2940@webmail.latis.com> <4AC406D8.6050405@jonkmans.com> <5C9E8CCEEB81ED498AC0C3B0054704F3054C2941@webmail.latis.com> Message-ID: <4AC4F0B0.1040804@jonkmans.com> That's perfect, thanks! Matt signatures wrote: > Matt, > > > > Based on your comments, we can overcome the common factor looking at the > vulnerability spec?s by replacing the (uricontent:"/delreq.php?") with > (uricontent:?/torrenttrader109/delreq.php??). > > > > Modified Signature: > > > > WEB-PHP TorrentTrader Classic delreq.php categ Parameter Sql Injection > alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP > TorrentTrader Classic delreq.php categ Parameter Sql Injection"; > flow:to_server,established; content:"GET "; depth:4; > uricontent:"/torrenttrader109/delreq.php??; nocase; uricontent:"categ="; > nocase; uricontent:"UNION"; nocase; uricontent:"SELECT"; nocase; > pcre:"/UNION.+SELECT/Ui"; classtype:web-application-attack; > reference:url,milw0rm.com/exploits/8958; reference:bugtraq,35369; > sid:7678; rev:1;) > > > Looking forward for your comments, if any... > > Thanks & Regards, > StillSecure > > ------------------------------------------------------------------------ > *From:* Matt Jonkman [mailto:jonkman at jonkmans.com] > *Sent:* Wed 9/30/2009 7:33 PM > *To:* signatures > *Cc:* emerging-sigs at emergingthreats.net > *Subject:* Re: [Emerging-Sigs] StillSecure: 10 New Signatures - Sep - 30 > - 2009 > > The first one's uricontent matches are pretty common, I'm afraid that > could Fp a lot. > > The rest are posted, thanks as always!! > > MAtt > > signatures wrote: >> Hi Matt, >> >> Please find 10 New Signatures below: >> >> 1. WEB-PHP TorrentTrader Classic delreq.php categ Parameter Sql >> Injection >> alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP >> TorrentTrader Classic delreq.php categ Parameter Sql Injection"; >> flow:to_server,established; content:"GET "; depth:4; >> uricontent:"/delreq.php?"; nocase; uricontent:"categ="; nocase; >> uricontent:"UNION"; nocase; uricontent:"SELECT"; nocase; >> pcre:"/UNION.+SELECT/Ui"; classtype:web-application-attack; >> reference:url,milw0rm.com/exploits/8958; reference:bugtraq,35369; >> sid:7678; rev:1;) >> >> 2. WEB-PHP SHOP-INET show_cat2.php grid Parameter SQL Injection >> alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP >> SHOP-INET show_cat2.php grid Parameter SQL Injection"; >> flow:to_server,established; content:"GET "; depth:4; >> uricontent:"/show_cat2.php?"; nocase; uricontent:"grid="; nocase; >> uricontent:"UNION"; nocase; uricontent:"SELECT"; nocase; >> pcre:"/UNION.+SELECT/Ui"; classtype:web-application-attack; >> reference:bugtraq,33471; reference:url,milw0rm.com/exploits/7874; >> reference:url,secunia.com/advisories/33660/; sid:7697; rev:1;) >> >> 3. WEB-PHP RS-CMS rscms_mod_newsview.php key Parameter Processing >> Remote SQL Injection >> alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP >> RS-CMS rscms_mod_newsview.php key Parameter Processing Remote SQL >> Injection"; flow:to_server,established; content:"GET "; depth:4; >> uricontent:"/rscms_mod_newsview.php?"; nocase; uricontent:"key="; >> nocase; uricontent:"UNION"; nocase; uricontent:"SELECT"; nocase; >> pcre:"/UNION.+SELECT/Ui"; classtype:web-application-attack; >> reference:url,milw0rm.com/exploits/9000; >> reference:url,vupen.com/english/advisories/2009/1658; sid:7698; rev:1;) >> >> 4. WEB-PHP AdaptWeb a_index.php CodigoDisciplina Parameter Remote >> SQL Injection >> alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP >> AdaptWeb a_index.php CodigoDisciplina Parameter Remote SQL Injection"; >> flow:to_server,established; content:"GET "; depth:4; >> uricontent:"/a_index.php?"; nocase; uricontent:"CodigoDisciplina="; >> nocase; uricontent:"UNION"; nocase; uricontent:"SELECT"; nocase; >> pcre:"/UNION.+SELECT/Ui"; classtype:web-application-attack; >> reference:cve,CVE-2009-2152; >> reference:url,en.securitylab.ru/nvd/381723.php; >> reference:url,milw0rm.com/exploits/8954; sid:7699; rev:1;) >> >> 5. WEB-PHP LightOpenCMS smarty.php cwd Parameter Local File Inclusion >> alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP >> LightOpenCMS smarty.php cwd Parameter Local File Inclusion"; >> flow:to_server,established; content:"GET "; depth:4; >> uricontent:"/locms/smarty.php?"; nocase; uricontent:"cwd="; nocase; >> content:"../"; depth:200; classtype:web-application-attack; >> reference:url,milw0rm.com/exploits/9015; >> reference:url,en.securitylab.ru/nvd/381880.php; sid:7736; rev:1;) >> >> 6. WEB-PHP LightOpenCMS smarty.php cwd Parameter Remote File > Inclusion >> alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP >> LightOpenCMS smarty.php cwd Parameter Remote File Inclusion"; >> flow:to_server,established; content:"GET "; depth:4; >> uricontent:"/locms/smarty.php?"; nocase; uricontent:"cwd="; nocase; >> pcre:"/cwd=\s*(https?|ftps?|php)\:\//Ui"; >> classtype:web-application-attack; >> reference:url,milw0rm.com/exploits/9015; >> reference:url,en.securitylab.ru/nvd/381880.php; sid:7737; rev:1;) >> >> 7. WEB-PHP DM Albums album.php SECURITY_FILE Parameter Local File >> Inclusion >> alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP >> DM Albums album.php SECURITY_FILE Parameter Local File Inclusion"; >> flow:to_server,established; content:"GET "; depth:4; >> uricontent:"/dm-albums/template/album.php?"; nocase; >> uricontent:"SECURITY_FILE="; nocase; content:"../"; depth:200; >> classtype:web-application-attack; >> reference:url,secunia.com/advisories/35622/;reference:bugtraq,35521; >> reference:url,milw0rm.com/exploits/9044; sid:7739; rev:1;) >> >> 8. WEB-PHP DM Albums album.php SECURITY_FILE Parameter Remote File >> Inclusion >> alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP >> DM Albums album.php SECURITY_FILE Parameter Remote File Inclusion"; >> flow:to_server,established; content:"GET "; depth:4; >> uricontent:"/dm-albums/template/album.php?"; nocase; >> uricontent:"SECURITY_FILE="; nocase; >> pcre:"/SECURITY_FILE=\s*(https?|ftps?|php)\:\//Ui"; >> classtype:web-application-attack; >> reference:url,secunia.com/advisories/35622/; reference:bugtraq,35521; >> reference:url,milw0rm.com/exploits/9044; sid:7740; rev:1;) >> >> 9. WEB-PHP NewSolved newsscript.php jahr Parameter SQL Injection >> alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"WEB-PHP >> NewSolved newsscript.php jahr Parameter SQL Injection"; >> flow:to_server,established; content:"GET "; depth:4; >> uricontent:"/newsscript.php?"; nocase; uricontent:"m=archive"; nocase; >> uricontent:"jahr="; nocase; uricontent:"UNION"; nocase; >> uricontent:"SELECT"; nocase; pcre:"/UNION.+SELECT/Ui"; >> classtype:web-application-attack; >> reference:url,secunia.com/advisories/35611/; >> reference:url,milw0rm.com/exploits/9042; sid:7741; rev:1;) >> >> 10. WEB-ATTACKS PDFZilla 1.0.8 ActiveX DebugMsgLog method DOS CLSid >> Access >> alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"WEB-ATTACKS >> PDFZilla 1.0.8 ActiveX DebugMsgLog method DOS CLSid Access"; >> flow:established,to_client; content:"clsid"; >> content:"59DBDDA6-9A80-42A4-B824-9BC50CC172F5"; nocase; distance:0; >> content:"DebugMsgLog"; nocase; >> > pcre:"/]*\s*classid\s*=\s*(?P\x22|\x27|)\s*clsid\s*\x3a\s*{?\s*59DBDDA6-9A80-42A4-B824-9BC50CC172F5\s*}?\s*(?P=q1)(\s|>)/si"; >> classtype:web-application-attack; >> reference:url,packetstormsecurity.org/0908-exploits/pdfzilla-overflow.txt; >> sid:9130; rev:2;) >> >> Looking forward for your comments, if any... >> >> Thanks & Regards, >> StillSecure >> >> >> ------------------------------------------------------------------------ >> >> _______________________________________________ >> Emerging-sigs mailing list >> Emerging-sigs at emergingthreats.net >> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs > > -- > -------------------------------------------- > Matthew Jonkman > Emerging Threats > Open Information Security Foundation (OISF) > Phone 765-429-0398 > Fax 312-264-0205 > http://www.emergingthreats.net > http://www.openinformationsecurityfoundation.org > > -------------------------------------------- > > PGP: http://www.jonkmans.com/mattjonkman.asc > > > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Emerging-sigs mailing list > Emerging-sigs at emergingthreats.net > http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs -- -------------------------------------------- Matthew Jonkman Emerging Threats Open Information Security Foundation (OISF) Phone 765-429-0398 Fax 312-264-0205 http://www.emergingthreats.net http://www.openinformationsecurityfoundation.org -------------------------------------------- PGP: http://www.jonkmans.com/mattjonkman.asc From kevross33 at googlemail.com Thu Oct 1 14:12:48 2009 From: kevross33 at googlemail.com (Kevin Ross) Date: Thu, 1 Oct 2009 19:12:48 +0100 Subject: [Emerging-Sigs] Novell eDirectory dconserv.dlm XSS sig Message-ID: alert tcp $EXTERNAL_NET any -> $HTTP_SERVERS $HTTP_PORTS (msg:"Possible Novell eDirectory 'dconserv.dlm' Cross-Site Scripting Attempt"; flow:established,to_server; uricontent:"/dhost/modules"; nocase; uricontent:"dconserv.dlm="; nocase; pcre:"/(script|img|src|onmouse|onkey|onload)/Ui"; classtype:web-application-attack; reference:url, www.securityfocus.com/bid/36567/info; sid:170000001; rev:1;) Kev -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20091001/413d06f7/attachment.html From evilghost at packetmail.net Thu Oct 1 14:15:43 2009 From: evilghost at packetmail.net (evilghost@packetmail.net) Date: Thu, 1 Oct 2009 13:15:43 -0500 Subject: [Emerging-Sigs] Proposed Signature; Exchange 2003 OWA not SSL Message-ID: <4AC4F1CF.7000603@packetmail.net> Below proposed signature for Exchange OWA in the plain. Comments/input welcome. alert tcp $HOME_NET 80 -> $EXTERNAL_NET any (msg:"ET POLICY Exchange 2003 OWA plain-text E-Mail message access, not SSL"; flow:established;from_server; content:"var g_szURL = \"http\://"; content:"var g_szFolder = \""; content:"var g_szVirtualRoot = \"http\://"; content:"Microsoft Corporation."; classtype:web-application-activity; reference:url,support.microsoft.com/kb/321832; sid:2009xxx; rev:1;) -evilghost From evilghost at packetmail.net Thu Oct 1 14:19:07 2009 From: evilghost at packetmail.net (evilghost@packetmail.net) Date: Thu, 1 Oct 2009 13:19:07 -0500 Subject: [Emerging-Sigs] Corrected: Proposed Signature; Exchange 2003 OWA not SSL In-Reply-To: <4AC4F1CF.7000603@packetmail.net> References: <4AC4F1CF.7000603@packetmail.net> Message-ID: <4AC4F29B.9080207@packetmail.net> Bad eyes, semi-color in flow: alert tcp $HOME_NET 80 -> $EXTERNAL_NET any (msg:"ET POLICY Exchange 2003 OWA plain-text E-Mail message access, not SSL"; flow:established,from_server; content:"var g_szURL = \"http\://"; content:"var g_szFolder = \""; content:"var g_szVirtualRoot = \"http\://"; content:"Microsoft Corporation."; classtype:web-application-activity; reference:url,support.microsoft.com/kb/321832; sid:2009xxx; rev:1;) evilghost at packetmail.net wrote: > Below proposed signature for Exchange OWA in the plain. > Comments/input welcome. > > alert tcp $HOME_NET 80 -> $EXTERNAL_NET any (msg:"ET POLICY Exchange > 2003 OWA plain-text E-Mail message access, not SSL"; > flow:established;from_server; content:"var g_szURL = \"http\://"; > content:"var g_szFolder = \""; content:"var g_szVirtualRoot = > \"http\://"; content:"Microsoft Corporation."; > classtype:web-application-activity; > reference:url,support.microsoft.com/kb/321832; sid:2009xxx; rev:1;) > > -evilghost > From jonkman at jonkmans.com Thu Oct 1 14:21:49 2009 From: jonkman at jonkmans.com (Matt Jonkman) Date: Thu, 01 Oct 2009 14:21:49 -0400 Subject: [Emerging-Sigs] Corrected: Proposed Signature; Exchange 2003 OWA not SSL In-Reply-To: <4AC4F29B.9080207@packetmail.net> References: <4AC4F1CF.7000603@packetmail.net> <4AC4F29B.9080207@packetmail.net> Message-ID: <4AC4F33D.1070309@jonkmans.com> Interesting one, posting now. Thanks! Matt evilghost at packetmail.net wrote: > Bad eyes, semi-color in flow: > > alert tcp $HOME_NET 80 -> $EXTERNAL_NET any (msg:"ET POLICY Exchange > 2003 OWA plain-text E-Mail message access, not SSL"; > flow:established,from_server; content:"var g_szURL = \"http\://"; > content:"var g_szFolder = \""; content:"var g_szVirtualRoot = > \"http\://"; content:"Microsoft Corporation."; > classtype:web-application-activity; > reference:url,support.microsoft.com/kb/321832; sid:2009xxx; rev:1;) > > evilghost at packetmail.net wrote: >> Below proposed signature for Exchange OWA in the plain. >> Comments/input welcome. >> >> alert tcp $HOME_NET 80 -> $EXTERNAL_NET any (msg:"ET POLICY Exchange >> 2003 OWA plain-text E-Mail message access, not SSL"; >> flow:established;from_server; content:"var g_szURL = \"http\://"; >> content:"var g_szFolder = \""; content:"var g_szVirtualRoot = >> \"http\://"; content:"Microsoft Corporation."; >> classtype:web-application-activity; >> reference:url,support.microsoft.com/kb/321832; sid:2009xxx; rev:1;) >> >> -evilghost >> > > _______________________________________________ > Emerging-sigs mailing list > Emerging-sigs at emergingthreats.net > http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs -- -------------------------------------------- Matthew Jonkman Emerging Threats Open Information Security Foundation (OISF) Phone 765-429-0398 Fax 312-264-0205 http://www.emergingthreats.net http://www.openinformationsecurityfoundation.org -------------------------------------------- PGP: http://www.jonkmans.com/mattjonkman.asc From jonkman at jonkmans.com Thu Oct 1 14:27:11 2009 From: jonkman at jonkmans.com (Matt Jonkman) Date: Thu, 01 Oct 2009 14:27:11 -0400 Subject: [Emerging-Sigs] Signature Contest Winner Message-ID: <4AC4F47F.7050109@jonkmans.com> Congratulations to Kevin Ross, this month's winner of the Signature Contest. Lots of good ones this month, thanks to everyone! We'll get your prizes out Kevin, and thanks again for your efforts! A new contest starts now, let the competition begin! Matt -- -------------------------------------------- Matthew Jonkman Emerging Threats Open Information Security Foundation (OISF) Phone 765-429-0398 Fax 312-264-0205 http://www.emergingthreats.net http://www.openinformationsecurityfoundation.org -------------------------------------------- PGP: http://www.jonkmans.com/mattjonkman.asc From jonkman at jonkmans.com Thu Oct 1 14:37:09 2009 From: jonkman at jonkmans.com (Matt Jonkman) Date: Thu, 01 Oct 2009 14:37:09 -0400 Subject: [Emerging-Sigs] CVS Freeze Message-ID: <4AC4F6D5.8070809@jonkmans.com> In about an hour from now I'm calling a freeze to cvs so we can start the task of making the ruleset changes,. If you have any sigs or changes you'd like to have applied before midnight tonight please send them in asap! Thanks Matt -- -------------------------------------------- Matthew Jonkman Emerging Threats Open Information Security Foundation (OISF) Phone 765-429-0398 Fax 312-264-0205 http://www.emergingthreats.net http://www.openinformationsecurityfoundation.org -------------------------------------------- PGP: http://www.jonkmans.com/mattjonkman.asc From jonkman at jonkmans.com Thu Oct 1 14:56:48 2009 From: jonkman at jonkmans.com (Matt Jonkman) Date: Thu, 01 Oct 2009 14:56:48 -0400 Subject: [Emerging-Sigs] Ruleset Change Reminder Message-ID: <4AC4FB70.40901@jonkmans.com> One last reminder, we're changing ruleset names tonight at midnight EST. There will be five new files: emerging-web_server.rules emerging-web_client.rules emerging-web_specific_apps.rules emerging-user_agents.rules emerging-current_events.rules And one will go away: emerging-sql_injection.rules We will keep an empty file in place for the one going away for the foreseeable future. -- -------------------------------------------- Matthew Jonkman Emerging Threats Open Information Security Foundation (OISF) Phone 765-429-0398 Fax 312-264-0205 http://www.emergingthreats.net http://www.openinformationsecurityfoundation.org -------------------------------------------- PGP: http://www.jonkmans.com/mattjonkman.asc From emerging at emergingthreats.net Thu Oct 1 16:00:11 2009 From: emerging at emergingthreats.net (emerging@emergingthreats.net) Date: Thu, 1 Oct 2009 16:00:11 -0400 (EDT) Subject: [Emerging-Sigs] Emerging Threats Daily Signature Changes Message-ID: <20091001200011.B7BA14504A@goliath.jonkmans.com> [***] Results from Oinkmaster started Thu Oct 1 16:00:11 2009 [***] [+++] Added rules: [+++] 2009401 - ET WEB_ACTIVEX Microgaming FlashXControl Control Clsid Access (emerging-web.rules) 2009485 - ET WEB /etc/shadow Detected in URI (emerging-web.rules) 2010014 - ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter UNION SELECT SQL Injection (emerging-web_sql_injection.rules) 2010015 - ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter SELECT FROM SQL Injection (emerging-web_sql_injection.rules) 2010016 - ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter DELETE FROM SQL Injection (emerging-web_sql_injection.rules) 2010017 - ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter UPDATE SET SQL Injection (emerging-web_sql_injection.rules) 2010018 - ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter INSERT INTO SQL Injection (emerging-web_sql_injection.rules) 2010019 - ET SCAN Tomcat Web Application Manager scanning (emerging-scan.rules) 2010020 - ET WEB_SPECIFIC SHOP-INET show_cat2.php grid Parameter SQL Injection (emerging-web_sql_injection.rules) 2010021 - ET WEB_SPECIFIC RS-CMS rscms_mod_newsview.php key Parameter Processing Remote SQL Injection (emerging-web_sql_injection.rules) 2010022 - ET WEB_SPECIFIC AdaptWeb a_index.php CodigoDisciplina Parameter Remote SQL Injection (emerging-web_sql_injection.rules) 2010023 - ET WEB_SPECIFIC LightOpenCMS smarty.php cwd Parameter Local File Inclusion (emerging-web_sql_injection.rules) 2010024 - ET WEB_SPECIFIC LightOpenCMS smarty.php cwd Parameter Remote File Inclusion (emerging-web_sql_injection.rules) 2010025 - ET WEB_SPECIFIC DM Albums album.php SECURITY_FILE Parameter Local File Inclusion (emerging-web_sql_injection.rules) 2010026 - WEB-PHP TorrentTrader Classic delreq.php categ Parameter Sql Injection (emerging-web_sql_injection.rules) 2010027 - ET WEB_SPECIFIC DM Albums album.php SECURITY_FILE Parameter Remote File Inclusion (emerging-web_sql_injection.rules) 2010028 - ET WEB_SPECIFIC NewSolved newsscript.php jahr Parameter SQL Injection (emerging-web_sql_injection.rules) 2010029 - ET WEB_ACTIVEX PDFZilla 1.0.8 ActiveX DebugMsgLog method DOS CLSid Access (emerging-web.rules) 2010030 - ET POLICY Exchange 2003 OWA plain-text E-Mail message access, not SSL (emerging-policy.rules) 2010031 - ET WEB Possible Novell eDirectory 'dconserv.dlm' Cross-Site Scripting Attempt (emerging-web_sql_injection.rules) [///] Modified active rules: [///] 2010007 - ET TROJAN Potential Gemini Malware Download (emerging-virus.rules) 2010008 - ET P2P Octoshape P2P streaming media (emerging-p2p.rules) 2010009 - ET WEB Webmin Pre-1.290 Compromise Attempt (emerging-web.rules) 2010010 - ET WEB_ACTIVEX Possible HP LoadRunner XUpload.ocx ActiveX Control MakeHttpRequest Arbitrary File Download Attempt (emerging-web.rules) 2010011 - ET WEB_ACTIVEX Possible Symantec Altiris Deployment Solution AeXNSPkgDLLib.dll ActiveX Control DownloadAndInstall Method Arbitrary Code Execution Attempt (emerging-web.rules) 2010012 - ET WEB_ACTIVEX Possible KeyWorks KeyHelp Module keyhelp.ocx ActiveX Control Remote Buffer Overflow Attempt (emerging-web.rules) 2010013 - ET WEB_ACTIVEX Possible SAP GUI ActiveX Control Insecure Method File Overwrite Attempt (emerging-web.rules) 2406000 - ET RBN Known Russian Business Network IP TCP (1) (emerging-rbn.rules) 2406001 - ET RBN Known Russian Business Network IP UDP (1) (emerging-rbn.rules) 2406002 - ET RBN Known Russian Business Network IP TCP (2) (emerging-rbn.rules) 2406003 - ET RBN Known Russian Business Network IP UDP (2) (emerging-rbn.rules) 2406004 - ET RBN Known Russian Business Network IP TCP (3) (emerging-rbn.rules) 2406005 - ET RBN Known Russian Business Network IP UDP (3) (emerging-rbn.rules) 2406006 - ET RBN Known Russian Business Network IP TCP (4) (emerging-rbn.rules) 2406007 - ET RBN Known Russian Business Network IP UDP (4) (emerging-rbn.rules) 2406008 - ET RBN Known Russian Business Network IP TCP (5) (emerging-rbn.rules) 2406009 - ET RBN Known Russian Business Network IP UDP (5) (emerging-rbn.rules) 2406010 - ET RBN Known Russian Business Network IP TCP (6) (emerging-rbn.rules) 2406011 - ET RBN Known Russian Business Network IP UDP (6) (emerging-rbn.rules) 2406012 - ET RBN Known Russian Business Network IP TCP (7) (emerging-rbn.rules) 2406013 - ET RBN Known Russian Business Network IP UDP (7) (emerging-rbn.rules) 2406014 - ET RBN Known Russian Business Network IP TCP (8) (emerging-rbn.rules) 2406015 - ET RBN Known Russian Business Network IP UDP (8) (emerging-rbn.rules) 2406016 - ET RBN Known Russian Business Network IP TCP (9) (emerging-rbn.rules) 2406017 - ET RBN Known Russian Business Network IP UDP (9) (emerging-rbn.rules) 2406018 - ET RBN Known Russian Business Network IP TCP (10) (emerging-rbn.rules) 2406019 - ET RBN Known Russian Business Network IP UDP (10) (emerging-rbn.rules) 2406020 - ET RBN Known Russian Business Network IP TCP (11) (emerging-rbn.rules) 2406021 - ET RBN Known Russian Business Network IP UDP (11) (emerging-rbn.rules) 2406022 - ET RBN Known Russian Business Network IP TCP (12) (emerging-rbn.rules) 2406023 - ET RBN Known Russian Business Network IP UDP (12) (emerging-rbn.rules) 2406024 - ET RBN Known Russian Business Network IP TCP (13) (emerging-rbn.rules) 2406025 - ET RBN Known Russian Business Network IP UDP (13) (emerging-rbn.rules) 2406026 - ET RBN Known Russian Business Network IP TCP (14) (emerging-rbn.rules) 2406027 - ET RBN Known Russian Business Network IP UDP (14) (emerging-rbn.rules) 2406028 - ET RBN Known Russian Business Network IP TCP (15) (emerging-rbn.rules) 2406029 - ET RBN Known Russian Business Network IP UDP (15) (emerging-rbn.rules) 2406030 - ET RBN Known Russian Business Network IP TCP (16) (emerging-rbn.rules) 2406031 - ET RBN Known Russian Business Network IP UDP (16) (emerging-rbn.rules) 2406032 - ET RBN Known Russian Business Network IP TCP (17) (emerging-rbn.rules) 2406033 - ET RBN Known Russian Business Network IP UDP (17) (emerging-rbn.rules) 2406034 - ET RBN Known Russian Business Network IP TCP (18) (emerging-rbn.rules) 2406035 - ET RBN Known Russian Business Network IP UDP (18) (emerging-rbn.rules) 2406036 - ET RBN Known Russian Business Network IP TCP (19) (emerging-rbn.rules) 2406037 - ET RBN Known Russian Business Network IP UDP (19) (emerging-rbn.rules) 2406038 - ET RBN Known Russian Business Network IP TCP (20) (emerging-rbn.rules) 2406039 - ET RBN Known Russian Business Network IP UDP (20) (emerging-rbn.rules) 2406040 - ET RBN Known Russian Business Network IP TCP (21) (emerging-rbn.rules) 2406041 - ET RBN Known Russian Business Network IP UDP (21) (emerging-rbn.rules) 2406042 - ET RBN Known Russian Business Network IP TCP (22) (emerging-rbn.rules) 2406043 - ET RBN Known Russian Business Network IP UDP (22) (emerging-rbn.rules) 2406044 - ET RBN Known Russian Business Network IP TCP (23) (emerging-rbn.rules) 2406045 - ET RBN Known Russian Business Network IP UDP (23) (emerging-rbn.rules) 2406046 - ET RBN Known Russian Business Network IP TCP (24) (emerging-rbn.rules) 2406047 - ET RBN Known Russian Business Network IP UDP (24) (emerging-rbn.rules) 2406048 - ET RBN Known Russian Business Network IP TCP (25) (emerging-rbn.rules) 2406049 - ET RBN Known Russian Business Network IP UDP (25) (emerging-rbn.rules) 2406050 - ET RBN Known Russian Business Network IP TCP (26) (emerging-rbn.rules) 2406051 - ET RBN Known Russian Business Network IP UDP (26) (emerging-rbn.rules) 2406052 - ET RBN Known Russian Business Network IP TCP (27) (emerging-rbn.rules) 2406053 - ET RBN Known Russian Business Network IP UDP (27) (emerging-rbn.rules) 2406054 - ET RBN Known Russian Business Network IP TCP (28) (emerging-rbn.rules) 2406055 - ET RBN Known Russian Business Network IP UDP (28) (emerging-rbn.rules) 2406056 - ET RBN Known Russian Business Network IP TCP (29) (emerging-rbn.rules) 2406057 - ET RBN Known Russian Business Network IP UDP (29) (emerging-rbn.rules) 2406058 - ET RBN Known Russian Business Network IP TCP (30) (emerging-rbn.rules) 2406059 - ET RBN Known Russian Business Network IP UDP (30) (emerging-rbn.rules) 2406060 - ET RBN Known Russian Business Network IP TCP (31) (emerging-rbn.rules) 2406061 - ET RBN Known Russian Business Network IP UDP (31) (emerging-rbn.rules) 2406062 - ET RBN Known Russian Business Network IP TCP (32) (emerging-rbn.rules) 2406063 - ET RBN Known Russian Business Network IP UDP (32) (emerging-rbn.rules) 2406064 - ET RBN Known Russian Business Network IP TCP (33) (emerging-rbn.rules) 2406065 - ET RBN Known Russian Business Network IP UDP (33) (emerging-rbn.rules) 2406066 - ET RBN Known Russian Business Network IP TCP (34) (emerging-rbn.rules) 2406067 - ET RBN Known Russian Business Network IP UDP (34) (emerging-rbn.rules) 2406068 - ET RBN Known Russian Business Network IP TCP (35) (emerging-rbn.rules) 2406069 - ET RBN Known Russian Business Network IP UDP (35) (emerging-rbn.rules) 2406070 - ET RBN Known Russian Business Network IP TCP (36) (emerging-rbn.rules) 2406071 - ET RBN Known Russian Business Network IP UDP (36) (emerging-rbn.rules) 2406072 - ET RBN Known Russian Business Network IP TCP (37) (emerging-rbn.rules) 2406073 - ET RBN Known Russian Business Network IP UDP (37) (emerging-rbn.rules) 2406074 - ET RBN Known Russian Business Network IP TCP (38) (emerging-rbn.rules) 2406075 - ET RBN Known Russian Business Network IP UDP (38) (emerging-rbn.rules) 2406076 - ET RBN Known Russian Business Network IP TCP (39) (emerging-rbn.rules) 2406077 - ET RBN Known Russian Business Network IP UDP (39) (emerging-rbn.rules) 2406078 - ET RBN Known Russian Business Network IP TCP (40) (emerging-rbn.rules) 2406079 - ET RBN Known Russian Business Network IP UDP (40) (emerging-rbn.rules) 2406080 - ET RBN Known Russian Business Network IP TCP (41) (emerging-rbn.rules) 2406081 - ET RBN Known Russian Business Network IP UDP (41) (emerging-rbn.rules) 2406082 - ET RBN Known Russian Business Network IP TCP (42) (emerging-rbn.rules) 2406083 - ET RBN Known Russian Business Network IP UDP (42) (emerging-rbn.rules) 2406084 - ET RBN Known Russian Business Network IP TCP (43) (emerging-rbn.rules) 2406085 - ET RBN Known Russian Business Network IP UDP (43) (emerging-rbn.rules) 2406086 - ET RBN Known Russian Business Network IP TCP (44) (emerging-rbn.rules) 2406087 - ET RBN Known Russian Business Network IP UDP (44) (emerging-rbn.rules) 2406088 - ET RBN Known Russian Business Network IP TCP (45) (emerging-rbn.rules) 2406089 - ET RBN Known Russian Business Network IP UDP (45) (emerging-rbn.rules) 2406090 - ET RBN Known Russian Business Network IP TCP (46) (emerging-rbn.rules) 2406091 - ET RBN Known Russian Business Network IP UDP (46) (emerging-rbn.rules) 2406092 - ET RBN Known Russian Business Network IP TCP (47) (emerging-rbn.rules) 2406093 - ET RBN Known Russian Business Network IP UDP (47) (emerging-rbn.rules) 2406094 - ET RBN Known Russian Business Network IP TCP (48) (emerging-rbn.rules) 2406095 - ET RBN Known Russian Business Network IP UDP (48) (emerging-rbn.rules) 2406096 - ET RBN Known Russian Business Network IP TCP (49) (emerging-rbn.rules) 2406097 - ET RBN Known Russian Business Network IP UDP (49) (emerging-rbn.rules) 2406098 - ET RBN Known Russian Business Network IP TCP (50) (emerging-rbn.rules) 2406099 - ET RBN Known Russian Business Network IP UDP (50) (emerging-rbn.rules) 2406100 - ET RBN Known Russian Business Network IP TCP (51) (emerging-rbn.rules) 2406101 - ET RBN Known Russian Business Network IP UDP (51) (emerging-rbn.rules) 2406102 - ET RBN Known Russian Business Network IP TCP (52) (emerging-rbn.rules) 2406103 - ET RBN Known Russian Business Network IP UDP (52) (emerging-rbn.rules) 2406104 - ET RBN Known Russian Business Network IP TCP (53) (emerging-rbn.rules) 2406105 - ET RBN Known Russian Business Network IP UDP (53) (emerging-rbn.rules) 2406106 - ET RBN Known Russian Business Network IP TCP (54) (emerging-rbn.rules) 2406107 - ET RBN Known Russian Business Network IP UDP (54) (emerging-rbn.rules) 2406108 - ET RBN Known Russian Business Network IP TCP (55) (emerging-rbn.rules) 2406109 - ET RBN Known Russian Business Network IP UDP (55) (emerging-rbn.rules) 2406110 - ET RBN Known Russian Business Network IP TCP (56) (emerging-rbn.rules) 2406111 - ET RBN Known Russian Business Network IP UDP (56) (emerging-rbn.rules) 2406112 - ET RBN Known Russian Business Network IP TCP (57) (emerging-rbn.rules) 2406113 - ET RBN Known Russian Business Network IP UDP (57) (emerging-rbn.rules) 2406114 - ET RBN Known Russian Business Network IP TCP (58) (emerging-rbn.rules) 2406115 - ET RBN Known Russian Business Network IP UDP (58) (emerging-rbn.rules) 2406116 - ET RBN Known Russian Business Network IP TCP (59) (emerging-rbn.rules) 2406117 - ET RBN Known Russian Business Network IP UDP (59) (emerging-rbn.rules) 2406118 - ET RBN Known Russian Business Network IP TCP (60) (emerging-rbn.rules) 2406119 - ET RBN Known Russian Business Network IP UDP (60) (emerging-rbn.rules) 2406120 - ET RBN Known Russian Business Network IP TCP (61) (emerging-rbn.rules) 2406121 - ET RBN Known Russian Business Network IP UDP (61) (emerging-rbn.rules) 2406122 - ET RBN Known Russian Business Network IP TCP (62) (emerging-rbn.rules) 2406123 - ET RBN Known Russian Business Network IP UDP (62) (emerging-rbn.rules) 2406124 - ET RBN Known Russian Business Network IP TCP (63) (emerging-rbn.rules) 2406125 - ET RBN Known Russian Business Network IP UDP (63) (emerging-rbn.rules) 2406126 - ET RBN Known Russian Business Network IP TCP (64) (emerging-rbn.rules) 2406127 - ET RBN Known Russian Business Network IP UDP (64) (emerging-rbn.rules) 2406128 - ET RBN Known Russian Business Network IP TCP (65) (emerging-rbn.rules) 2406129 - ET RBN Known Russian Business Network IP UDP (65) (emerging-rbn.rules) 2406130 - ET RBN Known Russian Business Network IP TCP (66) (emerging-rbn.rules) 2406131 - ET RBN Known Russian Business Network IP UDP (66) (emerging-rbn.rules) 2406132 - ET RBN Known Russian Business Network IP TCP (67) (emerging-rbn.rules) 2406133 - ET RBN Known Russian Business Network IP UDP (67) (emerging-rbn.rules) 2406134 - ET RBN Known Russian Business Network IP TCP (68) (emerging-rbn.rules) 2406135 - ET RBN Known Russian Business Network IP UDP (68) (emerging-rbn.rules) 2406136 - ET RBN Known Russian Business Network IP TCP (69) (emerging-rbn.rules) 2406137 - ET RBN Known Russian Business Network IP UDP (69) (emerging-rbn.rules) 2406138 - ET RBN Known Russian Business Network IP TCP (70) (emerging-rbn.rules) 2406139 - ET RBN Known Russian Business Network IP UDP (70) (emerging-rbn.rules) 2406140 - ET RBN Known Russian Business Network IP TCP (71) (emerging-rbn.rules) 2406141 - ET RBN Known Russian Business Network IP UDP (71) (emerging-rbn.rules) 2406142 - ET RBN Known Russian Business Network IP TCP (72) (emerging-rbn.rules) 2406143 - ET RBN Known Russian Business Network IP UDP (72) (emerging-rbn.rules) 2406144 - ET RBN Known Russian Business Network IP TCP (73) (emerging-rbn.rules) 2406145 - ET RBN Known Russian Business Network IP UDP (73) (emerging-rbn.rules) 2406146 - ET RBN Known Russian Business Network IP TCP (74) (emerging-rbn.rules) 2406147 - ET RBN Known Russian Business Network IP UDP (74) (emerging-rbn.rules) 2406148 - ET RBN Known Russian Business Network IP TCP (75) (emerging-rbn.rules) 2406149 - ET RBN Known Russian Business Network IP UDP (75) (emerging-rbn.rules) 2406150 - ET RBN Known Russian Business Network IP TCP (76) (emerging-rbn.rules) 2406151 - ET RBN Known Russian Business Network IP UDP (76) (emerging-rbn.rules) 2406152 - ET RBN Known Russian Business Network IP TCP (77) (emerging-rbn.rules) 2406153 - ET RBN Known Russian Business Network IP UDP (77) (emerging-rbn.rules) 2406154 - ET RBN Known Russian Business Network IP TCP (78) (emerging-rbn.rules) 2406155 - ET RBN Known Russian Business Network IP UDP (78) (emerging-rbn.rules) 2406156 - ET RBN Known Russian Business Network IP TCP (79) (emerging-rbn.rules) 2406157 - ET RBN Known Russian Business Network IP UDP (79) (emerging-rbn.rules) 2406158 - ET RBN Known Russian Business Network IP TCP (80) (emerging-rbn.rules) 2406159 - ET RBN Known Russian Business Network IP UDP (80) (emerging-rbn.rules) 2406160 - ET RBN Known Russian Business Network IP TCP (81) (emerging-rbn.rules) 2406161 - ET RBN Known Russian Business Network IP UDP (81) (emerging-rbn.rules) 2406162 - ET RBN Known Russian Business Network IP TCP (82) (emerging-rbn.rules) 2406163 - ET RBN Known Russian Business Network IP UDP (82) (emerging-rbn.rules) 2406164 - ET RBN Known Russian Business Network IP TCP (83) (emerging-rbn.rules) 2406165 - ET RBN Known Russian Business Network IP UDP (83) (emerging-rbn.rules) 2406166 - ET RBN Known Russian Business Network IP TCP (84) (emerging-rbn.rules) 2406167 - ET RBN Known Russian Business Network IP UDP (84) (emerging-rbn.rules) 2406168 - ET RBN Known Russian Business Network IP TCP (85) (emerging-rbn.rules) 2406169 - ET RBN Known Russian Business Network IP UDP (85) (emerging-rbn.rules) 2406170 - ET RBN Known Russian Business Network IP TCP (86) (emerging-rbn.rules) 2406171 - ET RBN Known Russian Business Network IP UDP (86) (emerging-rbn.rules) 2406172 - ET RBN Known Russian Business Network IP TCP (87) (emerging-rbn.rules) 2406173 - ET RBN Known Russian Business Network IP UDP (87) (emerging-rbn.rules) 2406174 - ET RBN Known Russian Business Network IP TCP (88) (emerging-rbn.rules) 2406175 - ET RBN Known Russian Business Network IP UDP (88) (emerging-rbn.rules) 2406176 - ET RBN Known Russian Business Network IP TCP (89) (emerging-rbn.rules) 2406177 - ET RBN Known Russian Business Network IP UDP (89) (emerging-rbn.rules) 2406178 - ET RBN Known Russian Business Network IP TCP (90) (emerging-rbn.rules) 2406179 - ET RBN Known Russian Business Network IP UDP (90) (emerging-rbn.rules) 2406180 - ET RBN Known Russian Business Network IP TCP (91) (emerging-rbn.rules) 2406181 - ET RBN Known Russian Business Network IP UDP (91) (emerging-rbn.rules) 2406182 - ET RBN Known Russian Business Network IP TCP (92) (emerging-rbn.rules) 2406183 - ET RBN Known Russian Business Network IP UDP (92) (emerging-rbn.rules) 2406184 - ET RBN Known Russian Business Network IP TCP (93) (emerging-rbn.rules) 2406185 - ET RBN Known Russian Business Network IP UDP (93) (emerging-rbn.rules) 2406186 - ET RBN Known Russian Business Network IP TCP (94) (emerging-rbn.rules) 2406187 - ET RBN Known Russian Business Network IP UDP (94) (emerging-rbn.rules) 2406188 - ET RBN Known Russian Business Network IP TCP (95) (emerging-rbn.rules) 2406189 - ET RBN Known Russian Business Network IP UDP (95) (emerging-rbn.rules) 2406190 - ET RBN Known Russian Business Network IP TCP (96) (emerging-rbn.rules) 2406191 - ET RBN Known Russian Business Network IP UDP (96) (emerging-rbn.rules) 2406192 - ET RBN Known Russian Business Network IP TCP (97) (emerging-rbn.rules) 2406193 - ET RBN Known Russian Business Network IP UDP (97) (emerging-rbn.rules) 2406194 - ET RBN Known Russian Business Network IP TCP (98) (emerging-rbn.rules) 2406195 - ET RBN Known Russian Business Network IP UDP (98) (emerging-rbn.rules) 2406196 - ET RBN Known Russian Business Network IP TCP (99) (emerging-rbn.rules) 2406197 - ET RBN Known Russian Business Network IP UDP (99) (emerging-rbn.rules) 2406198 - ET RBN Known Russian Business Network IP TCP (100) (emerging-rbn.rules) 2406199 - ET RBN Known Russian Business Network IP UDP (100) (emerging-rbn.rules) 2406200 - ET RBN Known Russian Business Network IP TCP (101) (emerging-rbn.rules) 2406201 - ET RBN Known Russian Business Network IP UDP (101) (emerging-rbn.rules) 2406202 - ET RBN Known Russian Business Network IP TCP (102) (emerging-rbn.rules) 2406203 - ET RBN Known Russian Business Network IP UDP (102) (emerging-rbn.rules) 2406204 - ET RBN Known Russian Business Network IP TCP (103) (emerging-rbn.rules) 2406205 - ET RBN Known Russian Business Network IP UDP (103) (emerging-rbn.rules) 2406206 - ET RBN Known Russian Business Network IP TCP (104) (emerging-rbn.rules) 2406207 - ET RBN Known Russian Business Network IP UDP (104) (emerging-rbn.rules) 2406208 - ET RBN Known Russian Business Network IP TCP (105) (emerging-rbn.rules) 2406209 - ET RBN Known Russian Business Network IP UDP (105) (emerging-rbn.rules) 2406210 - ET RBN Known Russian Business Network IP TCP (106) (emerging-rbn.rules) 2406211 - ET RBN Known Russian Business Network IP UDP (106) (emerging-rbn.rules) 2406212 - ET RBN Known Russian Business Network IP TCP (107) (emerging-rbn.rules) 2406213 - ET RBN Known Russian Business Network IP UDP (107) (emerging-rbn.rules) 2406214 - ET RBN Known Russian Business Network IP TCP (108) (emerging-rbn.rules) 2406215 - ET RBN Known Russian Business Network IP UDP (108) (emerging-rbn.rules) 2406216 - ET RBN Known Russian Business Network IP TCP (109) (emerging-rbn.rules) 2406217 - ET RBN Known Russian Business Network IP UDP (109) (emerging-rbn.rules) 2406218 - ET RBN Known Russian Business Network IP TCP (110) (emerging-rbn.rules) 2406219 - ET RBN Known Russian Business Network IP UDP (110) (emerging-rbn.rules) 2406220 - ET RBN Known Russian Business Network IP TCP (111) (emerging-rbn.rules) 2406221 - ET RBN Known Russian Business Network IP UDP (111) (emerging-rbn.rules) 2406222 - ET RBN Known Russian Business Network IP TCP (112) (emerging-rbn.rules) 2406223 - ET RBN Known Russian Business Network IP UDP (112) (emerging-rbn.rules) 2406224 - ET RBN Known Russian Business Network IP TCP (113) (emerging-rbn.rules) 2406225 - ET RBN Known Russian Business Network IP UDP (113) (emerging-rbn.rules) 2406226 - ET RBN Known Russian Business Network IP TCP (114) (emerging-rbn.rules) 2406227 - ET RBN Known Russian Business Network IP UDP (114) (emerging-rbn.rules) 2406228 - ET RBN Known Russian Business Network IP TCP (115) (emerging-rbn.rules) 2406229 - ET RBN Known Russian Business Network IP UDP (115) (emerging-rbn.rules) 2406230 - ET RBN Known Russian Business Network IP TCP (116) (emerging-rbn.rules) 2406231 - ET RBN Known Russian Business Network IP UDP (116) (emerging-rbn.rules) 2406232 - ET RBN Known Russian Business Network IP TCP (117) (emerging-rbn.rules) 2406233 - ET RBN Known Russian Business Network IP UDP (117) (emerging-rbn.rules) 2406234 - ET RBN Known Russian Business Network IP TCP (118) (emerging-rbn.rules) 2406235 - ET RBN Known Russian Business Network IP UDP (118) (emerging-rbn.rules) 2406236 - ET RBN Known Russian Business Network IP TCP (119) (emerging-rbn.rules) 2406237 - ET RBN Known Russian Business Network IP UDP (119) (emerging-rbn.rules) 2406238 - ET RBN Known Russian Business Network IP TCP (120) (emerging-rbn.rules) 2406239 - ET RBN Known Russian Business Network IP UDP (120) (emerging-rbn.rules) 2406240 - ET RBN Known Russian Business Network IP TCP (121) (emerging-rbn.rules) 2406241 - ET RBN Known Russian Business Network IP UDP (121) (emerging-rbn.rules) 2406242 - ET RBN Known Russian Business Network IP TCP (122) (emerging-rbn.rules) 2406243 - ET RBN Known Russian Business Network IP UDP (122) (emerging-rbn.rules) 2406244 - ET RBN Known Russian Business Network IP TCP (123) (emerging-rbn.rules) 2406245 - ET RBN Known Russian Business Network IP UDP (123) (emerging-rbn.rules) 2406246 - ET RBN Known Russian Business Network IP TCP (124) (emerging-rbn.rules) 2406247 - ET RBN Known Russian Business Network IP UDP (124) (emerging-rbn.rules) 2406248 - ET RBN Known Russian Business Network IP TCP (125) (emerging-rbn.rules) 2406249 - ET RBN Known Russian Business Network IP UDP (125) (emerging-rbn.rules) 2406250 - ET RBN Known Russian Business Network IP TCP (126) (emerging-rbn.rules) 2406251 - ET RBN Known Russian Business Network IP UDP (126) (emerging-rbn.rules) 2406252 - ET RBN Known Russian Business Network IP TCP (127) (emerging-rbn.rules) 2406253 - ET RBN Known Russian Business Network IP UDP (127) (emerging-rbn.rules) 2406254 - ET RBN Known Russian Business Network IP TCP (128) (emerging-rbn.rules) 2406255 - ET RBN Known Russian Business Network IP UDP (128) (emerging-rbn.rules) 2406256 - ET RBN Known Russian Business Network IP TCP (129) (emerging-rbn.rules) 2406257 - ET RBN Known Russian Business Network IP UDP (129) (emerging-rbn.rules) 2406258 - ET RBN Known Russian Business Network IP TCP (130) (emerging-rbn.rules) 2406259 - ET RBN Known Russian Business Network IP UDP (130) (emerging-rbn.rules) 2406260 - ET RBN Known Russian Business Network IP TCP (131) (emerging-rbn.rules) 2406261 - ET RBN Known Russian Business Network IP UDP (131) (emerging-rbn.rules) 2406262 - ET RBN Known Russian Business Network IP TCP (132) (emerging-rbn.rules) 2406263 - ET RBN Known Russian Business Network IP UDP (132) (emerging-rbn.rules) 2406264 - ET RBN Known Russian Business Network IP TCP (133) (emerging-rbn.rules) 2406265 - ET RBN Known Russian Business Network IP UDP (133) (emerging-rbn.rules) 2406266 - ET RBN Known Russian Business Network IP TCP (134) (emerging-rbn.rules) 2406267 - ET RBN Known Russian Business Network IP UDP (134) (emerging-rbn.rules) 2406268 - ET RBN Known Russian Business Network IP TCP (135) (emerging-rbn.rules) 2406269 - ET RBN Known Russian Business Network IP UDP (135) (emerging-rbn.rules) 2406270 - ET RBN Known Russian Business Network IP TCP (136) (emerging-rbn.rules) 2406271 - ET RBN Known Russian Business Network IP UDP (136) (emerging-rbn.rules) 2406272 - ET RBN Known Russian Business Network IP TCP (137) (emerging-rbn.rules) 2406273 - ET RBN Known Russian Business Network IP UDP (137) (emerging-rbn.rules) 2406274 - ET RBN Known Russian Business Network IP TCP (138) (emerging-rbn.rules) 2406275 - ET RBN Known Russian Business Network IP UDP (138) (emerging-rbn.rules) 2406276 - ET RBN Known Russian Business Network IP TCP (139) (emerging-rbn.rules) 2406277 - ET RBN Known Russian Business Network IP UDP (139) (emerging-rbn.rules) 2406278 - ET RBN Known Russian Business Network IP TCP (140) (emerging-rbn.rules) 2406279 - ET RBN Known Russian Business Network IP UDP (140) (emerging-rbn.rules) 2406280 - ET RBN Known Russian Business Network IP TCP (141) (emerging-rbn.rules) 2406281 - ET RBN Known Russian Business Network IP UDP (141) (emerging-rbn.rules) 2406282 - ET RBN Known Russian Business Network IP TCP (142) (emerging-rbn.rules) 2406283 - ET RBN Known Russian Business Network IP UDP (142) (emerging-rbn.rules) 2406284 - ET RBN Known Russian Business Network IP TCP (143) (emerging-rbn.rules) 2406285 - ET RBN Known Russian Business Network IP UDP (143) (emerging-rbn.rules) 2406286 - ET RBN Known Russian Business Network IP TCP (144) (emerging-rbn.rules) 2406287 - ET RBN Known Russian Business Network IP UDP (144) (emerging-rbn.rules) 2406288 - ET RBN Known Russian Business Network IP TCP (145) (emerging-rbn.rules) 2406289 - ET RBN Known Russian Business Network IP UDP (145) (emerging-rbn.rules) 2406290 - ET RBN Known Russian Business Network IP TCP (146) (emerging-rbn.rules) 2406291 - ET RBN Known Russian Business Network IP UDP (146) (emerging-rbn.rules) 2406292 - ET RBN Known Russian Business Network IP TCP (147) (emerging-rbn.rules) 2406293 - ET RBN Known Russian Business Network IP UDP (147) (emerging-rbn.rules) 2406294 - ET RBN Known Russian Business Network IP TCP (148) (emerging-rbn.rules) 2406295 - ET RBN Known Russian Business Network IP UDP (148) (emerging-rbn.rules) 2406296 - ET RBN Known Russian Business Network IP TCP (149) (emerging-rbn.rules) 2406297 - ET RBN Known Russian Business Network IP UDP (149) (emerging-rbn.rules) 2406298 - ET RBN Known Russian Business Network IP TCP (150) (emerging-rbn.rules) 2406299 - ET RBN Known Russian Business Network IP UDP (150) (emerging-rbn.rules) 2406300 - ET RBN Known Russian Business Network IP TCP (151) (emerging-rbn.rules) 2406301 - ET RBN Known Russian Business Network IP UDP (151) (emerging-rbn.rules) 2406302 - ET RBN Known Russian Business Network IP TCP (152) (emerging-rbn.rules) 2406303 - ET RBN Known Russian Business Network IP UDP (152) (emerging-rbn.rules) 2406304 - ET RBN Known Russian Business Network IP TCP (153) (emerging-rbn.rules) 2406305 - ET RBN Known Russian Business Network IP UDP (153) (emerging-rbn.rules) 2406306 - ET RBN Known Russian Business Network IP TCP (154) (emerging-rbn.rules) 2406307 - ET RBN Known Russian Business Network IP UDP (154) (emerging-rbn.rules) 2406308 - ET RBN Known Russian Business Network IP TCP (155) (emerging-rbn.rules) 2406309 - ET RBN Known Russian Business Network IP UDP (155) (emerging-rbn.rules) 2406310 - ET RBN Known Russian Business Network IP TCP (156) (emerging-rbn.rules) 2406311 - ET RBN Known Russian Business Network IP UDP (156) (emerging-rbn.rules) 2406312 - ET RBN Known Russian Business Network IP TCP (157) (emerging-rbn.rules) 2406313 - ET RBN Known Russian Business Network IP UDP (157) (emerging-rbn.rules) 2406314 - ET RBN Known Russian Business Network IP TCP (158) (emerging-rbn.rules) 2406315 - ET RBN Known Russian Business Network IP UDP (158) (emerging-rbn.rules) 2406316 - ET RBN Known Russian Business Network IP TCP (159) (emerging-rbn.rules) 2406317 - ET RBN Known Russian Business Network IP UDP (159) (emerging-rbn.rules) 2406318 - ET RBN Known Russian Business Network IP TCP (160) (emerging-rbn.rules) 2406319 - ET RBN Known Russian Business Network IP UDP (160) (emerging-rbn.rules) 2406320 - ET RBN Known Russian Business Network IP TCP (161) (emerging-rbn.rules) 2406321 - ET RBN Known Russian Business Network IP UDP (161) (emerging-rbn.rules) 2406322 - ET RBN Known Russian Business Network IP TCP (162) (emerging-rbn.rules) 2406323 - ET RBN Known Russian Business Network IP UDP (162) (emerging-rbn.rules) 2406324 - ET RBN Known Russian Business Network IP TCP (163) (emerging-rbn.rules) 2406325 - ET RBN Known Russian Business Network IP UDP (163) (emerging-rbn.rules) 2406326 - ET RBN Known Russian Business Network IP TCP (164) (emerging-rbn.rules) 2406327 - ET RBN Known Russian Business Network IP UDP (164) (emerging-rbn.rules) 2406328 - ET RBN Known Russian Business Network IP TCP (165) (emerging-rbn.rules) 2406329 - ET RBN Known Russian Business Network IP UDP (165) (emerging-rbn.rules) 2406330 - ET RBN Known Russian Business Network IP TCP (166) (emerging-rbn.rules) 2406331 - ET RBN Known Russian Business Network IP UDP (166) (emerging-rbn.rules) 2406332 - ET RBN Known Russian Business Network IP TCP (167) (emerging-rbn.rules) 2406333 - ET RBN Known Russian Business Network IP UDP (167) (emerging-rbn.rules) 2406334 - ET RBN Known Russian Business Network IP TCP (168) (emerging-rbn.rules) 2406335 - ET RBN Known Russian Business Network IP UDP (168) (emerging-rbn.rules) 2406336 - ET RBN Known Russian Business Network IP TCP (169) (emerging-rbn.rules) 2406337 - ET RBN Known Russian Business Network IP UDP (169) (emerging-rbn.rules) 2406338 - ET RBN Known Russian Business Network IP TCP (170) (emerging-rbn.rules) 2406339 - ET RBN Known Russian Business Network IP UDP (170) (emerging-rbn.rules) 2406340 - ET RBN Known Russian Business Network IP TCP (171) (emerging-rbn.rules) 2406341 - ET RBN Known Russian Business Network IP UDP (171) (emerging-rbn.rules) 2406342 - ET RBN Known Russian Business Network IP TCP (172) (emerging-rbn.rules) 2406343 - ET RBN Known Russian Business Network IP UDP (172) (emerging-rbn.rules) 2406344 - ET RBN Known Russian Business Network IP TCP (173) (emerging-rbn.rules) 2406345 - ET RBN Known Russian Business Network IP UDP (173) (emerging-rbn.rules) 2406346 - ET RBN Known Russian Business Network IP TCP (174) (emerging-rbn.rules) 2406347 - ET RBN Known Russian Business Network IP UDP (174) (emerging-rbn.rules) 2406348 - ET RBN Known Russian Business Network IP TCP (175) (emerging-rbn.rules) 2406349 - ET RBN Known Russian Business Network IP UDP (175) (emerging-rbn.rules) 2406350 - ET RBN Known Russian Business Network IP TCP (176) (emerging-rbn.rules) 2406351 - ET RBN Known Russian Business Network IP UDP (176) (emerging-rbn.rules) 2406352 - ET RBN Known Russian Business Network IP TCP (177) (emerging-rbn.rules) 2406353 - ET RBN Known Russian Business Network IP UDP (177) (emerging-rbn.rules) 2406354 - ET RBN Known Russian Business Network IP TCP (178) (emerging-rbn.rules) 2406355 - ET RBN Known Russian Business Network IP UDP (178) (emerging-rbn.rules) 2406356 - ET RBN Known Russian Business Network IP TCP (179) (emerging-rbn.rules) 2406357 - ET RBN Known Russian Business Network IP UDP (179) (emerging-rbn.rules) 2406358 - ET RBN Known Russian Business Network IP TCP (180) (emerging-rbn.rules) 2406359 - ET RBN Known Russian Business Network IP UDP (180) (emerging-rbn.rules) 2406360 - ET RBN Known Russian Business Network IP TCP (181) (emerging-rbn.rules) 2406361 - ET RBN Known Russian Business Network IP UDP (181) (emerging-rbn.rules) 2406362 - ET RBN Known Russian Business Network IP TCP (182) (emerging-rbn.rules) 2406363 - ET RBN Known Russian Business Network IP UDP (182) (emerging-rbn.rules) 2406364 - ET RBN Known Russian Business Network IP TCP (183) (emerging-rbn.rules) 2406365 - ET RBN Known Russian Business Network IP UDP (183) (emerging-rbn.rules) 2406366 - ET RBN Known Russian Business Network IP TCP (184) (emerging-rbn.rules) 2406367 - ET RBN Known Russian Business Network IP UDP (184) (emerging-rbn.rules) 2406368 - ET RBN Known Russian Business Network IP TCP (185) (emerging-rbn.rules) 2406369 - ET RBN Known Russian Business Network IP UDP (185) (emerging-rbn.rules) 2406370 - ET RBN Known Russian Business Network IP TCP (186) (emerging-rbn.rules) 2406371 - ET RBN Known Russian Business Network IP UDP (186) (emerging-rbn.rules) 2406372 - ET RBN Known Russian Business Network IP TCP (187) (emerging-rbn.rules) 2406373 - ET RBN Known Russian Business Network IP UDP (187) (emerging-rbn.rules) 2406374 - ET RBN Known Russian Business Network IP TCP (188) (emerging-rbn.rules) 2406375 - ET RBN Known Russian Business Network IP UDP (188) (emerging-rbn.rules) 2406376 - ET RBN Known Russian Business Network IP TCP (189) (emerging-rbn.rules) 2406377 - ET RBN Known Russian Business Network IP UDP (189) (emerging-rbn.rules) 2406378 - ET RBN Known Russian Business Network IP TCP (190) (emerging-rbn.rules) 2406379 - ET RBN Known Russian Business Network IP UDP (190) (emerging-rbn.rules) 2406380 - ET RBN Known Russian Business Network IP TCP (191) (emerging-rbn.rules) 2406381 - ET RBN Known Russian Business Network IP UDP (191) (emerging-rbn.rules) 2406382 - ET RBN Known Russian Business Network IP TCP (192) (emerging-rbn.rules) 2406383 - ET RBN Known Russian Business Network IP UDP (192) (emerging-rbn.rules) 2406384 - ET RBN Known Russian Business Network IP TCP (193) (emerging-rbn.rules) 2406385 - ET RBN Known Russian Business Network IP UDP (193) (emerging-rbn.rules) 2406386 - ET RBN Known Russian Business Network IP TCP (194) (emerging-rbn.rules) 2406387 - ET RBN Known Russian Business Network IP UDP (194) (emerging-rbn.rules) 2406388 - ET RBN Known Russian Business Network IP TCP (195) (emerging-rbn.rules) 2406389 - ET RBN Known Russian Business Network IP UDP (195) (emerging-rbn.rules) 2406390 - ET RBN Known Russian Business Network IP TCP (196) (emerging-rbn.rules) 2406391 - ET RBN Known Russian Business Network IP UDP (196) (emerging-rbn.rules) 2406392 - ET RBN Known Russian Business Network IP TCP (197) (emerging-rbn.rules) 2406393 - ET RBN Known Russian Business Network IP UDP (197) (emerging-rbn.rules) 2406394 - ET RBN Known Russian Business Network IP TCP (198) (emerging-rbn.rules) 2406395 - ET RBN Known Russian Business Network IP UDP (198) (emerging-rbn.rules) 2406396 - ET RBN Known Russian Business Network IP TCP (199) (emerging-rbn.rules) 2406397 - ET RBN Known Russian Business Network IP UDP (199) (emerging-rbn.rules) 2406398 - ET RBN Known Russian Business Network IP TCP (200) (emerging-rbn.rules) 2406399 - ET RBN Known Russian Business Network IP UDP (200) (emerging-rbn.rules) 2406400 - ET RBN Known Russian Business Network IP TCP (201) (emerging-rbn.rules) 2406401 - ET RBN Known Russian Business Network IP UDP (201) (emerging-rbn.rules) 2406402 - ET RBN Known Russian Business Network IP TCP (202) (emerging-rbn.rules) 2406403 - ET RBN Known Russian Business Network IP UDP (202) (emerging-rbn.rules) 2406404 - ET RBN Known Russian Business Network IP TCP (203) (emerging-rbn.rules) 2406405 - ET RBN Known Russian Business Network IP UDP (203) (emerging-rbn.rules) 2406406 - ET RBN Known Russian Business Network IP TCP (204) (emerging-rbn.rules) 2406407 - ET RBN Known Russian Business Network IP UDP (204) (emerging-rbn.rules) 2406408 - ET RBN Known Russian Business Network IP TCP (205) (emerging-rbn.rules) 2406409 - ET RBN Known Russian Business Network IP UDP (205) (emerging-rbn.rules) 2406410 - ET RBN Known Russian Business Network IP TCP (206) (emerging-rbn.rules) 2406411 - ET RBN Known Russian Business Network IP UDP (206) (emerging-rbn.rules) 2406412 - ET RBN Known Russian Business Network IP TCP (207) (emerging-rbn.rules) 2406413 - ET RBN Known Russian Business Network IP UDP (207) (emerging-rbn.rules) 2406414 - ET RBN Known Russian Business Network IP TCP (208) (emerging-rbn.rules) 2406415 - ET RBN Known Russian Business Network IP UDP (208) (emerging-rbn.rules) 2406416 - ET RBN Known Russian Business Network IP TCP (209) (emerging-rbn.rules) 2406417 - ET RBN Known Russian Business Network IP UDP (209) (emerging-rbn.rules) 2406418 - ET RBN Known Russian Business Network IP TCP (210) (emerging-rbn.rules) 2406419 - ET RBN Known Russian Business Network IP UDP (210) (emerging-rbn.rules) 2406420 - ET RBN Known Russian Business Network IP TCP (211) (emerging-rbn.rules) 2406421 - ET RBN Known Russian Business Network IP UDP (211) (emerging-rbn.rules) 2406422 - ET RBN Known Russian Business Network IP TCP (212) (emerging-rbn.rules) 2406423 - ET RBN Known Russian Business Network IP UDP (212) (emerging-rbn.rules) 2406424 - ET RBN Known Russian Business Network IP TCP (213) (emerging-rbn.rules) 2406425 - ET RBN Known Russian Business Network IP UDP (213) (emerging-rbn.rules) 2406426 - ET RBN Known Russian Business Network IP TCP (214) (emerging-rbn.rules) 2406427 - ET RBN Known Russian Business Network IP UDP (214) (emerging-rbn.rules) 2406428 - ET RBN Known Russian Business Network IP TCP (215) (emerging-rbn.rules) 2406429 - ET RBN Known Russian Business Network IP UDP (215) (emerging-rbn.rules) 2406430 - ET RBN Known Russian Business Network IP TCP (216) (emerging-rbn.rules) 2406431 - ET RBN Known Russian Business Network IP UDP (216) (emerging-rbn.rules) 2406432 - ET RBN Known Russian Business Network IP TCP (217) (emerging-rbn.rules) 2406433 - ET RBN Known Russian Business Network IP UDP (217) (emerging-rbn.rules) 2406434 - ET RBN Known Russian Business Network IP TCP (218) (emerging-rbn.rules) 2406435 - ET RBN Known Russian Business Network IP UDP (218) (emerging-rbn.rules) 2406436 - ET RBN Known Russian Business Network IP TCP (219) (emerging-rbn.rules) 2406437 - ET RBN Known Russian Business Network IP UDP (219) (emerging-rbn.rules) 2406438 - ET RBN Known Russian Business Network IP TCP (220) (emerging-rbn.rules) 2406439 - ET RBN Known Russian Business Network IP UDP (220) (emerging-rbn.rules) 2406440 - ET RBN Known Russian Business Network IP TCP (221) (emerging-rbn.rules) 2406441 - ET RBN Known Russian Business Network IP UDP (221) (emerging-rbn.rules) 2406442 - ET RBN Known Russian Business Network IP TCP (222) (emerging-rbn.rules) 2406443 - ET RBN Known Russian Business Network IP UDP (222) (emerging-rbn.rules) 2406444 - ET RBN Known Russian Business Network IP TCP (223) (emerging-rbn.rules) 2406445 - ET RBN Known Russian Business Network IP UDP (223) (emerging-rbn.rules) 2406446 - ET RBN Known Russian Business Network IP TCP (224) (emerging-rbn.rules) 2406447 - ET RBN Known Russian Business Network IP UDP (224) (emerging-rbn.rules) 2406448 - ET RBN Known Russian Business Network IP TCP (225) (emerging-rbn.rules) 2406449 - ET RBN Known Russian Business Network IP UDP (225) (emerging-rbn.rules) 2406450 - ET RBN Known Russian Business Network IP TCP (226) (emerging-rbn.rules) 2406451 - ET RBN Known Russian Business Network IP UDP (226) (emerging-rbn.rules) 2406452 - ET RBN Known Russian Business Network IP TCP (227) (emerging-rbn.rules) 2406453 - ET RBN Known Russian Business Network IP UDP (227) (emerging-rbn.rules) 2406454 - ET RBN Known Russian Business Network IP TCP (228) (emerging-rbn.rules) 2406455 - ET RBN Known Russian Business Network IP UDP (228) (emerging-rbn.rules) 2406456 - ET RBN Known Russian Business Network IP TCP (229) (emerging-rbn.rules) 2406457 - ET RBN Known Russian Business Network IP UDP (229) (emerging-rbn.rules) 2406458 - ET RBN Known Russian Business Network IP TCP (230) (emerging-rbn.rules) 2406459 - ET RBN Known Russian Business Network IP UDP (230) (emerging-rbn.rules) 2406460 - ET RBN Known Russian Business Network IP TCP (231) (emerging-rbn.rules) 2406461 - ET RBN Known Russian Business Network IP UDP (231) (emerging-rbn.rules) 2406462 - ET RBN Known Russian Business Network IP TCP (232) (emerging-rbn.rules) 2406463 - ET RBN Known Russian Business Network IP UDP (232) (emerging-rbn.rules) 2406464 - ET RBN Known Russian Business Network IP TCP (233) (emerging-rbn.rules) 2406465 - ET RBN Known Russian Business Network IP UDP (233) (emerging-rbn.rules) 2406466 - ET RBN Known Russian Business Network IP TCP (234) (emerging-rbn.rules) 2406467 - ET RBN Known Russian Business Network IP UDP (234) (emerging-rbn.rules) 2406468 - ET RBN Known Russian Business Network IP TCP (235) (emerging-rbn.rules) 2406469 - ET RBN Known Russian Business Network IP UDP (235) (emerging-rbn.rules) 2406470 - ET RBN Known Russian Business Network IP TCP (236) (emerging-rbn.rules) 2406471 - ET RBN Known Russian Business Network IP UDP (236) (emerging-rbn.rules) 2406472 - ET RBN Known Russian Business Network IP TCP (237) (emerging-rbn.rules) 2406473 - ET RBN Known Russian Business Network IP UDP (237) (emerging-rbn.rules) 2406474 - ET RBN Known Russian Business Network IP TCP (238) (emerging-rbn.rules) 2406475 - ET RBN Known Russian Business Network IP UDP (238) (emerging-rbn.rules) 2406476 - ET RBN Known Russian Business Network IP TCP (239) (emerging-rbn.rules) 2406477 - ET RBN Known Russian Business Network IP UDP (239) (emerging-rbn.rules) 2406478 - ET RBN Known Russian Business Network IP TCP (240) (emerging-rbn.rules) 2406479 - ET RBN Known Russian Business Network IP UDP (240) (emerging-rbn.rules) 2406480 - ET RBN Known Russian Business Network IP TCP (241) (emerging-rbn.rules) 2406481 - ET RBN Known Russian Business Network IP UDP (241) (emerging-rbn.rules) 2406482 - ET RBN Known Russian Business Network IP TCP (242) (emerging-rbn.rules) 2406483 - ET RBN Known Russian Business Network IP UDP (242) (emerging-rbn.rules) 2406484 - ET RBN Known Russian Business Network IP TCP (243) (emerging-rbn.rules) 2406485 - ET RBN Known Russian Business Network IP UDP (243) (emerging-rbn.rules) 2406486 - ET RBN Known Russian Business Network IP TCP (244) (emerging-rbn.rules) 2406487 - ET RBN Known Russian Business Network IP UDP (244) (emerging-rbn.rules) 2406488 - ET RBN Known Russian Business Network IP TCP (245) (emerging-rbn.rules) 2406489 - ET RBN Known Russian Business Network IP UDP (245) (emerging-rbn.rules) 2406490 - ET RBN Known Russian Business Network IP TCP (246) (emerging-rbn.rules) 2406491 - ET RBN Known Russian Business Network IP UDP (246) (emerging-rbn.rules) 2406492 - ET RBN Known Russian Business Network IP TCP (247) (emerging-rbn.rules) 2406493 - ET RBN Known Russian Business Network IP UDP (247) (emerging-rbn.rules) 2406494 - ET RBN Known Russian Business Network IP TCP (248) (emerging-rbn.rules) 2406495 - ET RBN Known Russian Business Network IP UDP (248) (emerging-rbn.rules) 2406496 - ET RBN Known Russian Business Network IP TCP (249) (emerging-rbn.rules) 2406497 - ET RBN Known Russian Business Network IP UDP (249) (emerging-rbn.rules) 2406498 - ET RBN Known Russian Business Network IP TCP (250) (emerging-rbn.rules) 2406499 - ET RBN Known Russian Business Network IP UDP (250) (emerging-rbn.rules) 2406500 - ET RBN Known Russian Business Network IP TCP (251) (emerging-rbn.rules) 2406501 - ET RBN Known Russian Business Network IP UDP (251) (emerging-rbn.rules) 2406502 - ET RBN Known Russian Business Network IP TCP (252) (emerging-rbn.rules) 2406503 - ET RBN Known Russian Business Network IP UDP (252) (emerging-rbn.rules) 2406504 - ET RBN Known Russian Business Network IP TCP (253) (emerging-rbn.rules) 2406505 - ET RBN Known Russian Business Network IP UDP (253) (emerging-rbn.rules) 2406506 - ET RBN Known Russian Business Network IP TCP (254) (emerging-rbn.rules) 2406507 - ET RBN Known Russian Business Network IP UDP (254) (emerging-rbn.rules) 2406508 - ET RBN Known Russian Business Network IP TCP (255) (emerging-rbn.rules) 2406509 - ET RBN Known Russian Business Network IP UDP (255) (emerging-rbn.rules) 2406510 - ET RBN Known Russian Business Network IP TCP (256) (emerging-rbn.rules) 2406511 - ET RBN Known Russian Business Network IP UDP (256) (emerging-rbn.rules) 2406512 - ET RBN Known Russian Business Network IP TCP (257) (emerging-rbn.rules) 2406513 - ET RBN Known Russian Business Network IP UDP (257) (emerging-rbn.rules) 2406514 - ET RBN Known Russian Business Network IP TCP (258) (emerging-rbn.rules) 2406515 - ET RBN Known Russian Business Network IP UDP (258) (emerging-rbn.rules) 2406516 - ET RBN Known Russian Business Network IP TCP (259) (emerging-rbn.rules) 2406517 - ET RBN Known Russian Business Network IP UDP (259) (emerging-rbn.rules) 2406518 - ET RBN Known Russian Business Network IP TCP (260) (emerging-rbn.rules) 2406519 - ET RBN Known Russian Business Network IP UDP (260) (emerging-rbn.rules) 2406520 - ET RBN Known Russian Business Network IP TCP (261) (emerging-rbn.rules) 2406521 - ET RBN Known Russian Business Network IP UDP (261) (emerging-rbn.rules) 2406522 - ET RBN Known Russian Business Network IP TCP (262) (emerging-rbn.rules) 2406523 - ET RBN Known Russian Business Network IP UDP (262) (emerging-rbn.rules) 2406524 - ET RBN Known Russian Business Network IP TCP (263) (emerging-rbn.rules) 2406525 - ET RBN Known Russian Business Network IP UDP (263) (emerging-rbn.rules) 2406526 - ET RBN Known Russian Business Network IP TCP (264) (emerging-rbn.rules) 2406527 - ET RBN Known Russian Business Network IP UDP (264) (emerging-rbn.rules) 2406528 - ET RBN Known Russian Business Network IP TCP (265) (emerging-rbn.rules) 2406529 - ET RBN Known Russian Business Network IP UDP (265) (emerging-rbn.rules) 2406530 - ET RBN Known Russian Business Network IP TCP (266) (emerging-rbn.rules) 2406531 - ET RBN Known Russian Business Network IP UDP (266) (emerging-rbn.rules) 2406532 - ET RBN Known Russian Business Network IP TCP (267) (emerging-rbn.rules) 2406533 - ET RBN Known Russian Business Network IP UDP (267) (emerging-rbn.rules) 2406534 - ET RBN Known Russian Business Network IP TCP (268) (emerging-rbn.rules) 2406535 - ET RBN Known Russian Business Network IP UDP (268) (emerging-rbn.rules) 2406536 - ET RBN Known Russian Business Network IP TCP (269) (emerging-rbn.rules) 2406537 - ET RBN Known Russian Business Network IP UDP (269) (emerging-rbn.rules) 2406538 - ET RBN Known Russian Business Network IP TCP (270) (emerging-rbn.rules) 2406539 - ET RBN Known Russian Business Network IP UDP (270) (emerging-rbn.rules) 2406540 - ET RBN Known Russian Business Network IP TCP (271) (emerging-rbn.rules) 2406541 - ET RBN Known Russian Business Network IP UDP (271) (emerging-rbn.rules) 2406542 - ET RBN Known Russian Business Network IP TCP (272) (emerging-rbn.rules) 2406543 - ET RBN Known Russian Business Network IP UDP (272) (emerging-rbn.rules) 2406544 - ET RBN Known Russian Business Network IP TCP (273) (emerging-rbn.rules) 2406545 - ET RBN Known Russian Business Network IP UDP (273) (emerging-rbn.rules) 2406546 - ET RBN Known Russian Business Network IP TCP (274) (emerging-rbn.rules) 2406547 - ET RBN Known Russian Business Network IP UDP (274) (emerging-rbn.rules) 2406548 - ET RBN Known Russian Business Network IP TCP (275) (emerging-rbn.rules) 2406549 - ET RBN Known Russian Business Network IP UDP (275) (emerging-rbn.rules) 2406550 - ET RBN Known Russian Business Network IP TCP (276) (emerging-rbn.rules) 2406551 - ET RBN Known Russian Business Network IP UDP (276) (emerging-rbn.rules) 2406552 - ET RBN Known Russian Business Network IP TCP (277) (emerging-rbn.rules) 2406553 - ET RBN Known Russian Business Network IP UDP (277) (emerging-rbn.rules) 2406554 - ET RBN Known Russian Business Network IP TCP (278) (emerging-rbn.rules) 2406555 - ET RBN Known Russian Business Network IP UDP (278) (emerging-rbn.rules) 2406556 - ET RBN Known Russian Business Network IP TCP (279) (emerging-rbn.rules) 2406557 - ET RBN Known Russian Business Network IP UDP (279) (emerging-rbn.rules) 2406558 - ET RBN Known Russian Business Network IP TCP (280) (emerging-rbn.rules) 2406559 - ET RBN Known Russian Business Network IP UDP (280) (emerging-rbn.rules) 2406560 - ET RBN Known Russian Business Network IP TCP (281) (emerging-rbn.rules) 2406561 - ET RBN Known Russian Business Network IP UDP (281) (emerging-rbn.rules) 2406562 - ET RBN Known Russian Business Network IP TCP (282) (emerging-rbn.rules) 2406563 - ET RBN Known Russian Business Network IP UDP (282) (emerging-rbn.rules) 2406564 - ET RBN Known Russian Business Network IP TCP (283) (emerging-rbn.rules) 2406565 - ET RBN Known Russian Business Network IP UDP (283) (emerging-rbn.rules) 2406566 - ET RBN Known Russian Business Network IP TCP (284) (emerging-rbn.rules) 2406567 - ET RBN Known Russian Business Network IP UDP (284) (emerging-rbn.rules) 2406568 - ET RBN Known Russian Business Network IP TCP (285) (emerging-rbn.rules) 2406569 - ET RBN Known Russian Business Network IP UDP (285) (emerging-rbn.rules) 2406570 - ET RBN Known Russian Business Network IP TCP (286) (emerging-rbn.rules) 2406571 - ET RBN Known Russian Business Network IP UDP (286) (emerging-rbn.rules) 2406572 - ET RBN Known Russian Business Network IP TCP (287) (emerging-rbn.rules) 2406573 - ET RBN Known Russian Business Network IP UDP (287) (emerging-rbn.rules) 2406574 - ET RBN Known Russian Business Network IP TCP (288) (emerging-rbn.rules) 2406575 - ET RBN Known Russian Business Network IP UDP (288) (emerging-rbn.rules) 2406576 - ET RBN Known Russian Business Network IP TCP (289) (emerging-rbn.rules) 2406577 - ET RBN Known Russian Business Network IP UDP (289) (emerging-rbn.rules) 2406578 - ET RBN Known Russian Business Network IP TCP (290) (emerging-rbn.rules) 2406579 - ET RBN Known Russian Business Network IP UDP (290) (emerging-rbn.rules) 2406580 - ET RBN Known Russian Business Network IP TCP (291) (emerging-rbn.rules) 2406581 - ET RBN Known Russian Business Network IP UDP (291) (emerging-rbn.rules) 2406582 - ET RBN Known Russian Business Network IP TCP (292) (emerging-rbn.rules) 2406583 - ET RBN Known Russian Business Network IP UDP (292) (emerging-rbn.rules) 2406584 - ET RBN Known Russian Business Network IP TCP (293) (emerging-rbn.rules) 2406585 - ET RBN Known Russian Business Network IP UDP (293) (emerging-rbn.rules) 2406586 - ET RBN Known Russian Business Network IP TCP (294) (emerging-rbn.rules) 2406587 - ET RBN Known Russian Business Network IP UDP (294) (emerging-rbn.rules) 2406588 - ET RBN Known Russian Business Network IP TCP (295) (emerging-rbn.rules) 2406589 - ET RBN Known Russian Business Network IP UDP (295) (emerging-rbn.rules) 2406590 - ET RBN Known Russian Business Network IP TCP (296) (emerging-rbn.rules) 2406591 - ET RBN Known Russian Business Network IP UDP (296) (emerging-rbn.rules) 2406592 - ET RBN Known Russian Business Network IP TCP (297) (emerging-rbn.rules) 2406593 - ET RBN Known Russian Business Network IP UDP (297) (emerging-rbn.rules) 2406594 - ET RBN Known Russian Business Network IP TCP (298) (emerging-rbn.rules) 2406595 - ET RBN Known Russian Business Network IP UDP (298) (emerging-rbn.rules) 2406596 - ET RBN Known Russian Business Network IP TCP (299) (emerging-rbn.rules) 2406597 - ET RBN Known Russian Business Network IP UDP (299) (emerging-rbn.rules) 2406598 - ET RBN Known Russian Business Network IP TCP (300) (emerging-rbn.rules) 2406599 - ET RBN Known Russian Business Network IP UDP (300) (emerging-rbn.rules) 2406600 - ET RBN Known Russian Business Network IP TCP (301) (emerging-rbn.rules) 2406601 - ET RBN Known Russian Business Network IP UDP (301) (emerging-rbn.rules) 2406602 - ET RBN Known Russian Business Network IP TCP (302) (emerging-rbn.rules) 2406603 - ET RBN Known Russian Business Network IP UDP (302) (emerging-rbn.rules) 2406604 - ET RBN Known Russian Business Network IP TCP (303) (emerging-rbn.rules) 2406605 - ET RBN Known Russian Business Network IP UDP (303) (emerging-rbn.rules) 2406606 - ET RBN Known Russian Business Network IP TCP (304) (emerging-rbn.rules) 2406607 - ET RBN Known Russian Business Network IP UDP (304) (emerging-rbn.rules) 2406608 - ET RBN Known Russian Business Network IP TCP (305) (emerging-rbn.rules) 2406609 - ET RBN Known Russian Business Network IP UDP (305) (emerging-rbn.rules) 2406610 - ET RBN Known Russian Business Network IP TCP (306) (emerging-rbn.rules) 2406611 - ET RBN Known Russian Business Network IP UDP (306) (emerging-rbn.rules) 2406612 - ET RBN Known Russian Business Network IP TCP (307) (emerging-rbn.rules) 2406613 - ET RBN Known Russian Business Network IP UDP (307) (emerging-rbn.rules) 2406614 - ET RBN Known Russian Business Network IP TCP (308) (emerging-rbn.rules) 2406615 - ET RBN Known Russian Business Network IP UDP (308) (emerging-rbn.rules) 2406616 - ET RBN Known Russian Business Network IP TCP (309) (emerging-rbn.rules) 2406617 - ET RBN Known Russian Business Network IP UDP (309) (emerging-rbn.rules) 2406618 - ET RBN Known Russian Business Network IP TCP (310) (emerging-rbn.rules) 2406619 - ET RBN Known Russian Business Network IP UDP (310) (emerging-rbn.rules) 2406620 - ET RBN Known Russian Business Network IP TCP (311) (emerging-rbn.rules) 2406621 - ET RBN Known Russian Business Network IP UDP (311) (emerging-rbn.rules) 2406622 - ET RBN Known Russian Business Network IP TCP (312) (emerging-rbn.rules) 2406623 - ET RBN Known Russian Business Network IP UDP (312) (emerging-rbn.rules) 2406624 - ET RBN Known Russian Business Network IP TCP (313) (emerging-rbn.rules) 2406625 - ET RBN Known Russian Business Network IP UDP (313) (emerging-rbn.rules) 2406626 - ET RBN Known Russian Business Network IP TCP (314) (emerging-rbn.rules) 2406627 - ET RBN Known Russian Business Network IP UDP (314) (emerging-rbn.rules) 2406628 - ET RBN Known Russian Business Network IP TCP (315) (emerging-rbn.rules) 2406629 - ET RBN Known Russian Business Network IP UDP (315) (emerging-rbn.rules) 2406630 - ET RBN Known Russian Business Network IP TCP (316) (emerging-rbn.rules) 2406631 - ET RBN Known Russian Business Network IP UDP (316) (emerging-rbn.rules) 2406632 - ET RBN Known Russian Business Network IP TCP (317) (emerging-rbn.rules) 2406633 - ET RBN Known Russian Business Network IP UDP (317) (emerging-rbn.rules) 2406634 - ET RBN Known Russian Business Network IP TCP (318) (emerging-rbn.rules) 2406635 - ET RBN Known Russian Business Network IP UDP (318) (emerging-rbn.rules) 2406636 - ET RBN Known Russian Business Network IP TCP (319) (emerging-rbn.rules) 2406637 - ET RBN Known Russian Business Network IP UDP (319) (emerging-rbn.rules) 2406638 - ET RBN Known Russian Business Network IP TCP (320) (emerging-rbn.rules) 2406639 - ET RBN Known Russian Business Network IP UDP (320) (emerging-rbn.rules) 2406640 - ET RBN Known Russian Business Network IP TCP (321) (emerging-rbn.rules) 2406641 - ET RBN Known Russian Business Network IP UDP (321) (emerging-rbn.rules) 2406642 - ET RBN Known Russian Business Network IP TCP (322) (emerging-rbn.rules) 2406643 - ET RBN Known Russian Business Network IP UDP (322) (emerging-rbn.rules) 2406644 - ET RBN Known Russian Business Network IP TCP (323) (emerging-rbn.rules) 2406645 - ET RBN Known Russian Business Network IP UDP (323) (emerging-rbn.rules) 2406646 - ET RBN Known Russian Business Network IP TCP (324) (emerging-rbn.rules) 2406647 - ET RBN Known Russian Business Network IP UDP (324) (emerging-rbn.rules) 2406648 - ET RBN Known Russian Business Network IP TCP (325) (emerging-rbn.rules) 2406649 - ET RBN Known Russian Business Network IP UDP (325) (emerging-rbn.rules) 2406650 - ET RBN Known Russian Business Network IP TCP (326) (emerging-rbn.rules) 2406651 - ET RBN Known Russian Business Network IP UDP (326) (emerging-rbn.rules) 2406652 - ET RBN Known Russian Business Network IP TCP (327) (emerging-rbn.rules) 2406653 - ET RBN Known Russian Business Network IP UDP (327) (emerging-rbn.rules) 2406654 - ET RBN Known Russian Business Network IP TCP (328) (emerging-rbn.rules) 2406655 - ET RBN Known Russian Business Network IP UDP (328) (emerging-rbn.rules) 2406656 - ET RBN Known Russian Business Network IP TCP (329) (emerging-rbn.rules) 2406657 - ET RBN Known Russian Business Network IP UDP (329) (emerging-rbn.rules) 2406658 - ET RBN Known Russian Business Network IP TCP (330) (emerging-rbn.rules) 2406659 - ET RBN Known Russian Business Network IP UDP (330) (emerging-rbn.rules) 2406660 - ET RBN Known Russian Business Network IP TCP (331) (emerging-rbn.rules) 2406661 - ET RBN Known Russian Business Network IP UDP (331) (emerging-rbn.rules) 2406662 - ET RBN Known Russian Business Network IP TCP (332) (emerging-rbn.rules) 2406663 - ET RBN Known Russian Business Network IP UDP (332) (emerging-rbn.rules) 2406664 - ET RBN Known Russian Business Network IP TCP (333) (emerging-rbn.rules) 2406665 - ET RBN Known Russian Business Network IP UDP (333) (emerging-rbn.rules) 2406666 - ET RBN Known Russian Business Network IP TCP (334) (emerging-rbn.rules) 2406667 - ET RBN Known Russian Business Network IP UDP (334) (emerging-rbn.rules) 2406668 - ET RBN Known Russian Business Network IP TCP (335) (emerging-rbn.rules) 2406669 - ET RBN Known Russian Business Network IP UDP (335) (emerging-rbn.rules) 2406670 - ET RBN Known Russian Business Network IP TCP (336) (emerging-rbn.rules) 2406671 - ET RBN Known Russian Business Network IP UDP (336) (emerging-rbn.rules) 2406672 - ET RBN Known Russian Business Network IP TCP (337) (emerging-rbn.rules) 2406673 - ET RBN Known Russian Business Network IP UDP (337) (emerging-rbn.rules) 2406674 - ET RBN Known Russian Business Network IP TCP (338) (emerging-rbn.rules) 2406675 - ET RBN Known Russian Business Network IP UDP (338) (emerging-rbn.rules) 2406676 - ET RBN Known Russian Business Network IP TCP (339) (emerging-rbn.rules) 2406677 - ET RBN Known Russian Business Network IP UDP (339) (emerging-rbn.rules) 2406678 - ET RBN Known Russian Business Network IP TCP (340) (emerging-rbn.rules) 2406679 - ET RBN Known Russian Business Network IP UDP (340) (emerging-rbn.rules) 2406680 - ET RBN Known Russian Business Network IP TCP (341) (emerging-rbn.rules) 2406681 - ET RBN Known Russian Business Network IP UDP (341) (emerging-rbn.rules) 2406682 - ET RBN Known Russian Business Network IP TCP (342) (emerging-rbn.rules) 2406683 - ET RBN Known Russian Business Network IP UDP (342) (emerging-rbn.rules) 2406684 - ET RBN Known Russian Business Network IP TCP (343) (emerging-rbn.rules) 2406685 - ET RBN Known Russian Business Network IP UDP (343) (emerging-rbn.rules) 2406686 - ET RBN Known Russian Business Network IP TCP (344) (emerging-rbn.rules) 2406687 - ET RBN Known Russian Business Network IP UDP (344) (emerging-rbn.rules) 2406688 - ET RBN Known Russian Business Network IP TCP (345) (emerging-rbn.rules) 2406689 - ET RBN Known Russian Business Network IP UDP (345) (emerging-rbn.rules) 2406690 - ET RBN Known Russian Business Network IP TCP (346) (emerging-rbn.rules) 2406691 - ET RBN Known Russian Business Network IP UDP (346) (emerging-rbn.rules) 2406692 - ET RBN Known Russian Business Network IP TCP (347) (emerging-rbn.rules) 2406693 - ET RBN Known Russian Business Network IP UDP (347) (emerging-rbn.rules) 2406694 - ET RBN Known Russian Business Network IP TCP (348) (emerging-rbn.rules) 2406695 - ET RBN Known Russian Business Network IP UDP (348) (emerging-rbn.rules) 2406696 - ET RBN Known Russian Business Network IP TCP (349) (emerging-rbn.rules) 2406697 - ET RBN Known Russian Business Network IP UDP (349) (emerging-rbn.rules) 2406698 - ET RBN Known Russian Business Network IP TCP (350) (emerging-rbn.rules) 2406699 - ET RBN Known Russian Business Network IP UDP (350) (emerging-rbn.rules) 2406700 - ET RBN Known Russian Business Network IP TCP (351) (emerging-rbn.rules) 2406701 - ET RBN Known Russian Business Network IP UDP (351) (emerging-rbn.rules) 2406702 - ET RBN Known Russian Business Network IP TCP (352) (emerging-rbn.rules) 2406703 - ET RBN Known Russian Business Network IP UDP (352) (emerging-rbn.rules) 2406704 - ET RBN Known Russian Business Network IP TCP (353) (emerging-rbn.rules) 2406705 - ET RBN Known Russian Business Network IP UDP (353) (emerging-rbn.rules) 2406706 - ET RBN Known Russian Business Network IP TCP (354) (emerging-rbn.rules) 2406707 - ET RBN Known Russian Business Network IP UDP (354) (emerging-rbn.rules) 2406708 - ET RBN Known Russian Business Network IP TCP (355) (emerging-rbn.rules) 2406709 - ET RBN Known Russian Business Network IP UDP (355) (emerging-rbn.rules) 2406710 - ET RBN Known Russian Business Network IP TCP (356) (emerging-rbn.rules) 2406711 - ET RBN Known Russian Business Network IP UDP (356) (emerging-rbn.rules) 2406712 - ET RBN Known Russian Business Network IP TCP (357) (emerging-rbn.rules) 2406713 - ET RBN Known Russian Business Network IP UDP (357) (emerging-rbn.rules) 2406714 - ET RBN Known Russian Business Network IP TCP (358) (emerging-rbn.rules) 2406715 - ET RBN Known Russian Business Network IP UDP (358) (emerging-rbn.rules) 2406716 - ET RBN Known Russian Business Network IP TCP (359) (emerging-rbn.rules) 2406717 - ET RBN Known Russian Business Network IP UDP (359) (emerging-rbn.rules) 2406718 - ET RBN Known Russian Business Network IP TCP (360) (emerging-rbn.rules) 2406719 - ET RBN Known Russian Business Network IP UDP (360) (emerging-rbn.rules) 2406720 - ET RBN Known Russian Business Network IP TCP (361) (emerging-rbn.rules) 2406721 - ET RBN Known Russian Business Network IP UDP (361) (emerging-rbn.rules) 2406722 - ET RBN Known Russian Business Network IP TCP (362) (emerging-rbn.rules) 2406723 - ET RBN Known Russian Business Network IP UDP (362) (emerging-rbn.rules) 2406724 - ET RBN Known Russian Business Network IP TCP (363) (emerging-rbn.rules) 2406725 - ET RBN Known Russian Business Network IP UDP (363) (emerging-rbn.rules) 2406726 - ET RBN Known Russian Business Network IP TCP (364) (emerging-rbn.rules) 2406727 - ET RBN Known Russian Business Network IP UDP (364) (emerging-rbn.rules) 2406728 - ET RBN Known Russian Business Network IP TCP (365) (emerging-rbn.rules) 2406729 - ET RBN Known Russian Business Network IP UDP (365) (emerging-rbn.rules) 2406730 - ET RBN Known Russian Business Network IP TCP (366) (emerging-rbn.rules) 2406731 - ET RBN Known Russian Business Network IP UDP (366) (emerging-rbn.rules) 2406732 - ET RBN Known Russian Business Network IP TCP (367) (emerging-rbn.rules) 2406733 - ET RBN Known Russian Business Network IP UDP (367) (emerging-rbn.rules) 2406734 - ET RBN Known Russian Business Network IP TCP (368) (emerging-rbn.rules) 2406735 - ET RBN Known Russian Business Network IP UDP (368) (emerging-rbn.rules) 2406736 - ET RBN Known Russian Business Network IP TCP (369) (emerging-rbn.rules) 2406737 - ET RBN Known Russian Business Network IP UDP (369) (emerging-rbn.rules) 2406738 - ET RBN Known Russian Business Network IP TCP (370) (emerging-rbn.rules) 2406739 - ET RBN Known Russian Business Network IP UDP (370) (emerging-rbn.rules) 2406740 - ET RBN Known Russian Business Network IP TCP (371) (emerging-rbn.rules) 2406741 - ET RBN Known Russian Business Network IP UDP (371) (emerging-rbn.rules) 2406742 - ET RBN Known Russian Business Network IP TCP (372) (emerging-rbn.rules) 2406743 - ET RBN Known Russian Business Network IP UDP (372) (emerging-rbn.rules) 2406744 - ET RBN Known Russian Business Network IP TCP (373) (emerging-rbn.rules) 2406745 - ET RBN Known Russian Business Network IP UDP (373) (emerging-rbn.rules) 2406746 - ET RBN Known Russian Business Network IP TCP (374) (emerging-rbn.rules) 2406747 - ET RBN Known Russian Business Network IP UDP (374) (emerging-rbn.rules) 2406748 - ET RBN Known Russian Business Network IP TCP (375) (emerging-rbn.rules) 2406749 - ET RBN Known Russian Business Network IP UDP (375) (emerging-rbn.rules) 2406750 - ET RBN Known Russian Business Network IP TCP (376) (emerging-rbn.rules) 2406751 - ET RBN Known Russian Business Network IP UDP (376) (emerging-rbn.rules) 2406752 - ET RBN Known Russian Business Network IP TCP (377) (emerging-rbn.rules) 2406753 - ET RBN Known Russian Business Network IP UDP (377) (emerging-rbn.rules) 2406754 - ET RBN Known Russian Business Network IP TCP (378) (emerging-rbn.rules) 2406755 - ET RBN Known Russian Business Network IP UDP (378) (emerging-rbn.rules) 2406756 - ET RBN Known Russian Business Network IP TCP (379) (emerging-rbn.rules) 2406757 - ET RBN Known Russian Business Network IP UDP (379) (emerging-rbn.rules) 2406758 - ET RBN Known Russian Business Network IP TCP (380) (emerging-rbn.rules) 2406759 - ET RBN Known Russian Business Network IP UDP (380) (emerging-rbn.rules) 2406760 - ET RBN Known Russian Business Network IP TCP (381) (emerging-rbn.rules) 2406761 - ET RBN Known Russian Business Network IP UDP (381) (emerging-rbn.rules) 2406762 - ET RBN Known Russian Business Network IP TCP (382) (emerging-rbn.rules) 2406763 - ET RBN Known Russian Business Network IP UDP (382) (emerging-rbn.rules) 2406764 - ET RBN Known Russian Business Network IP TCP (383) (emerging-rbn.rules) 2406765 - ET RBN Known Russian Business Network IP UDP (383) (emerging-rbn.rules) 2406766 - ET RBN Known Russian Business Network IP TCP (384) (emerging-rbn.rules) 2406767 - ET RBN Known Russian Business Network IP UDP (384) (emerging-rbn.rules) 2406768 - ET RBN Known Russian Business Network IP TCP (385) (emerging-rbn.rules) 2406769 - ET RBN Known Russian Business Network IP UDP (385) (emerging-rbn.rules) 2406770 - ET RBN Known Russian Business Network IP TCP (386) (emerging-rbn.rules) 2406771 - ET RBN Known Russian Business Network IP UDP (386) (emerging-rbn.rules) 2406772 - ET RBN Known Russian Business Network IP TCP (387) (emerging-rbn.rules) 2406773 - ET RBN Known Russian Business Network IP UDP (387) (emerging-rbn.rules) 2406774 - ET RBN Known Russian Business Network IP TCP (388) (emerging-rbn.rules) 2406775 - ET RBN Known Russian Business Network IP UDP (388) (emerging-rbn.rules) 2406776 - ET RBN Known Russian Business Network IP TCP (389) (emerging-rbn.rules) 2406777 - ET RBN Known Russian Business Network IP UDP (389) (emerging-rbn.rules) 2406778 - ET RBN Known Russian Business Network IP TCP (390) (emerging-rbn.rules) 2406779 - ET RBN Known Russian Business Network IP UDP (390) (emerging-rbn.rules) 2406780 - ET RBN Known Russian Business Network IP TCP (391) (emerging-rbn.rules) 2406781 - ET RBN Known Russian Business Network IP UDP (391) (emerging-rbn.rules) 2406782 - ET RBN Known Russian Business Network IP TCP (392) (emerging-rbn.rules) 2406783 - ET RBN Known Russian Business Network IP UDP (392) (emerging-rbn.rules) 2406784 - ET RBN Known Russian Business Network IP TCP (393) (emerging-rbn.rules) 2406785 - ET RBN Known Russian Business Network IP UDP (393) (emerging-rbn.rules) 2406786 - ET RBN Known Russian Business Network IP TCP (394) (emerging-rbn.rules) 2406787 - ET RBN Known Russian Business Network IP UDP (394) (emerging-rbn.rules) 2406788 - ET RBN Known Russian Business Network IP TCP (395) (emerging-rbn.rules) 2406789 - ET RBN Known Russian Business Network IP UDP (395) (emerging-rbn.rules) 2406790 - ET RBN Known Russian Business Network IP TCP (396) (emerging-rbn.rules) 2406791 - ET RBN Known Russian Business Network IP UDP (396) (emerging-rbn.rules) 2406792 - ET RBN Known Russian Business Network IP TCP (397) (emerging-rbn.rules) 2406793 - ET RBN Known Russian Business Network IP UDP (397) (emerging-rbn.rules) 2406794 - ET RBN Known Russian Business Network IP TCP (398) (emerging-rbn.rules) 2406795 - ET RBN Known Russian Business Network IP UDP (398) (emerging-rbn.rules) 2406796 - ET RBN Known Russian Business Network IP TCP (399) (emerging-rbn.rules) 2406797 - ET RBN Known Russian Business Network IP UDP (399) (emerging-rbn.rules) 2406798 - ET RBN Known Russian Business Network IP TCP (400) (emerging-rbn.rules) 2406799 - ET RBN Known Russian Business Network IP UDP (400) (emerging-rbn.rules) 2406800 - ET RBN Known Russian Business Network IP TCP (401) (emerging-rbn.rules) 2406801 - ET RBN Known Russian Business Network IP UDP (401) (emerging-rbn.rules) 2406802 - ET RBN Known Russian Business Network IP TCP (402) (emerging-rbn.rules) 2406803 - ET RBN Known Russian Business Network IP UDP (402) (emerging-rbn.rules) 2406804 - ET RBN Known Russian Business Network IP TCP (403) (emerging-rbn.rules) 2406805 - ET RBN Known Russian Business Network IP UDP (403) (emerging-rbn.rules) 2406806 - ET RBN Known Russian Business Network IP TCP (404) (emerging-rbn.rules) 2406807 - ET RBN Known Russian Business Network IP UDP (404) (emerging-rbn.rules) 2406808 - ET RBN Known Russian Business Network IP TCP (405) (emerging-rbn.rules) 2406809 - ET RBN Known Russian Business Network IP UDP (405) (emerging-rbn.rules) 2406810 - ET RBN Known Russian Business Network IP TCP (406) (emerging-rbn.rules) 2406811 - ET RBN Known Russian Business Network IP UDP (406) (emerging-rbn.rules) 2406812 - ET RBN Known Russian Business Network IP TCP (407) (emerging-rbn.rules) 2406813 - ET RBN Known Russian Business Network IP UDP (407) (emerging-rbn.rules) 2406814 - ET RBN Known Russian Business Network IP TCP (408) (emerging-rbn.rules) 2406815 - ET RBN Known Russian Business Network IP UDP (408) (emerging-rbn.rules) 2406816 - ET RBN Known Russian Business Network IP TCP (409) (emerging-rbn.rules) 2406817 - ET RBN Known Russian Business Network IP UDP (409) (emerging-rbn.rules) 2406818 - ET RBN Known Russian Business Network IP TCP (410) (emerging-rbn.rules) 2406819 - ET RBN Known Russian Business Network IP UDP (410) (emerging-rbn.rules) 2406820 - ET RBN Known Russian Business Network IP TCP (411) (emerging-rbn.rules) 2406821 - ET RBN Known Russian Business Network IP UDP (411) (emerging-rbn.rules) 2406822 - ET RBN Known Russian Business Network IP TCP (412) (emerging-rbn.rules) 2406823 - ET RBN Known Russian Business Network IP UDP (412) (emerging-rbn.rules) 2406824 - ET RBN Known Russian Business Network IP TCP (413) (emerging-rbn.rules) 2406825 - ET RBN Known Russian Business Network IP UDP (413) (emerging-rbn.rules) 2406826 - ET RBN Known Russian Business Network IP TCP (414) (emerging-rbn.rules) 2406827 - ET RBN Known Russian Business Network IP UDP (414) (emerging-rbn.rules) 2406828 - ET RBN Known Russian Business Network IP TCP (415) (emerging-rbn.rules) 2406829 - ET RBN Known Russian Business Network IP UDP (415) (emerging-rbn.rules) 2406830 - ET RBN Known Russian Business Network IP TCP (416) (emerging-rbn.rules) 2406831 - ET RBN Known Russian Business Network IP UDP (416) (emerging-rbn.rules) 2406832 - ET RBN Known Russian Business Network IP TCP (417) (emerging-rbn.rules) 2406833 - ET RBN Known Russian Business Network IP UDP (417) (emerging-rbn.rules) 2406834 - ET RBN Known Russian Business Network IP TCP (418) (emerging-rbn.rules) 2406835 - ET RBN Known Russian Business Network IP UDP (418) (emerging-rbn.rules) 2406836 - ET RBN Known Russian Business Network IP TCP (419) (emerging-rbn.rules) 2406837 - ET RBN Known Russian Business Network IP UDP (419) (emerging-rbn.rules) 2406838 - ET RBN Known Russian Business Network IP TCP (420) (emerging-rbn.rules) 2406839 - ET RBN Known Russian Business Network IP UDP (420) (emerging-rbn.rules) 2406840 - ET RBN Known Russian Business Network IP TCP (421) (emerging-rbn.rules) 2406841 - ET RBN Known Russian Business Network IP UDP (421) (emerging-rbn.rules) 2406842 - ET RBN Known Russian Business Network IP TCP (422) (emerging-rbn.rules) 2406843 - ET RBN Known Russian Business Network IP UDP (422) (emerging-rbn.rules) 2406844 - ET RBN Known Russian Business Network IP TCP (423) (emerging-rbn.rules) 2406845 - ET RBN Known Russian Business Network IP UDP (423) (emerging-rbn.rules) 2406846 - ET RBN Known Russian Business Network IP TCP (424) (emerging-rbn.rules) 2406847 - ET RBN Known Russian Business Network IP UDP (424) (emerging-rbn.rules) 2406848 - ET RBN Known Russian Business Network IP TCP (425) (emerging-rbn.rules) 2406849 - ET RBN Known Russian Business Network IP UDP (425) (emerging-rbn.rules) 2406850 - ET RBN Known Russian Business Network IP TCP (426) (emerging-rbn.rules) 2406851 - ET RBN Known Russian Business Network IP UDP (426) (emerging-rbn.rules) 2406852 - ET RBN Known Russian Business Network IP TCP (427) (emerging-rbn.rules) 2406853 - ET RBN Known Russian Business Network IP UDP (427) (emerging-rbn.rules) 2406854 - ET RBN Known Russian Business Network IP TCP (428) (emerging-rbn.rules) 2406855 - ET RBN Known Russian Business Network IP UDP (428) (emerging-rbn.rules) 2406856 - ET RBN Known Russian Business Network IP TCP (429) (emerging-rbn.rules) 2406857 - ET RBN Known Russian Business Network IP UDP (429) (emerging-rbn.rules) 2406858 - ET RBN Known Russian Business Network IP TCP (430) (emerging-rbn.rules) 2406859 - ET RBN Known Russian Business Network IP UDP (430) (emerging-rbn.rules) 2406860 - ET RBN Known Russian Business Network IP TCP (431) (emerging-rbn.rules) 2406861 - ET RBN Known Russian Business Network IP UDP (431) (emerging-rbn.rules) 2406862 - ET RBN Known Russian Business Network IP TCP (432) (emerging-rbn.rules) 2406863 - ET RBN Known Russian Business Network IP UDP (432) (emerging-rbn.rules) 2406864 - ET RBN Known Russian Business Network IP TCP (433) (emerging-rbn.rules) 2406865 - ET RBN Known Russian Business Network IP UDP (433) (emerging-rbn.rules) 2406866 - ET RBN Known Russian Business Network IP TCP (434) (emerging-rbn.rules) 2406867 - ET RBN Known Russian Business Network IP UDP (434) (emerging-rbn.rules) 2406868 - ET RBN Known Russian Business Network IP TCP (435) (emerging-rbn.rules) 2406869 - ET RBN Known Russian Business Network IP UDP (435) (emerging-rbn.rules) 2406870 - ET RBN Known Russian Business Network IP TCP (436) (emerging-rbn.rules) 2406871 - ET RBN Known Russian Business Network IP UDP (436) (emerging-rbn.rules) 2406872 - ET RBN Known Russian Business Network IP TCP (437) (emerging-rbn.rules) 2406873 - ET RBN Known Russian Business Network IP UDP (437) (emerging-rbn.rules) 2406874 - ET RBN Known Russian Business Network IP TCP (438) (emerging-rbn.rules) 2406875 - ET RBN Known Russian Business Network IP UDP (438) (emerging-rbn.rules) 2406876 - ET RBN Known Russian Business Network IP TCP (439) (emerging-rbn.rules) 2406877 - ET RBN Known Russian Business Network IP UDP (439) (emerging-rbn.rules) 2406878 - ET RBN Known Russian Business Network IP TCP (440) (emerging-rbn.rules) 2406879 - ET RBN Known Russian Business Network IP UDP (440) (emerging-rbn.rules) 2406880 - ET RBN Known Russian Business Network IP TCP (441) (emerging-rbn.rules) 2406881 - ET RBN Known Russian Business Network IP UDP (441) (emerging-rbn.rules) 2407000 - ET RBN Known Russian Business Network IP TCP - BLOCKING (1) (emerging-rbn-BLOCK.rules) 2407001 - ET RBN Known Russian Business Network IP UDP - BLOCKING (1) (emerging-rbn-BLOCK.rules) 2407002 - ET RBN Known Russian Business Network IP TCP - BLOCKING (2) (emerging-rbn-BLOCK.rules) 2407003 - ET RBN Known Russian Business Network IP UDP - BLOCKING (2) (emerging-rbn-BLOCK.rules) 2407004 - ET RBN Known Russian Business Network IP TCP - BLOCKING (3) (emerging-rbn-BLOCK.rules) 2407005 - ET RBN Known Russian Business Network IP UDP - BLOCKING (3) (emerging-rbn-BLOCK.rules) 2407006 - ET RBN Known Russian Business Network IP TCP - BLOCKING (4) (emerging-rbn-BLOCK.rules) 2407007 - ET RBN Known Russian Business Network IP UDP - BLOCKING (4) (emerging-rbn-BLOCK.rules) 2407008 - ET RBN Known Russian Business Network IP TCP - BLOCKING (5) (emerging-rbn-BLOCK.rules) 2407009 - ET RBN Known Russian Business Network IP UDP - BLOCKING (5) (emerging-rbn-BLOCK.rules) 2407010 - ET RBN Known Russian Business Network IP TCP - BLOCKING (6) (emerging-rbn-BLOCK.rules) 2407011 - ET RBN Known Russian Business Network IP UDP - BLOCKING (6) (emerging-rbn-BLOCK.rules) 2407012 - ET RBN Known Russian Business Network IP TCP - BLOCKING (7) (emerging-rbn-BLOCK.rules) 2407013 - ET RBN Known Russian Business Network IP UDP - BLOCKING (7) (emerging-rbn-BLOCK.rules) 2407014 - ET RBN Known Russian Business Network IP TCP - BLOCKING (8) (emerging-rbn-BLOCK.rules) 2407015 - ET RBN Known Russian Business Network IP UDP - BLOCKING (8) (emerging-rbn-BLOCK.rules) 2407016 - ET RBN Known Russian Business Network IP TCP - BLOCKING (9) (emerging-rbn-BLOCK.rules) 2407017 - ET RBN Known Russian Business Network IP UDP - BLOCKING (9) (emerging-rbn-BLOCK.rules) 2407018 - ET RBN Known Russian Business Network IP TCP - BLOCKING (10) (emerging-rbn-BLOCK.rules) 2407019 - ET RBN Known Russian Business Network IP UDP - BLOCKING (10) (emerging-rbn-BLOCK.rules) 2407020 - ET RBN Known Russian Business Network IP TCP - BLOCKING (11) (emerging-rbn-BLOCK.rules) 2407021 - ET RBN Known Russian Business Network IP UDP - BLOCKING (11) (emerging-rbn-BLOCK.rules) 2407022 - ET RBN Known Russian Business Network IP TCP - BLOCKING (12) (emerging-rbn-BLOCK.rules) 2407023 - ET RBN Known Russian Business Network IP UDP - BLOCKING (12) (emerging-rbn-BLOCK.rules) 2407024 - ET RBN Known Russian Business Network IP TCP - BLOCKING (13) (emerging-rbn-BLOCK.rules) 2407025 - ET RBN Known Russian Business Network IP UDP - BLOCKING (13) (emerging-rbn-BLOCK.rules) 2407026 - ET RBN Known Russian Business Network IP TCP - BLOCKING (14) (emerging-rbn-BLOCK.rules) 2407027 - ET RBN Known Russian Business Network IP UDP - BLOCKING (14) (emerging-rbn-BLOCK.rules) 2407028 - ET RBN Known Russian Business Network IP TCP - BLOCKING (15) (emerging-rbn-BLOCK.rules) 2407029 - ET RBN Known Russian Business Network IP UDP - BLOCKING (15) (emerging-rbn-BLOCK.rules) 2407030 - ET RBN Known Russian Business Network IP TCP - BLOCKING (16) (emerging-rbn-BLOCK.rules) 2407031 - ET RBN Known Russian Business Network IP UDP - BLOCKING (16) (emerging-rbn-BLOCK.rules) 2407032 - ET RBN Known Russian Business Network IP TCP - BLOCKING (17) (emerging-rbn-BLOCK.rules) 2407033 - ET RBN Known Russian Business Network IP UDP - BLOCKING (17) (emerging-rbn-BLOCK.rules) 2407034 - ET RBN Known Russian Business Network IP TCP - BLOCKING (18) (emerging-rbn-BLOCK.rules) 2407035 - ET RBN Known Russian Business Network IP UDP - BLOCKING (18) (emerging-rbn-BLOCK.rules) 2407036 - ET RBN Known Russian Business Network IP TCP - BLOCKING (19) (emerging-rbn-BLOCK.rules) 2407037 - ET RBN Known Russian Business Network IP UDP - BLOCKING (19) (emerging-rbn-BLOCK.rules) 2407038 - ET RBN Known Russian Business Network IP TCP - BLOCKING (20) (emerging-rbn-BLOCK.rules) 2407039 - ET RBN Known Russian Business Network IP UDP - BLOCKING (20) (emerging-rbn-BLOCK.rules) 2407040 - ET RBN Known Russian Business Network IP TCP - BLOCKING (21) (emerging-rbn-BLOCK.rules) 2407041 - ET RBN Known Russian Business Network IP UDP - BLOCKING (21) (emerging-rbn-BLOCK.rules) 2407042 - ET RBN Known Russian Business Network IP TCP - BLOCKING (22) (emerging-rbn-BLOCK.rules) 2407043 - ET RBN Known Russian Business Network IP UDP - BLOCKING (22) (emerging-rbn-BLOCK.rules) 2407044 - ET RBN Known Russian Business Network IP TCP - BLOCKING (23) (emerging-rbn-BLOCK.rules) 2407045 - ET RBN Known Russian Business Network IP UDP - BLOCKING (23) (emerging-rbn-BLOCK.rules) 2407046 - ET RBN Known Russian Business Network IP TCP - BLOCKING (24) (emerging-rbn-BLOCK.rules) 2407047 - ET RBN Known Russian Business Network IP UDP - BLOCKING (24) (emerging-rbn-BLOCK.rules) 2407048 - ET RBN Known Russian Business Network IP TCP - BLOCKING (25) (emerging-rbn-BLOCK.rules) 2407049 - ET RBN Known Russian Business Network IP UDP - BLOCKING (25) (emerging-rbn-BLOCK.rules) 2407050 - ET RBN Known Russian Business Network IP TCP - BLOCKING (26) (emerging-rbn-BLOCK.rules) 2407051 - ET RBN Known Russian Business Network IP UDP - BLOCKING (26) (emerging-rbn-BLOCK.rules) 2407052 - ET RBN Known Russian Business Network IP TCP - BLOCKING (27) (emerging-rbn-BLOCK.rules) 2407053 - ET RBN Known Russian Business Network IP UDP - BLOCKING (27) (emerging-rbn-BLOCK.rules) 2407054 - ET RBN Known Russian Business Network IP TCP - BLOCKING (28) (emerging-rbn-BLOCK.rules) 2407055 - ET RBN Known Russian Business Network IP UDP - BLOCKING (28) (emerging-rbn-BLOCK.rules) 2407056 - ET RBN Known Russian Business Network IP TCP - BLOCKING (29) (emerging-rbn-BLOCK.rules) 2407057 - ET RBN Known Russian Business Network IP UDP - BLOCKING (29) (emerging-rbn-BLOCK.rules) 2407058 - ET RBN Known Russian Business Network IP TCP - BLOCKING (30) (emerging-rbn-BLOCK.rules) 2407059 - ET RBN Known Russian Business Network IP UDP - BLOCKING (30) (emerging-rbn-BLOCK.rules) 2407060 - ET RBN Known Russian Business Network IP TCP - BLOCKING (31) (emerging-rbn-BLOCK.rules) 2407061 - ET RBN Known Russian Business Network IP UDP - BLOCKING (31) (emerging-rbn-BLOCK.rules) 2407062 - ET RBN Known Russian Business Network IP TCP - BLOCKING (32) (emerging-rbn-BLOCK.rules) 2407063 - ET RBN Known Russian Business Network IP UDP - BLOCKING (32) (emerging-rbn-BLOCK.rules) 2407064 - ET RBN Known Russian Business Network IP TCP - BLOCKING (33) (emerging-rbn-BLOCK.rules) 2407065 - ET RBN Known Russian Business Network IP UDP - BLOCKING (33) (emerging-rbn-BLOCK.rules) 2407066 - ET RBN Known Russian Business Network IP TCP - BLOCKING (34) (emerging-rbn-BLOCK.rules) 2407067 - ET RBN Known Russian Business Network IP UDP - BLOCKING (34) (emerging-rbn-BLOCK.rules) 2407068 - ET RBN Known Russian Business Network IP TCP - BLOCKING (35) (emerging-rbn-BLOCK.rules) 2407069 - ET RBN Known Russian Business Network IP UDP - BLOCKING (35) (emerging-rbn-BLOCK.rules) 2407070 - ET RBN Known Russian Business Network IP TCP - BLOCKING (36) (emerging-rbn-BLOCK.rules) 2407071 - ET RBN Known Russian Business Network IP UDP - BLOCKING (36) (emerging-rbn-BLOCK.rules) 2407072 - ET RBN Known Russian Business Network IP TCP - BLOCKING (37) (emerging-rbn-BLOCK.rules) 2407073 - ET RBN Known Russian Business Network IP UDP - BLOCKING (37) (emerging-rbn-BLOCK.rules) 2407074 - ET RBN Known Russian Business Network IP TCP - BLOCKING (38) (emerging-rbn-BLOCK.rules) 2407075 - ET RBN Known Russian Business Network IP UDP - BLOCKING (38) (emerging-rbn-BLOCK.rules) 2407076 - ET RBN Known Russian Business Network IP TCP - BLOCKING (39) (emerging-rbn-BLOCK.rules) 2407077 - ET RBN Known Russian Business Network IP UDP - BLOCKING (39) (emerging-rbn-BLOCK.rules) 2407078 - ET RBN Known Russian Business Network IP TCP - BLOCKING (40) (emerging-rbn-BLOCK.rules) 2407079 - ET RBN Known Russian Business Network IP UDP - BLOCKING (40) (emerging-rbn-BLOCK.rules) 2407080 - ET RBN Known Russian Business Network IP TCP - BLOCKING (41) (emerging-rbn-BLOCK.rules) 2407081 - ET RBN Known Russian Business Network IP UDP - BLOCKING (41) (emerging-rbn-BLOCK.rules) 2407082 - ET RBN Known Russian Business Network IP TCP - BLOCKING (42) (emerging-rbn-BLOCK.rules) 2407083 - ET RBN Known Russian Business Network IP UDP - BLOCKING (42) (emerging-rbn-BLOCK.rules) 2407084 - ET RBN Known Russian Business Network IP TCP - BLOCKING (43) (emerging-rbn-BLOCK.rules) 2407085 - ET RBN Known Russian Business Network IP UDP - BLOCKING (43) (emerging-rbn-BLOCK.rules) 2407086 - ET RBN Known Russian Business Network IP TCP - BLOCKING (44) (emerging-rbn-BLOCK.rules) 2407087 - ET RBN Known Russian Business Network IP UDP - BLOCKING (44) (emerging-rbn-BLOCK.rules) 2407088 - ET RBN Known Russian Business Network IP TCP - BLOCKING (45) (emerging-rbn-BLOCK.rules) 2407089 - ET RBN Known Russian Business Network IP UDP - BLOCKING (45) (emerging-rbn-BLOCK.rules) 2407090 - ET RBN Known Russian Business Network IP TCP - BLOCKING (46) (emerging-rbn-BLOCK.rules) 2407091 - ET RBN Known Russian Business Network IP UDP - BLOCKING (46) (emerging-rbn-BLOCK.rules) 2407092 - ET RBN Known Russian Business Network IP TCP - BLOCKING (47) (emerging-rbn-BLOCK.rules) 2407093 - ET RBN Known Russian Business Network IP UDP - BLOCKING (47) (emerging-rbn-BLOCK.rules) 2407094 - ET RBN Known Russian Business Network IP TCP - BLOCKING (48) (emerging-rbn-BLOCK.rules) 2407095 - ET RBN Known Russian Business Network IP UDP - BLOCKING (48) (emerging-rbn-BLOCK.rules) 2407096 - ET RBN Known Russian Business Network IP TCP - BLOCKING (49) (emerging-rbn-BLOCK.rules) 2407097 - ET RBN Known Russian Business Network IP UDP - BLOCKING (49) (emerging-rbn-BLOCK.rules) 2407098 - ET RBN Known Russian Business Network IP TCP - BLOCKING (50) (emerging-rbn-BLOCK.rules) 2407099 - ET RBN Known Russian Business Network IP UDP - BLOCKING (50) (emerging-rbn-BLOCK.rules) 2407100 - ET RBN Known Russian Business Network IP TCP - BLOCKING (51) (emerging-rbn-BLOCK.rules) 2407101 - ET RBN Known Russian Business Network IP UDP - BLOCKING (51) (emerging-rbn-BLOCK.rules) 2407102 - ET RBN Known Russian Business Network IP TCP - BLOCKING (52) (emerging-rbn-BLOCK.rules) 2407103 - ET RBN Known Russian Business Network IP UDP - BLOCKING (52) (emerging-rbn-BLOCK.rules) 2407104 - ET RBN Known Russian Business Network IP TCP - BLOCKING (53) (emerging-rbn-BLOCK.rules) 2407105 - ET RBN Known Russian Business Network IP UDP - BLOCKING (53) (emerging-rbn-BLOCK.rules) 2407106 - ET RBN Known Russian Business Network IP TCP - BLOCKING (54) (emerging-rbn-BLOCK.rules) 2407107 - ET RBN Known Russian Business Network IP UDP - BLOCKING (54) (emerging-rbn-BLOCK.rules) 2407108 - ET RBN Known Russian Business Network IP TCP - BLOCKING (55) (emerging-rbn-BLOCK.rules) 2407109 - ET RBN Known Russian Business Network IP UDP - BLOCKING (55) (emerging-rbn-BLOCK.rules) 2407110 - ET RBN Known Russian Business Network IP TCP - BLOCKING (56) (emerging-rbn-BLOCK.rules) 2407111 - ET RBN Known Russian Business Network IP UDP - BLOCKING (56) (emerging-rbn-BLOCK.rules) 2407112 - ET RBN Known Russian Business Network IP TCP - BLOCKING (57) (emerging-rbn-BLOCK.rules) 2407113 - ET RBN Known Russian Business Network IP UDP - BLOCKING (57) (emerging-rbn-BLOCK.rules) 2407114 - ET RBN Known Russian Business Network IP TCP - BLOCKING (58) (emerging-rbn-BLOCK.rules) 2407115 - ET RBN Known Russian Business Network IP UDP - BLOCKING (58) (emerging-rbn-BLOCK.rules) 2407116 - ET RBN Known Russian Business Network IP TCP - BLOCKING (59) (emerging-rbn-BLOCK.rules) 2407117 - ET RBN Known Russian Business Network IP UDP - BLOCKING (59) (emerging-rbn-BLOCK.rules) 2407118 - ET RBN Known Russian Business Network IP TCP - BLOCKING (60) (emerging-rbn-BLOCK.rules) 2407119 - ET RBN Known Russian Business Network IP UDP - BLOCKING (60) (emerging-rbn-BLOCK.rules) 2407120 - ET RBN Known Russian Business Network IP TCP - BLOCKING (61) (emerging-rbn-BLOCK.rules) 2407121 - ET RBN Known Russian Business Network IP UDP - BLOCKING (61) (emerging-rbn-BLOCK.rules) 2407122 - ET RBN Known Russian Business Network IP TCP - BLOCKING (62) (emerging-rbn-BLOCK.rules) 2407123 - ET RBN Known Russian Business Network IP UDP - BLOCKING (62) (emerging-rbn-BLOCK.rules) 2407124 - ET RBN Known Russian Business Network IP TCP - BLOCKING (63) (emerging-rbn-BLOCK.rules) 2407125 - ET RBN Known Russian Business Network IP UDP - BLOCKING (63) (emerging-rbn-BLOCK.rules) 2407126 - ET RBN Known Russian Business Network IP TCP - BLOCKING (64) (emerging-rbn-BLOCK.rules) 2407127 - ET RBN Known Russian Business Network IP UDP - BLOCKING (64) (emerging-rbn-BLOCK.rules) 2407128 - ET RBN Known Russian Business Network IP TCP - BLOCKING (65) (emerging-rbn-BLOCK.rules) 2407129 - ET RBN Known Russian Business Network IP UDP - BLOCKING (65) (emerging-rbn-BLOCK.rules) 2407130 - ET RBN Known Russian Business Network IP TCP - BLOCKING (66) (emerging-rbn-BLOCK.rules) 2407131 - ET RBN Known Russian Business Network IP UDP - BLOCKING (66) (emerging-rbn-BLOCK.rules) 2407132 - ET RBN Known Russian Business Network IP TCP - BLOCKING (67) (emerging-rbn-BLOCK.rules) 2407133 - ET RBN Known Russian Business Network IP UDP - BLOCKING (67) (emerging-rbn-BLOCK.rules) 2407134 - ET RBN Known Russian Business Network IP TCP - BLOCKING (68) (emerging-rbn-BLOCK.rules) 2407135 - ET RBN Known Russian Business Network IP UDP - BLOCKING (68) (emerging-rbn-BLOCK.rules) 2407136 - ET RBN Known Russian Business Network IP TCP - BLOCKING (69) (emerging-rbn-BLOCK.rules) 2407137 - ET RBN Known Russian Business Network IP UDP - BLOCKING (69) (emerging-rbn-BLOCK.rules) 2407138 - ET RBN Known Russian Business Network IP TCP - BLOCKING (70) (emerging-rbn-BLOCK.rules) 2407139 - ET RBN Known Russian Business Network IP UDP - BLOCKING (70) (emerging-rbn-BLOCK.rules) 2407140 - ET RBN Known Russian Business Network IP TCP - BLOCKING (71) (emerging-rbn-BLOCK.rules) 2407141 - ET RBN Known Russian Business Network IP UDP - BLOCKING (71) (emerging-rbn-BLOCK.rules) 2407142 - ET RBN Known Russian Business Network IP TCP - BLOCKING (72) (emerging-rbn-BLOCK.rules) 2407143 - ET RBN Known Russian Business Network IP UDP - BLOCKING (72) (emerging-rbn-BLOCK.rules) 2407144 - ET RBN Known Russian Business Network IP TCP - BLOCKING (73) (emerging-rbn-BLOCK.rules) 2407145 - ET RBN Known Russian Business Network IP UDP - BLOCKING (73) (emerging-rbn-BLOCK.rules) 2407146 - ET RBN Known Russian Business Network IP TCP - BLOCKING (74) (emerging-rbn-BLOCK.rules) 2407147 - ET RBN Known Russian Business Network IP UDP - BLOCKING (74) (emerging-rbn-BLOCK.rules) 2407148 - ET RBN Known Russian Business Network IP TCP - BLOCKING (75) (emerging-rbn-BLOCK.rules) 2407149 - ET RBN Known Russian Business Network IP UDP - BLOCKING (75) (emerging-rbn-BLOCK.rules) 2407150 - ET RBN Known Russian Business Network IP TCP - BLOCKING (76) (emerging-rbn-BLOCK.rules) 2407151 - ET RBN Known Russian Business Network IP UDP - BLOCKING (76) (emerging-rbn-BLOCK.rules) 2407152 - ET RBN Known Russian Business Network IP TCP - BLOCKING (77) (emerging-rbn-BLOCK.rules) 2407153 - ET RBN Known Russian Business Network IP UDP - BLOCKING (77) (emerging-rbn-BLOCK.rules) 2407154 - ET RBN Known Russian Business Network IP TCP - BLOCKING (78) (emerging-rbn-BLOCK.rules) 2407155 - ET RBN Known Russian Business Network IP UDP - BLOCKING (78) (emerging-rbn-BLOCK.rules) 2407156 - ET RBN Known Russian Business Network IP TCP - BLOCKING (79) (emerging-rbn-BLOCK.rules) 2407157 - ET RBN Known Russian Business Network IP UDP - BLOCKING (79) (emerging-rbn-BLOCK.rules) 2407158 - ET RBN Known Russian Business Network IP TCP - BLOCKING (80) (emerging-rbn-BLOCK.rules) 2407159 - ET RBN Known Russian Business Network IP UDP - BLOCKING (80) (emerging-rbn-BLOCK.rules) 2407160 - ET RBN Known Russian Business Network IP TCP - BLOCKING (81) (emerging-rbn-BLOCK.rules) 2407161 - ET RBN Known Russian Business Network IP UDP - BLOCKING (81) (emerging-rbn-BLOCK.rules) 2407162 - ET RBN Known Russian Business Network IP TCP - BLOCKING (82) (emerging-rbn-BLOCK.rules) 2407163 - ET RBN Known Russian Business Network IP UDP - BLOCKING (82) (emerging-rbn-BLOCK.rules) 2407164 - ET RBN Known Russian Business Network IP TCP - BLOCKING (83) (emerging-rbn-BLOCK.rules) 2407165 - ET RBN Known Russian Business Network IP UDP - BLOCKING (83) (emerging-rbn-BLOCK.rules) 2407166 - ET RBN Known Russian Business Network IP TCP - BLOCKING (84) (emerging-rbn-BLOCK.rules) 2407167 - ET RBN Known Russian Business Network IP UDP - BLOCKING (84) (emerging-rbn-BLOCK.rules) 2407168 - ET RBN Known Russian Business Network IP TCP - BLOCKING (85) (emerging-rbn-BLOCK.rules) 2407169 - ET RBN Known Russian Business Network IP UDP - BLOCKING (85) (emerging-rbn-BLOCK.rules) 2407170 - ET RBN Known Russian Business Network IP TCP - BLOCKING (86) (emerging-rbn-BLOCK.rules) 2407171 - ET RBN Known Russian Business Network IP UDP - BLOCKING (86) (emerging-rbn-BLOCK.rules) 2407172 - ET RBN Known Russian Business Network IP TCP - BLOCKING (87) (emerging-rbn-BLOCK.rules) 2407173 - ET RBN Known Russian Business Network IP UDP - BLOCKING (87) (emerging-rbn-BLOCK.rules) 2407174 - ET RBN Known Russian Business Network IP TCP - BLOCKING (88) (emerging-rbn-BLOCK.rules) 2407175 - ET RBN Known Russian Business Network IP UDP - BLOCKING (88) (emerging-rbn-BLOCK.rules) 2407176 - ET RBN Known Russian Business Network IP TCP - BLOCKING (89) (emerging-rbn-BLOCK.rules) 2407177 - ET RBN Known Russian Business Network IP UDP - BLOCKING (89) (emerging-rbn-BLOCK.rules) 2407178 - ET RBN Known Russian Business Network IP TCP - BLOCKING (90) (emerging-rbn-BLOCK.rules) 2407179 - ET RBN Known Russian Business Network IP UDP - BLOCKING (90) (emerging-rbn-BLOCK.rules) 2407180 - ET RBN Known Russian Business Network IP TCP - BLOCKING (91) (emerging-rbn-BLOCK.rules) 2407181 - ET RBN Known Russian Business Network IP UDP - BLOCKING (91) (emerging-rbn-BLOCK.rules) 2407182 - ET RBN Known Russian Business Network IP TCP - BLOCKING (92) (emerging-rbn-BLOCK.rules) 2407183 - ET RBN Known Russian Business Network IP UDP - BLOCKING (92) (emerging-rbn-BLOCK.rules) 2407184 - ET RBN Known Russian Business Network IP TCP - BLOCKING (93) (emerging-rbn-BLOCK.rules) 2407185 - ET RBN Known Russian Business Network IP UDP - BLOCKING (93) (emerging-rbn-BLOCK.rules) 2407186 - ET RBN Known Russian Business Network IP TCP - BLOCKING (94) (emerging-rbn-BLOCK.rules) 2407187 - ET RBN Known Russian Business Network IP UDP - BLOCKING (94) (emerging-rbn-BLOCK.rules) 2407188 - ET RBN Known Russian Business Network IP TCP - BLOCKING (95) (emerging-rbn-BLOCK.rules) 2407189 - ET RBN Known Russian Business Network IP UDP - BLOCKING (95) (emerging-rbn-BLOCK.rules) 2407190 - ET RBN Known Russian Business Network IP TCP - BLOCKING (96) (emerging-rbn-BLOCK.rules) 2407191 - ET RBN Known Russian Business Network IP UDP - BLOCKING (96) (emerging-rbn-BLOCK.rules) 2407192 - ET RBN Known Russian Business Network IP TCP - BLOCKING (97) (emerging-rbn-BLOCK.rules) 2407193 - ET RBN Known Russian Business Network IP UDP - BLOCKING (97) (emerging-rbn-BLOCK.rules) 2407194 - ET RBN Known Russian Business Network IP TCP - BLOCKING (98) (emerging-rbn-BLOCK.rules) 2407195 - ET RBN Known Russian Business Network IP UDP - BLOCKING (98) (emerging-rbn-BLOCK.rules) 2407196 - ET RBN Known Russian Business Network IP TCP - BLOCKING (99) (emerging-rbn-BLOCK.rules) 2407197 - ET RBN Known Russian Business Network IP UDP - BLOCKING (99) (emerging-rbn-BLOCK.rules) 2407198 - ET RBN Known Russian Business Network IP TCP - BLOCKING (100) (emerging-rbn-BLOCK.rules) 2407199 - ET RBN Known Russian Business Network IP UDP - BLOCKING (100) (emerging-rbn-BLOCK.rules) 2407200 - ET RBN Known Russian Business Network IP TCP - BLOCKING (101) (emerging-rbn-BLOCK.rules) 2407201 - ET RBN Known Russian Business Network IP UDP - BLOCKING (101) (emerging-rbn-BLOCK.rules) 2407202 - ET RBN Known Russian Business Network IP TCP - BLOCKING (102) (emerging-rbn-BLOCK.rules) 2407203 - ET RBN Known Russian Business Network IP UDP - BLOCKING (102) (emerging-rbn-BLOCK.rules) 2407204 - ET RBN Known Russian Business Network IP TCP - BLOCKING (103) (emerging-rbn-BLOCK.rules) 2407205 - ET RBN Known Russian Business Network IP UDP - BLOCKING (103) (emerging-rbn-BLOCK.rules) 2407206 - ET RBN Known Russian Business Network IP TCP - BLOCKING (104) (emerging-rbn-BLOCK.rules) 2407207 - ET RBN Known Russian Business Network IP UDP - BLOCKING (104) (emerging-rbn-BLOCK.rules) 2407208 - ET RBN Known Russian Business Network IP TCP - BLOCKING (105) (emerging-rbn-BLOCK.rules) 2407209 - ET RBN Known Russian Business Network IP UDP - BLOCKING (105) (emerging-rbn-BLOCK.rules) 2407210 - ET RBN Known Russian Business Network IP TCP - BLOCKING (106) (emerging-rbn-BLOCK.rules) 2407211 - ET RBN Known Russian Business Network IP UDP - BLOCKING (106) (emerging-rbn-BLOCK.rules) 2407212 - ET RBN Known Russian Business Network IP TCP - BLOCKING (107) (emerging-rbn-BLOCK.rules) 2407213 - ET RBN Known Russian Business Network IP UDP - BLOCKING (107) (emerging-rbn-BLOCK.rules) 2407214 - ET RBN Known Russian Business Network IP TCP - BLOCKING (108) (emerging-rbn-BLOCK.rules) 2407215 - ET RBN Known Russian Business Network IP UDP - BLOCKING (108) (emerging-rbn-BLOCK.rules) 2407216 - ET RBN Known Russian Business Network IP TCP - BLOCKING (109) (emerging-rbn-BLOCK.rules) 2407217 - ET RBN Known Russian Business Network IP UDP - BLOCKING (109) (emerging-rbn-BLOCK.rules) 2407218 - ET RBN Known Russian Business Network IP TCP - BLOCKING (110) (emerging-rbn-BLOCK.rules) 2407219 - ET RBN Known Russian Business Network IP UDP - BLOCKING (110) (emerging-rbn-BLOCK.rules) 2407220 - ET RBN Known Russian Business Network IP TCP - BLOCKING (111) (emerging-rbn-BLOCK.rules) 2407221 - ET RBN Known Russian Business Network IP UDP - BLOCKING (111) (emerging-rbn-BLOCK.rules) 2407222 - ET RBN Known Russian Business Network IP TCP - BLOCKING (112) (emerging-rbn-BLOCK.rules) 2407223 - ET RBN Known Russian Business Network IP UDP - BLOCKING (112) (emerging-rbn-BLOCK.rules) 2407224 - ET RBN Known Russian Business Network IP TCP - BLOCKING (113) (emerging-rbn-BLOCK.rules) 2407225 - ET RBN Known Russian Business Network IP UDP - BLOCKING (113) (emerging-rbn-BLOCK.rules) 2407226 - ET RBN Known Russian Business Network IP TCP - BLOCKING (114) (emerging-rbn-BLOCK.rules) 2407227 - ET RBN Known Russian Business Network IP UDP - BLOCKING (114) (emerging-rbn-BLOCK.rules) 2407228 - ET RBN Known Russian Business Network IP TCP - BLOCKING (115) (emerging-rbn-BLOCK.rules) 2407229 - ET RBN Known Russian Business Network IP UDP - BLOCKING (115) (emerging-rbn-BLOCK.rules) 2407230 - ET RBN Known Russian Business Network IP TCP - BLOCKING (116) (emerging-rbn-BLOCK.rules) 2407231 - ET RBN Known Russian Business Network IP UDP - BLOCKING (116) (emerging-rbn-BLOCK.rules) 2407232 - ET RBN Known Russian Business Network IP TCP - BLOCKING (117) (emerging-rbn-BLOCK.rules) 2407233 - ET RBN Known Russian Business Network IP UDP - BLOCKING (117) (emerging-rbn-BLOCK.rules) 2407234 - ET RBN Known Russian Business Network IP TCP - BLOCKING (118) (emerging-rbn-BLOCK.rules) 2407235 - ET RBN Known Russian Business Network IP UDP - BLOCKING (118) (emerging-rbn-BLOCK.rules) 2407236 - ET RBN Known Russian Business Network IP TCP - BLOCKING (119) (emerging-rbn-BLOCK.rules) 2407237 - ET RBN Known Russian Business Network IP UDP - BLOCKING (119) (emerging-rbn-BLOCK.rules) 2407238 - ET RBN Known Russian Business Network IP TCP - BLOCKING (120) (emerging-rbn-BLOCK.rules) 2407239 - ET RBN Known Russian Business Network IP UDP - BLOCKING (120) (emerging-rbn-BLOCK.rules) 2407240 - ET RBN Known Russian Business Network IP TCP - BLOCKING (121) (emerging-rbn-BLOCK.rules) 2407241 - ET RBN Known Russian Business Network IP UDP - BLOCKING (121) (emerging-rbn-BLOCK.rules) 2407242 - ET RBN Known Russian Business Network IP TCP - BLOCKING (122) (emerging-rbn-BLOCK.rules) 2407243 - ET RBN Known Russian Business Network IP UDP - BLOCKING (122) (emerging-rbn-BLOCK.rules) 2407244 - ET RBN Known Russian Business Network IP TCP - BLOCKING (123) (emerging-rbn-BLOCK.rules) 2407245 - ET RBN Known Russian Business Network IP UDP - BLOCKING (123) (emerging-rbn-BLOCK.rules) 2407246 - ET RBN Known Russian Business Network IP TCP - BLOCKING (124) (emerging-rbn-BLOCK.rules) 2407247 - ET RBN Known Russian Business Network IP UDP - BLOCKING (124) (emerging-rbn-BLOCK.rules) 2407248 - ET RBN Known Russian Business Network IP TCP - BLOCKING (125) (emerging-rbn-BLOCK.rules) 2407249 - ET RBN Known Russian Business Network IP UDP - BLOCKING (125) (emerging-rbn-BLOCK.rules) 2407250 - ET RBN Known Russian Business Network IP TCP - BLOCKING (126) (emerging-rbn-BLOCK.rules) 2407251 - ET RBN Known Russian Business Network IP UDP - BLOCKING (126) (emerging-rbn-BLOCK.rules) 2407252 - ET RBN Known Russian Business Network IP TCP - BLOCKING (127) (emerging-rbn-BLOCK.rules) 2407253 - ET RBN Known Russian Business Network IP UDP - BLOCKING (127) (emerging-rbn-BLOCK.rules) 2407254 - ET RBN Known Russian Business Network IP TCP - BLOCKING (128) (emerging-rbn-BLOCK.rules) 2407255 - ET RBN Known Russian Business Network IP UDP - BLOCKING (128) (emerging-rbn-BLOCK.rules) 2407256 - ET RBN Known Russian Business Network IP TCP - BLOCKING (129) (emerging-rbn-BLOCK.rules) 2407257 - ET RBN Known Russian Business Network IP UDP - BLOCKING (129) (emerging-rbn-BLOCK.rules) 2407258 - ET RBN Known Russian Business Network IP TCP - BLOCKING (130) (emerging-rbn-BLOCK.rules) 2407259 - ET RBN Known Russian Business Network IP UDP - BLOCKING (130) (emerging-rbn-BLOCK.rules) 2407260 - ET RBN Known Russian Business Network IP TCP - BLOCKING (131) (emerging-rbn-BLOCK.rules) 2407261 - ET RBN Known Russian Business Network IP UDP - BLOCKING (131) (emerging-rbn-BLOCK.rules) 2407262 - ET RBN Known Russian Business Network IP TCP - BLOCKING (132) (emerging-rbn-BLOCK.rules) 2407263 - ET RBN Known Russian Business Network IP UDP - BLOCKING (132) (emerging-rbn-BLOCK.rules) 2407264 - ET RBN Known Russian Business Network IP TCP - BLOCKING (133) (emerging-rbn-BLOCK.rules) 2407265 - ET RBN Known Russian Business Network IP UDP - BLOCKING (133) (emerging-rbn-BLOCK.rules) 2407266 - ET RBN Known Russian Business Network IP TCP - BLOCKING (134) (emerging-rbn-BLOCK.rules) 2407267 - ET RBN Known Russian Business Network IP UDP - BLOCKING (134) (emerging-rbn-BLOCK.rules) 2407268 - ET RBN Known Russian Business Network IP TCP - BLOCKING (135) (emerging-rbn-BLOCK.rules) 2407269 - ET RBN Known Russian Business Network IP UDP - BLOCKING (135) (emerging-rbn-BLOCK.rules) 2407270 - ET RBN Known Russian Business Network IP TCP - BLOCKING (136) (emerging-rbn-BLOCK.rules) 2407271 - ET RBN Known Russian Business Network IP UDP - BLOCKING (136) (emerging-rbn-BLOCK.rules) 2407272 - ET RBN Known Russian Business Network IP TCP - BLOCKING (137) (emerging-rbn-BLOCK.rules) 2407273 - ET RBN Known Russian Business Network IP UDP - BLOCKING (137) (emerging-rbn-BLOCK.rules) 2407274 - ET RBN Known Russian Business Network IP TCP - BLOCKING (138) (emerging-rbn-BLOCK.rules) 2407275 - ET RBN Known Russian Business Network IP UDP - BLOCKING (138) (emerging-rbn-BLOCK.rules) 2407276 - ET RBN Known Russian Business Network IP TCP - BLOCKING (139) (emerging-rbn-BLOCK.rules) 2407277 - ET RBN Known Russian Business Network IP UDP - BLOCKING (139) (emerging-rbn-BLOCK.rules) 2407278 - ET RBN Known Russian Business Network IP TCP - BLOCKING (140) (emerging-rbn-BLOCK.rules) 2407279 - ET RBN Known Russian Business Network IP UDP - BLOCKING (140) (emerging-rbn-BLOCK.rules) 2407280 - ET RBN Known Russian Business Network IP TCP - BLOCKING (141) (emerging-rbn-BLOCK.rules) 2407281 - ET RBN Known Russian Business Network IP UDP - BLOCKING (141) (emerging-rbn-BLOCK.rules) 2407282 - ET RBN Known Russian Business Network IP TCP - BLOCKING (142) (emerging-rbn-BLOCK.rules) 2407283 - ET RBN Known Russian Business Network IP UDP - BLOCKING (142) (emerging-rbn-BLOCK.rules) 2407284 - ET RBN Known Russian Business Network IP TCP - BLOCKING (143) (emerging-rbn-BLOCK.rules) 2407285 - ET RBN Known Russian Business Network IP UDP - BLOCKING (143) (emerging-rbn-BLOCK.rules) 2407286 - ET RBN Known Russian Business Network IP TCP - BLOCKING (144) (emerging-rbn-BLOCK.rules) 2407287 - ET RBN Known Russian Business Network IP UDP - BLOCKING (144) (emerging-rbn-BLOCK.rules) 2407288 - ET RBN Known Russian Business Network IP TCP - BLOCKING (145) (emerging-rbn-BLOCK.rules) 2407289 - ET RBN Known Russian Business Network IP UDP - BLOCKING (145) (emerging-rbn-BLOCK.rules) 2407290 - ET RBN Known Russian Business Network IP TCP - BLOCKING (146) (emerging-rbn-BLOCK.rules) 2407291 - ET RBN Known Russian Business Network IP UDP - BLOCKING (146) (emerging-rbn-BLOCK.rules) 2407292 - ET RBN Known Russian Business Network IP TCP - BLOCKING (147) (emerging-rbn-BLOCK.rules) 2407293 - ET RBN Known Russian Business Network IP UDP - BLOCKING (147) (emerging-rbn-BLOCK.rules) 2407294 - ET RBN Known Russian Business Network IP TCP - BLOCKING (148) (emerging-rbn-BLOCK.rules) 2407295 - ET RBN Known Russian Business Network IP UDP - BLOCKING (148) (emerging-rbn-BLOCK.rules) 2407296 - ET RBN Known Russian Business Network IP TCP - BLOCKING (149) (emerging-rbn-BLOCK.rules) 2407297 - ET RBN Known Russian Business Network IP UDP - BLOCKING (149) (emerging-rbn-BLOCK.rules) 2407298 - ET RBN Known Russian Business Network IP TCP - BLOCKING (150) (emerging-rbn-BLOCK.rules) 2407299 - ET RBN Known Russian Business Network IP UDP - BLOCKING (150) (emerging-rbn-BLOCK.rules) 2407300 - ET RBN Known Russian Business Network IP TCP - BLOCKING (151) (emerging-rbn-BLOCK.rules) 2407301 - ET RBN Known Russian Business Network IP UDP - BLOCKING (151) (emerging-rbn-BLOCK.rules) 2407302 - ET RBN Known Russian Business Network IP TCP - BLOCKING (152) (emerging-rbn-BLOCK.rules) 2407303 - ET RBN Known Russian Business Network IP UDP - BLOCKING (152) (emerging-rbn-BLOCK.rules) 2407304 - ET RBN Known Russian Business Network IP TCP - BLOCKING (153) (emerging-rbn-BLOCK.rules) 2407305 - ET RBN Known Russian Business Network IP UDP - BLOCKING (153) (emerging-rbn-BLOCK.rules) 2407306 - ET RBN Known Russian Business Network IP TCP - BLOCKING (154) (emerging-rbn-BLOCK.rules) 2407307 - ET RBN Known Russian Business Network IP UDP - BLOCKING (154) (emerging-rbn-BLOCK.rules) 2407308 - ET RBN Known Russian Business Network IP TCP - BLOCKING (155) (emerging-rbn-BLOCK.rules) 2407309 - ET RBN Known Russian Business Network IP UDP - BLOCKING (155) (emerging-rbn-BLOCK.rules) 2407310 - ET RBN Known Russian Business Network IP TCP - BLOCKING (156) (emerging-rbn-BLOCK.rules) 2407311 - ET RBN Known Russian Business Network IP UDP - BLOCKING (156) (emerging-rbn-BLOCK.rules) 2407312 - ET RBN Known Russian Business Network IP TCP - BLOCKING (157) (emerging-rbn-BLOCK.rules) 2407313 - ET RBN Known Russian Business Network IP UDP - BLOCKING (157) (emerging-rbn-BLOCK.rules) 2407314 - ET RBN Known Russian Business Network IP TCP - BLOCKING (158) (emerging-rbn-BLOCK.rules) 2407315 - ET RBN Known Russian Business Network IP UDP - BLOCKING (158) (emerging-rbn-BLOCK.rules) 2407316 - ET RBN Known Russian Business Network IP TCP - BLOCKING (159) (emerging-rbn-BLOCK.rules) 2407317 - ET RBN Known Russian Business Network IP UDP - BLOCKING (159) (emerging-rbn-BLOCK.rules) 2407318 - ET RBN Known Russian Business Network IP TCP - BLOCKING (160) (emerging-rbn-BLOCK.rules) 2407319 - ET RBN Known Russian Business Network IP UDP - BLOCKING (160) (emerging-rbn-BLOCK.rules) 2407320 - ET RBN Known Russian Business Network IP TCP - BLOCKING (161) (emerging-rbn-BLOCK.rules) 2407321 - ET RBN Known Russian Business Network IP UDP - BLOCKING (161) (emerging-rbn-BLOCK.rules) 2407322 - ET RBN Known Russian Business Network IP TCP - BLOCKING (162) (emerging-rbn-BLOCK.rules) 2407323 - ET RBN Known Russian Business Network IP UDP - BLOCKING (162) (emerging-rbn-BLOCK.rules) 2407324 - ET RBN Known Russian Business Network IP TCP - BLOCKING (163) (emerging-rbn-BLOCK.rules) 2407325 - ET RBN Known Russian Business Network IP UDP - BLOCKING (163) (emerging-rbn-BLOCK.rules) 2407326 - ET RBN Known Russian Business Network IP TCP - BLOCKING (164) (emerging-rbn-BLOCK.rules) 2407327 - ET RBN Known Russian Business Network IP UDP - BLOCKING (164) (emerging-rbn-BLOCK.rules) 2407328 - ET RBN Known Russian Business Network IP TCP - BLOCKING (165) (emerging-rbn-BLOCK.rules) 2407329 - ET RBN Known Russian Business Network IP UDP - BLOCKING (165) (emerging-rbn-BLOCK.rules) 2407330 - ET RBN Known Russian Business Network IP TCP - BLOCKING (166) (emerging-rbn-BLOCK.rules) 2407331 - ET RBN Known Russian Business Network IP UDP - BLOCKING (166) (emerging-rbn-BLOCK.rules) 2407332 - ET RBN Known Russian Business Network IP TCP - BLOCKING (167) (emerging-rbn-BLOCK.rules) 2407333 - ET RBN Known Russian Business Network IP UDP - BLOCKING (167) (emerging-rbn-BLOCK.rules) 2407334 - ET RBN Known Russian Business Network IP TCP - BLOCKING (168) (emerging-rbn-BLOCK.rules) 2407335 - ET RBN Known Russian Business Network IP UDP - BLOCKING (168) (emerging-rbn-BLOCK.rules) 2407336 - ET RBN Known Russian Business Network IP TCP - BLOCKING (169) (emerging-rbn-BLOCK.rules) 2407337 - ET RBN Known Russian Business Network IP UDP - BLOCKING (169) (emerging-rbn-BLOCK.rules) 2407338 - ET RBN Known Russian Business Network IP TCP - BLOCKING (170) (emerging-rbn-BLOCK.rules) 2407339 - ET RBN Known Russian Business Network IP UDP - BLOCKING (170) (emerging-rbn-BLOCK.rules) 2407340 - ET RBN Known Russian Business Network IP TCP - BLOCKING (171) (emerging-rbn-BLOCK.rules) 2407341 - ET RBN Known Russian Business Network IP UDP - BLOCKING (171) (emerging-rbn-BLOCK.rules) 2407342 - ET RBN Known Russian Business Network IP TCP - BLOCKING (172) (emerging-rbn-BLOCK.rules) 2407343 - ET RBN Known Russian Business Network IP UDP - BLOCKING (172) (emerging-rbn-BLOCK.rules) 2407344 - ET RBN Known Russian Business Network IP TCP - BLOCKING (173) (emerging-rbn-BLOCK.rules) 2407345 - ET RBN Known Russian Business Network IP UDP - BLOCKING (173) (emerging-rbn-BLOCK.rules) 2407346 - ET RBN Known Russian Business Network IP TCP - BLOCKING (174) (emerging-rbn-BLOCK.rules) 2407347 - ET RBN Known Russian Business Network IP UDP - BLOCKING (174) (emerging-rbn-BLOCK.rules) 2407348 - ET RBN Known Russian Business Network IP TCP - BLOCKING (175) (emerging-rbn-BLOCK.rules) 2407349 - ET RBN Known Russian Business Network IP UDP - BLOCKING (175) (emerging-rbn-BLOCK.rules) 2407350 - ET RBN Known Russian Business Network IP TCP - BLOCKING (176) (emerging-rbn-BLOCK.rules) 2407351 - ET RBN Known Russian Business Network IP UDP - BLOCKING (176) (emerging-rbn-BLOCK.rules) 2407352 - ET RBN Known Russian Business Network IP TCP - BLOCKING (177) (emerging-rbn-BLOCK.rules) 2407353 - ET RBN Known Russian Business Network IP UDP - BLOCKING (177) (emerging-rbn-BLOCK.rules) 2407354 - ET RBN Known Russian Business Network IP TCP - BLOCKING (178) (emerging-rbn-BLOCK.rules) 2407355 - ET RBN Known Russian Business Network IP UDP - BLOCKING (178) (emerging-rbn-BLOCK.rules) 2407356 - ET RBN Known Russian Business Network IP TCP - BLOCKING (179) (emerging-rbn-BLOCK.rules) 2407357 - ET RBN Known Russian Business Network IP UDP - BLOCKING (179) (emerging-rbn-BLOCK.rules) 2407358 - ET RBN Known Russian Business Network IP TCP - BLOCKING (180) (emerging-rbn-BLOCK.rules) 2407359 - ET RBN Known Russian Business Network IP UDP - BLOCKING (180) (emerging-rbn-BLOCK.rules) 2407360 - ET RBN Known Russian Business Network IP TCP - BLOCKING (181) (emerging-rbn-BLOCK.rules) 2407361 - ET RBN Known Russian Business Network IP UDP - BLOCKING (181) (emerging-rbn-BLOCK.rules) 2407362 - ET RBN Known Russian Business Network IP TCP - BLOCKING (182) (emerging-rbn-BLOCK.rules) 2407363 - ET RBN Known Russian Business Network IP UDP - BLOCKING (182) (emerging-rbn-BLOCK.rules) 2407364 - ET RBN Known Russian Business Network IP TCP - BLOCKING (183) (emerging-rbn-BLOCK.rules) 2407365 - ET RBN Known Russian Business Network IP UDP - BLOCKING (183) (emerging-rbn-BLOCK.rules) 2407366 - ET RBN Known Russian Business Network IP TCP - BLOCKING (184) (emerging-rbn-BLOCK.rules) 2407367 - ET RBN Known Russian Business Network IP UDP - BLOCKING (184) (emerging-rbn-BLOCK.rules) 2407368 - ET RBN Known Russian Business Network IP TCP - BLOCKING (185) (emerging-rbn-BLOCK.rules) 2407369 - ET RBN Known Russian Business Network IP UDP - BLOCKING (185) (emerging-rbn-BLOCK.rules) 2407370 - ET RBN Known Russian Business Network IP TCP - BLOCKING (186) (emerging-rbn-BLOCK.rules) 2407371 - ET RBN Known Russian Business Network IP UDP - BLOCKING (186) (emerging-rbn-BLOCK.rules) 2407372 - ET RBN Known Russian Business Network IP TCP - BLOCKING (187) (emerging-rbn-BLOCK.rules) 2407373 - ET RBN Known Russian Business Network IP UDP - BLOCKING (187) (emerging-rbn-BLOCK.rules) 2407374 - ET RBN Known Russian Business Network IP TCP - BLOCKING (188) (emerging-rbn-BLOCK.rules) 2407375 - ET RBN Known Russian Business Network IP UDP - BLOCKING (188) (emerging-rbn-BLOCK.rules) 2407376 - ET RBN Known Russian Business Network IP TCP - BLOCKING (189) (emerging-rbn-BLOCK.rules) 2407377 - ET RBN Known Russian Business Network IP UDP - BLOCKING (189) (emerging-rbn-BLOCK.rules) 2407378 - ET RBN Known Russian Business Network IP TCP - BLOCKING (190) (emerging-rbn-BLOCK.rules) 2407379 - ET RBN Known Russian Business Network IP UDP - BLOCKING (190) (emerging-rbn-BLOCK.rules) 2407380 - ET RBN Known Russian Business Network IP TCP - BLOCKING (191) (emerging-rbn-BLOCK.rules) 2407381 - ET RBN Known Russian Business Network IP UDP - BLOCKING (191) (emerging-rbn-BLOCK.rules) 2407382 - ET RBN Known Russian Business Network IP TCP - BLOCKING (192) (emerging-rbn-BLOCK.rules) 2407383 - ET RBN Known Russian Business Network IP UDP - BLOCKING (192) (emerging-rbn-BLOCK.rules) 2407384 - ET RBN Known Russian Business Network IP TCP - BLOCKING (193) (emerging-rbn-BLOCK.rules) 2407385 - ET RBN Known Russian Business Network IP UDP - BLOCKING (193) (emerging-rbn-BLOCK.rules) 2407386 - ET RBN Known Russian Business Network IP TCP - BLOCKING (194) (emerging-rbn-BLOCK.rules) 2407387 - ET RBN Known Russian Business Network IP UDP - BLOCKING (194) (emerging-rbn-BLOCK.rules) 2407388 - ET RBN Known Russian Business Network IP TCP - BLOCKING (195) (emerging-rbn-BLOCK.rules) 2407389 - ET RBN Known Russian Business Network IP UDP - BLOCKING (195) (emerging-rbn-BLOCK.rules) 2407390 - ET RBN Known Russian Business Network IP TCP - BLOCKING (196) (emerging-rbn-BLOCK.rules) 2407391 - ET RBN Known Russian Business Network IP UDP - BLOCKING (196) (emerging-rbn-BLOCK.rules) 2407392 - ET RBN Known Russian Business Network IP TCP - BLOCKING (197) (emerging-rbn-BLOCK.rules) 2407393 - ET RBN Known Russian Business Network IP UDP - BLOCKING (197) (emerging-rbn-BLOCK.rules) 2407394 - ET RBN Known Russian Business Network IP TCP - BLOCKING (198) (emerging-rbn-BLOCK.rules) 2407395 - ET RBN Known Russian Business Network IP UDP - BLOCKING (198) (emerging-rbn-BLOCK.rules) 2407396 - ET RBN Known Russian Business Network IP TCP - BLOCKING (199) (emerging-rbn-BLOCK.rules) 2407397 - ET RBN Known Russian Business Network IP UDP - BLOCKING (199) (emerging-rbn-BLOCK.rules) 2407398 - ET RBN Known Russian Business Network IP TCP - BLOCKING (200) (emerging-rbn-BLOCK.rules) 2407399 - ET RBN Known Russian Business Network IP UDP - BLOCKING (200) (emerging-rbn-BLOCK.rules) 2407400 - ET RBN Known Russian Business Network IP TCP - BLOCKING (201) (emerging-rbn-BLOCK.rules) 2407401 - ET RBN Known Russian Business Network IP UDP - BLOCKING (201) (emerging-rbn-BLOCK.rules) 2407402 - ET RBN Known Russian Business Network IP TCP - BLOCKING (202) (emerging-rbn-BLOCK.rules) 2407403 - ET RBN Known Russian Business Network IP UDP - BLOCKING (202) (emerging-rbn-BLOCK.rules) 2407404 - ET RBN Known Russian Business Network IP TCP - BLOCKING (203) (emerging-rbn-BLOCK.rules) 2407405 - ET RBN Known Russian Business Network IP UDP - BLOCKING (203) (emerging-rbn-BLOCK.rules) 2407406 - ET RBN Known Russian Business Network IP TCP - BLOCKING (204) (emerging-rbn-BLOCK.rules) 2407407 - ET RBN Known Russian Business Network IP UDP - BLOCKING (204) (emerging-rbn-BLOCK.rules) 2407408 - ET RBN Known Russian Business Network IP TCP - BLOCKING (205) (emerging-rbn-BLOCK.rules) 2407409 - ET RBN Known Russian Business Network IP UDP - BLOCKING (205) (emerging-rbn-BLOCK.rules) 2407410 - ET RBN Known Russian Business Network IP TCP - BLOCKING (206) (emerging-rbn-BLOCK.rules) 2407411 - ET RBN Known Russian Business Network IP UDP - BLOCKING (206) (emerging-rbn-BLOCK.rules) 2407412 - ET RBN Known Russian Business Network IP TCP - BLOCKING (207) (emerging-rbn-BLOCK.rules) 2407413 - ET RBN Known Russian Business Network IP UDP - BLOCKING (207) (emerging-rbn-BLOCK.rules) 2407414 - ET RBN Known Russian Business Network IP TCP - BLOCKING (208) (emerging-rbn-BLOCK.rules) 2407415 - ET RBN Known Russian Business Network IP UDP - BLOCKING (208) (emerging-rbn-BLOCK.rules) 2407416 - ET RBN Known Russian Business Network IP TCP - BLOCKING (209) (emerging-rbn-BLOCK.rules) 2407417 - ET RBN Known Russian Business Network IP UDP - BLOCKING (209) (emerging-rbn-BLOCK.rules) 2407418 - ET RBN Known Russian Business Network IP TCP - BLOCKING (210) (emerging-rbn-BLOCK.rules) 2407419 - ET RBN Known Russian Business Network IP UDP - BLOCKING (210) (emerging-rbn-BLOCK.rules) 2407420 - ET RBN Known Russian Business Network IP TCP - BLOCKING (211) (emerging-rbn-BLOCK.rules) 2407421 - ET RBN Known Russian Business Network IP UDP - BLOCKING (211) (emerging-rbn-BLOCK.rules) 2407422 - ET RBN Known Russian Business Network IP TCP - BLOCKING (212) (emerging-rbn-BLOCK.rules) 2407423 - ET RBN Known Russian Business Network IP UDP - BLOCKING (212) (emerging-rbn-BLOCK.rules) 2407424 - ET RBN Known Russian Business Network IP TCP - BLOCKING (213) (emerging-rbn-BLOCK.rules) 2407425 - ET RBN Known Russian Business Network IP UDP - BLOCKING (213) (emerging-rbn-BLOCK.rules) 2407426 - ET RBN Known Russian Business Network IP TCP - BLOCKING (214) (emerging-rbn-BLOCK.rules) 2407427 - ET RBN Known Russian Business Network IP UDP - BLOCKING (214) (emerging-rbn-BLOCK.rules) 2407428 - ET RBN Known Russian Business Network IP TCP - BLOCKING (215) (emerging-rbn-BLOCK.rules) 2407429 - ET RBN Known Russian Business Network IP UDP - BLOCKING (215) (emerging-rbn-BLOCK.rules) 2407430 - ET RBN Known Russian Business Network IP TCP - BLOCKING (216) (emerging-rbn-BLOCK.rules) 2407431 - ET RBN Known Russian Business Network IP UDP - BLOCKING (216) (emerging-rbn-BLOCK.rules) 2407432 - ET RBN Known Russian Business Network IP TCP - BLOCKING (217) (emerging-rbn-BLOCK.rules) 2407433 - ET RBN Known Russian Business Network IP UDP - BLOCKING (217) (emerging-rbn-BLOCK.rules) 2407434 - ET RBN Known Russian Business Network IP TCP - BLOCKING (218) (emerging-rbn-BLOCK.rules) 2407435 - ET RBN Known Russian Business Network IP UDP - BLOCKING (218) (emerging-rbn-BLOCK.rules) 2407436 - ET RBN Known Russian Business Network IP TCP - BLOCKING (219) (emerging-rbn-BLOCK.rules) 2407437 - ET RBN Known Russian Business Network IP UDP - BLOCKING (219) (emerging-rbn-BLOCK.rules) 2407438 - ET RBN Known Russian Business Network IP TCP - BLOCKING (220) (emerging-rbn-BLOCK.rules) 2407439 - ET RBN Known Russian Business Network IP UDP - BLOCKING (220) (emerging-rbn-BLOCK.rules) 2407440 - ET RBN Known Russian Business Network IP TCP - BLOCKING (221) (emerging-rbn-BLOCK.rules) 2407441 - ET RBN Known Russian Business Network IP UDP - BLOCKING (221) (emerging-rbn-BLOCK.rules) 2407442 - ET RBN Known Russian Business Network IP TCP - BLOCKING (222) (emerging-rbn-BLOCK.rules) 2407443 - ET RBN Known Russian Business Network IP UDP - BLOCKING (222) (emerging-rbn-BLOCK.rules) 2407444 - ET RBN Known Russian Business Network IP TCP - BLOCKING (223) (emerging-rbn-BLOCK.rules) 2407445 - ET RBN Known Russian Business Network IP UDP - BLOCKING (223) (emerging-rbn-BLOCK.rules) 2407446 - ET RBN Known Russian Business Network IP TCP - BLOCKING (224) (emerging-rbn-BLOCK.rules) 2407447 - ET RBN Known Russian Business Network IP UDP - BLOCKING (224) (emerging-rbn-BLOCK.rules) 2407448 - ET RBN Known Russian Business Network IP TCP - BLOCKING (225) (emerging-rbn-BLOCK.rules) 2407449 - ET RBN Known Russian Business Network IP UDP - BLOCKING (225) (emerging-rbn-BLOCK.rules) 2407450 - ET RBN Known Russian Business Network IP TCP - BLOCKING (226) (emerging-rbn-BLOCK.rules) 2407451 - ET RBN Known Russian Business Network IP UDP - BLOCKING (226) (emerging-rbn-BLOCK.rules) 2407452 - ET RBN Known Russian Business Network IP TCP - BLOCKING (227) (emerging-rbn-BLOCK.rules) 2407453 - ET RBN Known Russian Business Network IP UDP - BLOCKING (227) (emerging-rbn-BLOCK.rules) 2407454 - ET RBN Known Russian Business Network IP TCP - BLOCKING (228) (emerging-rbn-BLOCK.rules) 2407455 - ET RBN Known Russian Business Network IP UDP - BLOCKING (228) (emerging-rbn-BLOCK.rules) 2407456 - ET RBN Known Russian Business Network IP TCP - BLOCKING (229) (emerging-rbn-BLOCK.rules) 2407457 - ET RBN Known Russian Business Network IP UDP - BLOCKING (229) (emerging-rbn-BLOCK.rules) 2407458 - ET RBN Known Russian Business Network IP TCP - BLOCKING (230) (emerging-rbn-BLOCK.rules) 2407459 - ET RBN Known Russian Business Network IP UDP - BLOCKING (230) (emerging-rbn-BLOCK.rules) 2407460 - ET RBN Known Russian Business Network IP TCP - BLOCKING (231) (emerging-rbn-BLOCK.rules) 2407461 - ET RBN Known Russian Business Network IP UDP - BLOCKING (231) (emerging-rbn-BLOCK.rules) 2407462 - ET RBN Known Russian Business Network IP TCP - BLOCKING (232) (emerging-rbn-BLOCK.rules) 2407463 - ET RBN Known Russian Business Network IP UDP - BLOCKING (232) (emerging-rbn-BLOCK.rules) 2407464 - ET RBN Known Russian Business Network IP TCP - BLOCKING (233) (emerging-rbn-BLOCK.rules) 2407465 - ET RBN Known Russian Business Network IP UDP - BLOCKING (233) (emerging-rbn-BLOCK.rules) 2407466 - ET RBN Known Russian Business Network IP TCP - BLOCKING (234) (emerging-rbn-BLOCK.rules) 2407467 - ET RBN Known Russian Business Network IP UDP - BLOCKING (234) (emerging-rbn-BLOCK.rules) 2407468 - ET RBN Known Russian Business Network IP TCP - BLOCKING (235) (emerging-rbn-BLOCK.rules) 2407469 - ET RBN Known Russian Business Network IP UDP - BLOCKING (235) (emerging-rbn-BLOCK.rules) 2407470 - ET RBN Known Russian Business Network IP TCP - BLOCKING (236) (emerging-rbn-BLOCK.rules) 2407471 - ET RBN Known Russian Business Network IP UDP - BLOCKING (236) (emerging-rbn-BLOCK.rules) 2407472 - ET RBN Known Russian Business Network IP TCP - BLOCKING (237) (emerging-rbn-BLOCK.rules) 2407473 - ET RBN Known Russian Business Network IP UDP - BLOCKING (237) (emerging-rbn-BLOCK.rules) 2407474 - ET RBN Known Russian Business Network IP TCP - BLOCKING (238) (emerging-rbn-BLOCK.rules) 2407475 - ET RBN Known Russian Business Network IP UDP - BLOCKING (238) (emerging-rbn-BLOCK.rules) 2407476 - ET RBN Known Russian Business Network IP TCP - BLOCKING (239) (emerging-rbn-BLOCK.rules) 2407477 - ET RBN Known Russian Business Network IP UDP - BLOCKING (239) (emerging-rbn-BLOCK.rules) 2407478 - ET RBN Known Russian Business Network IP TCP - BLOCKING (240) (emerging-rbn-BLOCK.rules) 2407479 - ET RBN Known Russian Business Network IP UDP - BLOCKING (240) (emerging-rbn-BLOCK.rules) 2407480 - ET RBN Known Russian Business Network IP TCP - BLOCKING (241) (emerging-rbn-BLOCK.rules) 2407481 - ET RBN Known Russian Business Network IP UDP - BLOCKING (241) (emerging-rbn-BLOCK.rules) 2407482 - ET RBN Known Russian Business Network IP TCP - BLOCKING (242) (emerging-rbn-BLOCK.rules) 2407483 - ET RBN Known Russian Business Network IP UDP - BLOCKING (242) (emerging-rbn-BLOCK.rules) 2407484 - ET RBN Known Russian Business Network IP TCP - BLOCKING (243) (emerging-rbn-BLOCK.rules) 2407485 - ET RBN Known Russian Business Network IP UDP - BLOCKING (243) (emerging-rbn-BLOCK.rules) 2407486 - ET RBN Known Russian Business Network IP TCP - BLOCKING (244) (emerging-rbn-BLOCK.rules) 2407487 - ET RBN Known Russian Business Network IP UDP - BLOCKING (244) (emerging-rbn-BLOCK.rules) 2407488 - ET RBN Known Russian Business Network IP TCP - BLOCKING (245) (emerging-rbn-BLOCK.rules) 2407489 - ET RBN Known Russian Business Network IP UDP - BLOCKING (245) (emerging-rbn-BLOCK.rules) 2407490 - ET RBN Known Russian Business Network IP TCP - BLOCKING (246) (emerging-rbn-BLOCK.rules) 2407491 - ET RBN Known Russian Business Network IP UDP - BLOCKING (246) (emerging-rbn-BLOCK.rules) 2407492 - ET RBN Known Russian Business Network IP TCP - BLOCKING (247) (emerging-rbn-BLOCK.rules) 2407493 - ET RBN Known Russian Business Network IP UDP - BLOCKING (247) (emerging-rbn-BLOCK.rules) 2407494 - ET RBN Known Russian Business Network IP TCP - BLOCKING (248) (emerging-rbn-BLOCK.rules) 2407495 - ET RBN Known Russian Business Network IP UDP - BLOCKING (248) (emerging-rbn-BLOCK.rules) 2407496 - ET RBN Known Russian Business Network IP TCP - BLOCKING (249) (emerging-rbn-BLOCK.rules) 2407497 - ET RBN Known Russian Business Network IP UDP - BLOCKING (249) (emerging-rbn-BLOCK.rules) 2407498 - ET RBN Known Russian Business Network IP TCP - BLOCKING (250) (emerging-rbn-BLOCK.rules) 2407499 - ET RBN Known Russian Business Network IP UDP - BLOCKING (250) (emerging-rbn-BLOCK.rules) 2407500 - ET RBN Known Russian Business Network IP TCP - BLOCKING (251) (emerging-rbn-BLOCK.rules) 2407501 - ET RBN Known Russian Business Network IP UDP - BLOCKING (251) (emerging-rbn-BLOCK.rules) 2407502 - ET RBN Known Russian Business Network IP TCP - BLOCKING (252) (emerging-rbn-BLOCK.rules) 2407503 - ET RBN Known Russian Business Network IP UDP - BLOCKING (252) (emerging-rbn-BLOCK.rules) 2407504 - ET RBN Known Russian Business Network IP TCP - BLOCKING (253) (emerging-rbn-BLOCK.rules) 2407505 - ET RBN Known Russian Business Network IP UDP - BLOCKING (253) (emerging-rbn-BLOCK.rules) 2407506 - ET RBN Known Russian Business Network IP TCP - BLOCKING (254) (emerging-rbn-BLOCK.rules) 2407507 - ET RBN Known Russian Business Network IP UDP - BLOCKING (254) (emerging-rbn-BLOCK.rules) 2407508 - ET RBN Known Russian Business Network IP TCP - BLOCKING (255) (emerging-rbn-BLOCK.rules) 2407509 - ET RBN Known Russian Business Network IP UDP - BLOCKING (255) (emerging-rbn-BLOCK.rules) 2407510 - ET RBN Known Russian Business Network IP TCP - BLOCKING (256) (emerging-rbn-BLOCK.rules) 2407511 - ET RBN Known Russian Business Network IP UDP - BLOCKING (256) (emerging-rbn-BLOCK.rules) 2407512 - ET RBN Known Russian Business Network IP TCP - BLOCKING (257) (emerging-rbn-BLOCK.rules) 2407513 - ET RBN Known Russian Business Network IP UDP - BLOCKING (257) (emerging-rbn-BLOCK.rules) 2407514 - ET RBN Known Russian Business Network IP TCP - BLOCKING (258) (emerging-rbn-BLOCK.rules) 2407515 - ET RBN Known Russian Business Network IP UDP - BLOCKING (258) (emerging-rbn-BLOCK.rules) 2407516 - ET RBN Known Russian Business Network IP TCP - BLOCKING (259) (emerging-rbn-BLOCK.rules) 2407517 - ET RBN Known Russian Business Network IP UDP - BLOCKING (259) (emerging-rbn-BLOCK.rules) 2407518 - ET RBN Known Russian Business Network IP TCP - BLOCKING (260) (emerging-rbn-BLOCK.rules) 2407519 - ET RBN Known Russian Business Network IP UDP - BLOCKING (260) (emerging-rbn-BLOCK.rules) 2407520 - ET RBN Known Russian Business Network IP TCP - BLOCKING (261) (emerging-rbn-BLOCK.rules) 2407521 - ET RBN Known Russian Business Network IP UDP - BLOCKING (261) (emerging-rbn-BLOCK.rules) 2407522 - ET RBN Known Russian Business Network IP TCP - BLOCKING (262) (emerging-rbn-BLOCK.rules) 2407523 - ET RBN Known Russian Business Network IP UDP - BLOCKING (262) (emerging-rbn-BLOCK.rules) 2407524 - ET RBN Known Russian Business Network IP TCP - BLOCKING (263) (emerging-rbn-BLOCK.rules) 2407525 - ET RBN Known Russian Business Network IP UDP - BLOCKING (263) (emerging-rbn-BLOCK.rules) 2407526 - ET RBN Known Russian Business Network IP TCP - BLOCKING (264) (emerging-rbn-BLOCK.rules) 2407527 - ET RBN Known Russian Business Network IP UDP - BLOCKING (264) (emerging-rbn-BLOCK.rules) 2407528 - ET RBN Known Russian Business Network IP TCP - BLOCKING (265) (emerging-rbn-BLOCK.rules) 2407529 - ET RBN Known Russian Business Network IP UDP - BLOCKING (265) (emerging-rbn-BLOCK.rules) 2407530 - ET RBN Known Russian Business Network IP TCP - BLOCKING (266) (emerging-rbn-BLOCK.rules) 2407531 - ET RBN Known Russian Business Network IP UDP - BLOCKING (266) (emerging-rbn-BLOCK.rules) 2407532 - ET RBN Known Russian Business Network IP TCP - BLOCKING (267) (emerging-rbn-BLOCK.rules) 2407533 - ET RBN Known Russian Business Network IP UDP - BLOCKING (267) (emerging-rbn-BLOCK.rules) 2407534 - ET RBN Known Russian Business Network IP TCP - BLOCKING (268) (emerging-rbn-BLOCK.rules) 2407535 - ET RBN Known Russian Business Network IP UDP - BLOCKING (268) (emerging-rbn-BLOCK.rules) 2407536 - ET RBN Known Russian Business Network IP TCP - BLOCKING (269) (emerging-rbn-BLOCK.rules) 2407537 - ET RBN Known Russian Business Network IP UDP - BLOCKING (269) (emerging-rbn-BLOCK.rules) 2407538 - ET RBN Known Russian Business Network IP TCP - BLOCKING (270) (emerging-rbn-BLOCK.rules) 2407539 - ET RBN Known Russian Business Network IP UDP - BLOCKING (270) (emerging-rbn-BLOCK.rules) 2407540 - ET RBN Known Russian Business Network IP TCP - BLOCKING (271) (emerging-rbn-BLOCK.rules) 2407541 - ET RBN Known Russian Business Network IP UDP - BLOCKING (271) (emerging-rbn-BLOCK.rules) 2407542 - ET RBN Known Russian Business Network IP TCP - BLOCKING (272) (emerging-rbn-BLOCK.rules) 2407543 - ET RBN Known Russian Business Network IP UDP - BLOCKING (272) (emerging-rbn-BLOCK.rules) 2407544 - ET RBN Known Russian Business Network IP TCP - BLOCKING (273) (emerging-rbn-BLOCK.rules) 2407545 - ET RBN Known Russian Business Network IP UDP - BLOCKING (273) (emerging-rbn-BLOCK.rules) 2407546 - ET RBN Known Russian Business Network IP TCP - BLOCKING (274) (emerging-rbn-BLOCK.rules) 2407547 - ET RBN Known Russian Business Network IP UDP - BLOCKING (274) (emerging-rbn-BLOCK.rules) 2407548 - ET RBN Known Russian Business Network IP TCP - BLOCKING (275) (emerging-rbn-BLOCK.rules) 2407549 - ET RBN Known Russian Business Network IP UDP - BLOCKING (275) (emerging-rbn-BLOCK.rules) 2407550 - ET RBN Known Russian Business Network IP TCP - BLOCKING (276) (emerging-rbn-BLOCK.rules) 2407551 - ET RBN Known Russian Business Network IP UDP - BLOCKING (276) (emerging-rbn-BLOCK.rules) 2407552 - ET RBN Known Russian Business Network IP TCP - BLOCKING (277) (emerging-rbn-BLOCK.rules) 2407553 - ET RBN Known Russian Business Network IP UDP - BLOCKING (277) (emerging-rbn-BLOCK.rules) 2407554 - ET RBN Known Russian Business Network IP TCP - BLOCKING (278) (emerging-rbn-BLOCK.rules) 2407555 - ET RBN Known Russian Business Network IP UDP - BLOCKING (278) (emerging-rbn-BLOCK.rules) 2407556 - ET RBN Known Russian Business Network IP TCP - BLOCKING (279) (emerging-rbn-BLOCK.rules) 2407557 - ET RBN Known Russian Business Network IP UDP - BLOCKING (279) (emerging-rbn-BLOCK.rules) 2407558 - ET RBN Known Russian Business Network IP TCP - BLOCKING (280) (emerging-rbn-BLOCK.rules) 2407559 - ET RBN Known Russian Business Network IP UDP - BLOCKING (280) (emerging-rbn-BLOCK.rules) 2407560 - ET RBN Known Russian Business Network IP TCP - BLOCKING (281) (emerging-rbn-BLOCK.rules) 2407561 - ET RBN Known Russian Business Network IP UDP - BLOCKING (281) (emerging-rbn-BLOCK.rules) 2407562 - ET RBN Known Russian Business Network IP TCP - BLOCKING (282) (emerging-rbn-BLOCK.rules) 2407563 - ET RBN Known Russian Business Network IP UDP - BLOCKING (282) (emerging-rbn-BLOCK.rules) 2407564 - ET RBN Known Russian Business Network IP TCP - BLOCKING (283) (emerging-rbn-BLOCK.rules) 2407565 - ET RBN Known Russian Business Network IP UDP - BLOCKING (283) (emerging-rbn-BLOCK.rules) 2407566 - ET RBN Known Russian Business Network IP TCP - BLOCKING (284) (emerging-rbn-BLOCK.rules) 2407567 - ET RBN Known Russian Business Network IP UDP - BLOCKING (284) (emerging-rbn-BLOCK.rules) 2407568 - ET RBN Known Russian Business Network IP TCP - BLOCKING (285) (emerging-rbn-BLOCK.rules) 2407569 - ET RBN Known Russian Business Network IP UDP - BLOCKING (285) (emerging-rbn-BLOCK.rules) 2407570 - ET RBN Known Russian Business Network IP TCP - BLOCKING (286) (emerging-rbn-BLOCK.rules) 2407571 - ET RBN Known Russian Business Network IP UDP - BLOCKING (286) (emerging-rbn-BLOCK.rules) 2407572 - ET RBN Known Russian Business Network IP TCP - BLOCKING (287) (emerging-rbn-BLOCK.rules) 2407573 - ET RBN Known Russian Business Network IP UDP - BLOCKING (287) (emerging-rbn-BLOCK.rules) 2407574 - ET RBN Known Russian Business Network IP TCP - BLOCKING (288) (emerging-rbn-BLOCK.rules) 2407575 - ET RBN Known Russian Business Network IP UDP - BLOCKING (288) (emerging-rbn-BLOCK.rules) 2407576 - ET RBN Known Russian Business Network IP TCP - BLOCKING (289) (emerging-rbn-BLOCK.rules) 2407577 - ET RBN Known Russian Business Network IP UDP - BLOCKING (289) (emerging-rbn-BLOCK.rules) 2407578 - ET RBN Known Russian Business Network IP TCP - BLOCKING (290) (emerging-rbn-BLOCK.rules) 2407579 - ET RBN Known Russian Business Network IP UDP - BLOCKING (290) (emerging-rbn-BLOCK.rules) 2407580 - ET RBN Known Russian Business Network IP TCP - BLOCKING (291) (emerging-rbn-BLOCK.rules) 2407581 - ET RBN Known Russian Business Network IP UDP - BLOCKING (291) (emerging-rbn-BLOCK.rules) 2407582 - ET RBN Known Russian Business Network IP TCP - BLOCKING (292) (emerging-rbn-BLOCK.rules) 2407583 - ET RBN Known Russian Business Network IP UDP - BLOCKING (292) (emerging-rbn-BLOCK.rules) 2407584 - ET RBN Known Russian Business Network IP TCP - BLOCKING (293) (emerging-rbn-BLOCK.rules) 2407585 - ET RBN Known Russian Business Network IP UDP - BLOCKING (293) (emerging-rbn-BLOCK.rules) 2407586 - ET RBN Known Russian Business Network IP TCP - BLOCKING (294) (emerging-rbn-BLOCK.rules) 2407587 - ET RBN Known Russian Business Network IP UDP - BLOCKING (294) (emerging-rbn-BLOCK.rules) 2407588 - ET RBN Known Russian Business Network IP TCP - BLOCKING (295) (emerging-rbn-BLOCK.rules) 2407589 - ET RBN Known Russian Business Network IP UDP - BLOCKING (295) (emerging-rbn-BLOCK.rules) 2407590 - ET RBN Known Russian Business Network IP TCP - BLOCKING (296) (emerging-rbn-BLOCK.rules) 2407591 - ET RBN Known Russian Business Network IP UDP - BLOCKING (296) (emerging-rbn-BLOCK.rules) 2407592 - ET RBN Known Russian Business Network IP TCP - BLOCKING (297) (emerging-rbn-BLOCK.rules) 2407593 - ET RBN Known Russian Business Network IP UDP - BLOCKING (297) (emerging-rbn-BLOCK.rules) 2407594 - ET RBN Known Russian Business Network IP TCP - BLOCKING (298) (emerging-rbn-BLOCK.rules) 2407595 - ET RBN Known Russian Business Network IP UDP - BLOCKING (298) (emerging-rbn-BLOCK.rules) 2407596 - ET RBN Known Russian Business Network IP TCP - BLOCKING (299) (emerging-rbn-BLOCK.rules) 2407597 - ET RBN Known Russian Business Network IP UDP - BLOCKING (299) (emerging-rbn-BLOCK.rules) 2407598 - ET RBN Known Russian Business Network IP TCP - BLOCKING (300) (emerging-rbn-BLOCK.rules) 2407599 - ET RBN Known Russian Business Network IP UDP - BLOCKING (300) (emerging-rbn-BLOCK.rules) 2407600 - ET RBN Known Russian Business Network IP TCP - BLOCKING (301) (emerging-rbn-BLOCK.rules) 2407601 - ET RBN Known Russian Business Network IP UDP - BLOCKING (301) (emerging-rbn-BLOCK.rules) 2407602 - ET RBN Known Russian Business Network IP TCP - BLOCKING (302) (emerging-rbn-BLOCK.rules) 2407603 - ET RBN Known Russian Business Network IP UDP - BLOCKING (302) (emerging-rbn-BLOCK.rules) 2407604 - ET RBN Known Russian Business Network IP TCP - BLOCKING (303) (emerging-rbn-BLOCK.rules) 2407605 - ET RBN Known Russian Business Network IP UDP - BLOCKING (303) (emerging-rbn-BLOCK.rules) 2407606 - ET RBN Known Russian Business Network IP TCP - BLOCKING (304) (emerging-rbn-BLOCK.rules) 2407607 - ET RBN Known Russian Business Network IP UDP - BLOCKING (304) (emerging-rbn-BLOCK.rules) 2407608 - ET RBN Known Russian Business Network IP TCP - BLOCKING (305) (emerging-rbn-BLOCK.rules) 2407609 - ET RBN Known Russian Business Network IP UDP - BLOCKING (305) (emerging-rbn-BLOCK.rules) 2407610 - ET RBN Known Russian Business Network IP TCP - BLOCKING (306) (emerging-rbn-BLOCK.rules) 2407611 - ET RBN Known Russian Business Network IP UDP - BLOCKING (306) (emerging-rbn-BLOCK.rules) 2407612 - ET RBN Known Russian Business Network IP TCP - BLOCKING (307) (emerging-rbn-BLOCK.rules) 2407613 - ET RBN Known Russian Business Network IP UDP - BLOCKING (307) (emerging-rbn-BLOCK.rules) 2407614 - ET RBN Known Russian Business Network IP TCP - BLOCKING (308) (emerging-rbn-BLOCK.rules) 2407615 - ET RBN Known Russian Business Network IP UDP - BLOCKING (308) (emerging-rbn-BLOCK.rules) 2407616 - ET RBN Known Russian Business Network IP TCP - BLOCKING (309) (emerging-rbn-BLOCK.rules) 2407617 - ET RBN Known Russian Business Network IP UDP - BLOCKING (309) (emerging-rbn-BLOCK.rules) 2407618 - ET RBN Known Russian Business Network IP TCP - BLOCKING (310) (emerging-rbn-BLOCK.rules) 2407619 - ET RBN Known Russian Business Network IP UDP - BLOCKING (310) (emerging-rbn-BLOCK.rules) 2407620 - ET RBN Known Russian Business Network IP TCP - BLOCKING (311) (emerging-rbn-BLOCK.rules) 2407621 - ET RBN Known Russian Business Network IP UDP - BLOCKING (311) (emerging-rbn-BLOCK.rules) 2407622 - ET RBN Known Russian Business Network IP TCP - BLOCKING (312) (emerging-rbn-BLOCK.rules) 2407623 - ET RBN Known Russian Business Network IP UDP - BLOCKING (312) (emerging-rbn-BLOCK.rules) 2407624 - ET RBN Known Russian Business Network IP TCP - BLOCKING (313) (emerging-rbn-BLOCK.rules) 2407625 - ET RBN Known Russian Business Network IP UDP - BLOCKING (313) (emerging-rbn-BLOCK.rules) 2407626 - ET RBN Known Russian Business Network IP TCP - BLOCKING (314) (emerging-rbn-BLOCK.rules) 2407627 - ET RBN Known Russian Business Network IP UDP - BLOCKING (314) (emerging-rbn-BLOCK.rules) 2407628 - ET RBN Known Russian Business Network IP TCP - BLOCKING (315) (emerging-rbn-BLOCK.rules) 2407629 - ET RBN Known Russian Business Network IP UDP - BLOCKING (315) (emerging-rbn-BLOCK.rules) 2407630 - ET RBN Known Russian Business Network IP TCP - BLOCKING (316) (emerging-rbn-BLOCK.rules) 2407631 - ET RBN Known Russian Business Network IP UDP - BLOCKING (316) (emerging-rbn-BLOCK.rules) 2407632 - ET RBN Known Russian Business Network IP TCP - BLOCKING (317) (emerging-rbn-BLOCK.rules) 2407633 - ET RBN Known Russian Business Network IP UDP - BLOCKING (317) (emerging-rbn-BLOCK.rules) 2407634 - ET RBN Known Russian Business Network IP TCP - BLOCKING (318) (emerging-rbn-BLOCK.rules) 2407635 - ET RBN Known Russian Business Network IP UDP - BLOCKING (318) (emerging-rbn-BLOCK.rules) 2407636 - ET RBN Known Russian Business Network IP TCP - BLOCKING (319) (emerging-rbn-BLOCK.rules) 2407637 - ET RBN Known Russian Business Network IP UDP - BLOCKING (319) (emerging-rbn-BLOCK.rules) 2407638 - ET RBN Known Russian Business Network IP TCP - BLOCKING (320) (emerging-rbn-BLOCK.rules) 2407639 - ET RBN Known Russian Business Network IP UDP - BLOCKING (320) (emerging-rbn-BLOCK.rules) 2407640 - ET RBN Known Russian Business Network IP TCP - BLOCKING (321) (emerging-rbn-BLOCK.rules) 2407641 - ET RBN Known Russian Business Network IP UDP - BLOCKING (321) (emerging-rbn-BLOCK.rules) 2407642 - ET RBN Known Russian Business Network IP TCP - BLOCKING (322) (emerging-rbn-BLOCK.rules) 2407643 - ET RBN Known Russian Business Network IP UDP - BLOCKING (322) (emerging-rbn-BLOCK.rules) 2407644 - ET RBN Known Russian Business Network IP TCP - BLOCKING (323) (emerging-rbn-BLOCK.rules) 2407645 - ET RBN Known Russian Business Network IP UDP - BLOCKING (323) (emerging-rbn-BLOCK.rules) 2407646 - ET RBN Known Russian Business Network IP TCP - BLOCKING (324) (emerging-rbn-BLOCK.rules) 2407647 - ET RBN Known Russian Business Network IP UDP - BLOCKING (324) (emerging-rbn-BLOCK.rules) 2407648 - ET RBN Known Russian Business Network IP TCP - BLOCKING (325) (emerging-rbn-BLOCK.rules) 2407649 - ET RBN Known Russian Business Network IP UDP - BLOCKING (325) (emerging-rbn-BLOCK.rules) 2407650 - ET RBN Known Russian Business Network IP TCP - BLOCKING (326) (emerging-rbn-BLOCK.rules) 2407651 - ET RBN Known Russian Business Network IP UDP - BLOCKING (326) (emerging-rbn-BLOCK.rules) 2407652 - ET RBN Known Russian Business Network IP TCP - BLOCKING (327) (emerging-rbn-BLOCK.rules) 2407653 - ET RBN Known Russian Business Network IP UDP - BLOCKING (327) (emerging-rbn-BLOCK.rules) 2407654 - ET RBN Known Russian Business Network IP TCP - BLOCKING (328) (emerging-rbn-BLOCK.rules) 2407655 - ET RBN Known Russian Business Network IP UDP - BLOCKING (328) (emerging-rbn-BLOCK.rules) 2407656 - ET RBN Known Russian Business Network IP TCP - BLOCKING (329) (emerging-rbn-BLOCK.rules) 2407657 - ET RBN Known Russian Business Network IP UDP - BLOCKING (329) (emerging-rbn-BLOCK.rules) 2407658 - ET RBN Known Russian Business Network IP TCP - BLOCKING (330) (emerging-rbn-BLOCK.rules) 2407659 - ET RBN Known Russian Business Network IP UDP - BLOCKING (330) (emerging-rbn-BLOCK.rules) 2407660 - ET RBN Known Russian Business Network IP TCP - BLOCKING (331) (emerging-rbn-BLOCK.rules) 2407661 - ET RBN Known Russian Business Network IP UDP - BLOCKING (331) (emerging-rbn-BLOCK.rules) 2407662 - ET RBN Known Russian Business Network IP TCP - BLOCKING (332) (emerging-rbn-BLOCK.rules) 2407663 - ET RBN Known Russian Business Network IP UDP - BLOCKING (332) (emerging-rbn-BLOCK.rules) 2407664 - ET RBN Known Russian Business Network IP TCP - BLOCKING (333) (emerging-rbn-BLOCK.rules) 2407665 - ET RBN Known Russian Business Network IP UDP - BLOCKING (333) (emerging-rbn-BLOCK.rules) 2407666 - ET RBN Known Russian Business Network IP TCP - BLOCKING (334) (emerging-rbn-BLOCK.rules) 2407667 - ET RBN Known Russian Business Network IP UDP - BLOCKING (334) (emerging-rbn-BLOCK.rules) 2407668 - ET RBN Known Russian Business Network IP TCP - BLOCKING (335) (emerging-rbn-BLOCK.rules) 2407669 - ET RBN Known Russian Business Network IP UDP - BLOCKING (335) (emerging-rbn-BLOCK.rules) 2407670 - ET RBN Known Russian Business Network IP TCP - BLOCKING (336) (emerging-rbn-BLOCK.rules) 2407671 - ET RBN Known Russian Business Network IP UDP - BLOCKING (336) (emerging-rbn-BLOCK.rules) 2407672 - ET RBN Known Russian Business Network IP TCP - BLOCKING (337) (emerging-rbn-BLOCK.rules) 2407673 - ET RBN Known Russian Business Network IP UDP - BLOCKING (337) (emerging-rbn-BLOCK.rules) 2407674 - ET RBN Known Russian Business Network IP TCP - BLOCKING (338) (emerging-rbn-BLOCK.rules) 2407675 - ET RBN Known Russian Business Network IP UDP - BLOCKING (338) (emerging-rbn-BLOCK.rules) 2407676 - ET RBN Known Russian Business Network IP TCP - BLOCKING (339) (emerging-rbn-BLOCK.rules) 2407677 - ET RBN Known Russian Business Network IP UDP - BLOCKING (339) (emerging-rbn-BLOCK.rules) 2407678 - ET RBN Known Russian Business Network IP TCP - BLOCKING (340) (emerging-rbn-BLOCK.rules) 2407679 - ET RBN Known Russian Business Network IP UDP - BLOCKING (340) (emerging-rbn-BLOCK.rules) 2407680 - ET RBN Known Russian Business Network IP TCP - BLOCKING (341) (emerging-rbn-BLOCK.rules) 2407681 - ET RBN Known Russian Business Network IP UDP - BLOCKING (341) (emerging-rbn-BLOCK.rules) 2407682 - ET RBN Known Russian Business Network IP TCP - BLOCKING (342) (emerging-rbn-BLOCK.rules) 2407683 - ET RBN Known Russian Business Network IP UDP - BLOCKING (342) (emerging-rbn-BLOCK.rules) 2407684 - ET RBN Known Russian Business Network IP TCP - BLOCKING (343) (emerging-rbn-BLOCK.rules) 2407685 - ET RBN Known Russian Business Network IP UDP - BLOCKING (343) (emerging-rbn-BLOCK.rules) 2407686 - ET RBN Known Russian Business Network IP TCP - BLOCKING (344) (emerging-rbn-BLOCK.rules) 2407687 - ET RBN Known Russian Business Network IP UDP - BLOCKING (344) (emerging-rbn-BLOCK.rules) 2407688 - ET RBN Known Russian Business Network IP TCP - BLOCKING (345) (emerging-rbn-BLOCK.rules) 2407689 - ET RBN Known Russian Business Network IP UDP - BLOCKING (345) (emerging-rbn-BLOCK.rules) 2407690 - ET RBN Known Russian Business Network IP TCP - BLOCKING (346) (emerging-rbn-BLOCK.rules) 2407691 - ET RBN Known Russian Business Network IP UDP - BLOCKING (346) (emerging-rbn-BLOCK.rules) 2407692 - ET RBN Known Russian Business Network IP TCP - BLOCKING (347) (emerging-rbn-BLOCK.rules) 2407693 - ET RBN Known Russian Business Network IP UDP - BLOCKING (347) (emerging-rbn-BLOCK.rules) 2407694 - ET RBN Known Russian Business Network IP TCP - BLOCKING (348) (emerging-rbn-BLOCK.rules) 2407695 - ET RBN Known Russian Business Network IP UDP - BLOCKING (348) (emerging-rbn-BLOCK.rules) 2407696 - ET RBN Known Russian Business Network IP TCP - BLOCKING (349) (emerging-rbn-BLOCK.rules) 2407697 - ET RBN Known Russian Business Network IP UDP - BLOCKING (349) (emerging-rbn-BLOCK.rules) 2407698 - ET RBN Known Russian Business Network IP TCP - BLOCKING (350) (emerging-rbn-BLOCK.rules) 2407699 - ET RBN Known Russian Business Network IP UDP - BLOCKING (350) (emerging-rbn-BLOCK.rules) 2407700 - ET RBN Known Russian Business Network IP TCP - BLOCKING (351) (emerging-rbn-BLOCK.rules) 2407701 - ET RBN Known Russian Business Network IP UDP - BLOCKING (351) (emerging-rbn-BLOCK.rules) 2407702 - ET RBN Known Russian Business Network IP TCP - BLOCKING (352) (emerging-rbn-BLOCK.rules) 2407703 - ET RBN Known Russian Business Network IP UDP - BLOCKING (352) (emerging-rbn-BLOCK.rules) 2407704 - ET RBN Known Russian Business Network IP TCP - BLOCKING (353) (emerging-rbn-BLOCK.rules) 2407705 - ET RBN Known Russian Business Network IP UDP - BLOCKING (353) (emerging-rbn-BLOCK.rules) 2407706 - ET RBN Known Russian Business Network IP TCP - BLOCKING (354) (emerging-rbn-BLOCK.rules) 2407707 - ET RBN Known Russian Business Network IP UDP - BLOCKING (354) (emerging-rbn-BLOCK.rules) 2407708 - ET RBN Known Russian Business Network IP TCP - BLOCKING (355) (emerging-rbn-BLOCK.rules) 2407709 - ET RBN Known Russian Business Network IP UDP - BLOCKING (355) (emerging-rbn-BLOCK.rules) 2407710 - ET RBN Known Russian Business Network IP TCP - BLOCKING (356) (emerging-rbn-BLOCK.rules) 2407711 - ET RBN Known Russian Business Network IP UDP - BLOCKING (356) (emerging-rbn-BLOCK.rules) 2407712 - ET RBN Known Russian Business Network IP TCP - BLOCKING (357) (emerging-rbn-BLOCK.rules) 2407713 - ET RBN Known Russian Business Network IP UDP - BLOCKING (357) (emerging-rbn-BLOCK.rules) 2407714 - ET RBN Known Russian Business Network IP TCP - BLOCKING (358) (emerging-rbn-BLOCK.rules) 2407715 - ET RBN Known Russian Business Network IP UDP - BLOCKING (358) (emerging-rbn-BLOCK.rules) 2407716 - ET RBN Known Russian Business Network IP TCP - BLOCKING (359) (emerging-rbn-BLOCK.rules) 2407717 - ET RBN Known Russian Business Network IP UDP - BLOCKING (359) (emerging-rbn-BLOCK.rules) 2407718 - ET RBN Known Russian Business Network IP TCP - BLOCKING (360) (emerging-rbn-BLOCK.rules) 2407719 - ET RBN Known Russian Business Network IP UDP - BLOCKING (360) (emerging-rbn-BLOCK.rules) 2407720 - ET RBN Known Russian Business Network IP TCP - BLOCKING (361) (emerging-rbn-BLOCK.rules) 2407721 - ET RBN Known Russian Business Network IP UDP - BLOCKING (361) (emerging-rbn-BLOCK.rules) 2407722 - ET RBN Known Russian Business Network IP TCP - BLOCKING (362) (emerging-rbn-BLOCK.rules) 2407723 - ET RBN Known Russian Business Network IP UDP - BLOCKING (362) (emerging-rbn-BLOCK.rules) 2407724 - ET RBN Known Russian Business Network IP TCP - BLOCKING (363) (emerging-rbn-BLOCK.rules) 2407725 - ET RBN Known Russian Business Network IP UDP - BLOCKING (363) (emerging-rbn-BLOCK.rules) 2407726 - ET RBN Known Russian Business Network IP TCP - BLOCKING (364) (emerging-rbn-BLOCK.rules) 2407727 - ET RBN Known Russian Business Network IP UDP - BLOCKING (364) (emerging-rbn-BLOCK.rules) 2407728 - ET RBN Known Russian Business Network IP TCP - BLOCKING (365) (emerging-rbn-BLOCK.rules) 2407729 - ET RBN Known Russian Business Network IP UDP - BLOCKING (365) (emerging-rbn-BLOCK.rules) 2407730 - ET RBN Known Russian Business Network IP TCP - BLOCKING (366) (emerging-rbn-BLOCK.rules) 2407731 - ET RBN Known Russian Business Network IP UDP - BLOCKING (366) (emerging-rbn-BLOCK.rules) 2407732 - ET RBN Known Russian Business Network IP TCP - BLOCKING (367) (emerging-rbn-BLOCK.rules) 2407733 - ET RBN Known Russian Business Network IP UDP - BLOCKING (367) (emerging-rbn-BLOCK.rules) 2407734 - ET RBN Known Russian Business Network IP TCP - BLOCKING (368) (emerging-rbn-BLOCK.rules) 2407735 - ET RBN Known Russian Business Network IP UDP - BLOCKING (368) (emerging-rbn-BLOCK.rules) 2407736 - ET RBN Known Russian Business Network IP TCP - BLOCKING (369) (emerging-rbn-BLOCK.rules) 2407737 - ET RBN Known Russian Business Network IP UDP - BLOCKING (369) (emerging-rbn-BLOCK.rules) 2407738 - ET RBN Known Russian Business Network IP TCP - BLOCKING (370) (emerging-rbn-BLOCK.rules) 2407739 - ET RBN Known Russian Business Network IP UDP - BLOCKING (370) (emerging-rbn-BLOCK.rules) 2407740 - ET RBN Known Russian Business Network IP TCP - BLOCKING (371) (emerging-rbn-BLOCK.rules) 2407741 - ET RBN Known Russian Business Network IP UDP - BLOCKING (371) (emerging-rbn-BLOCK.rules) 2407742 - ET RBN Known Russian Business Network IP TCP - BLOCKING (372) (emerging-rbn-BLOCK.rules) 2407743 - ET RBN Known Russian Business Network IP UDP - BLOCKING (372) (emerging-rbn-BLOCK.rules) 2407744 - ET RBN Known Russian Business Network IP TCP - BLOCKING (373) (emerging-rbn-BLOCK.rules) 2407745 - ET RBN Known Russian Business Network IP UDP - BLOCKING (373) (emerging-rbn-BLOCK.rules) 2407746 - ET RBN Known Russian Business Network IP TCP - BLOCKING (374) (emerging-rbn-BLOCK.rules) 2407747 - ET RBN Known Russian Business Network IP UDP - BLOCKING (374) (emerging-rbn-BLOCK.rules) 2407748 - ET RBN Known Russian Business Network IP TCP - BLOCKING (375) (emerging-rbn-BLOCK.rules) 2407749 - ET RBN Known Russian Business Network IP UDP - BLOCKING (375) (emerging-rbn-BLOCK.rules) 2407750 - ET RBN Known Russian Business Network IP TCP - BLOCKING (376) (emerging-rbn-BLOCK.rules) 2407751 - ET RBN Known Russian Business Network IP UDP - BLOCKING (376) (emerging-rbn-BLOCK.rules) 2407752 - ET RBN Known Russian Business Network IP TCP - BLOCKING (377) (emerging-rbn-BLOCK.rules) 2407753 - ET RBN Known Russian Business Network IP UDP - BLOCKING (377) (emerging-rbn-BLOCK.rules) 2407754 - ET RBN Known Russian Business Network IP TCP - BLOCKING (378) (emerging-rbn-BLOCK.rules) 2407755 - ET RBN Known Russian Business Network IP UDP - BLOCKING (378) (emerging-rbn-BLOCK.rules) 2407756 - ET RBN Known Russian Business Network IP TCP - BLOCKING (379) (emerging-rbn-BLOCK.rules) 2407757 - ET RBN Known Russian Business Network IP UDP - BLOCKING (379) (emerging-rbn-BLOCK.rules) 2407758 - ET RBN Known Russian Business Network IP TCP - BLOCKING (380) (emerging-rbn-BLOCK.rules) 2407759 - ET RBN Known Russian Business Network IP UDP - BLOCKING (380) (emerging-rbn-BLOCK.rules) 2407760 - ET RBN Known Russian Business Network IP TCP - BLOCKING (381) (emerging-rbn-BLOCK.rules) 2407761 - ET RBN Known Russian Business Network IP UDP - BLOCKING (381) (emerging-rbn-BLOCK.rules) 2407762 - ET RBN Known Russian Business Network IP TCP - BLOCKING (382) (emerging-rbn-BLOCK.rules) 2407763 - ET RBN Known Russian Business Network IP UDP - BLOCKING (382) (emerging-rbn-BLOCK.rules) 2407764 - ET RBN Known Russian Business Network IP TCP - BLOCKING (383) (emerging-rbn-BLOCK.rules) 2407765 - ET RBN Known Russian Business Network IP UDP - BLOCKING (383) (emerging-rbn-BLOCK.rules) 2407766 - ET RBN Known Russian Business Network IP TCP - BLOCKING (384) (emerging-rbn-BLOCK.rules) 2407767 - ET RBN Known Russian Business Network IP UDP - BLOCKING (384) (emerging-rbn-BLOCK.rules) 2407768 - ET RBN Known Russian Business Network IP TCP - BLOCKING (385) (emerging-rbn-BLOCK.rules) 2407769 - ET RBN Known Russian Business Network IP UDP - BLOCKING (385) (emerging-rbn-BLOCK.rules) 2407770 - ET RBN Known Russian Business Network IP TCP - BLOCKING (386) (emerging-rbn-BLOCK.rules) 2407771 - ET RBN Known Russian Business Network IP UDP - BLOCKING (386) (emerging-rbn-BLOCK.rules) 2407772 - ET RBN Known Russian Business Network IP TCP - BLOCKING (387) (emerging-rbn-BLOCK.rules) 2407773 - ET RBN Known Russian Business Network IP UDP - BLOCKING (387) (emerging-rbn-BLOCK.rules) 2407774 - ET RBN Known Russian Business Network IP TCP - BLOCKING (388) (emerging-rbn-BLOCK.rules) 2407775 - ET RBN Known Russian Business Network IP UDP - BLOCKING (388) (emerging-rbn-BLOCK.rules) 2407776 - ET RBN Known Russian Business Network IP TCP - BLOCKING (389) (emerging-rbn-BLOCK.rules) 2407777 - ET RBN Known Russian Business Network IP UDP - BLOCKING (389) (emerging-rbn-BLOCK.rules) 2407778 - ET RBN Known Russian Business Network IP TCP - BLOCKING (390) (emerging-rbn-BLOCK.rules) 2407779 - ET RBN Known Russian Business Network IP UDP - BLOCKING (390) (emerging-rbn-BLOCK.rules) 2407780 - ET RBN Known Russian Business Network IP TCP - BLOCKING (391) (emerging-rbn-BLOCK.rules) 2407781 - ET RBN Known Russian Business Network IP UDP - BLOCKING (391) (emerging-rbn-BLOCK.rules) 2407782 - ET RBN Known Russian Business Network IP TCP - BLOCKING (392) (emerging-rbn-BLOCK.rules) 2407783 - ET RBN Known Russian Business Network IP UDP - BLOCKING (392) (emerging-rbn-BLOCK.rules) 2407784 - ET RBN Known Russian Business Network IP TCP - BLOCKING (393) (emerging-rbn-BLOCK.rules) 2407785 - ET RBN Known Russian Business Network IP UDP - BLOCKING (393) (emerging-rbn-BLOCK.rules) 2407786 - ET RBN Known Russian Business Network IP TCP - BLOCKING (394) (emerging-rbn-BLOCK.rules) 2407787 - ET RBN Known Russian Business Network IP UDP - BLOCKING (394) (emerging-rbn-BLOCK.rules) 2407788 - ET RBN Known Russian Business Network IP TCP - BLOCKING (395) (emerging-rbn-BLOCK.rules) 2407789 - ET RBN Known Russian Business Network IP UDP - BLOCKING (395) (emerging-rbn-BLOCK.rules) 2407790 - ET RBN Known Russian Business Network IP TCP - BLOCKING (396) (emerging-rbn-BLOCK.rules) 2407791 - ET RBN Known Russian Business Network IP UDP - BLOCKING (396) (emerging-rbn-BLOCK.rules) 2407792 - ET RBN Known Russian Business Network IP TCP - BLOCKING (397) (emerging-rbn-BLOCK.rules) 2407793 - ET RBN Known Russian Business Network IP UDP - BLOCKING (397) (emerging-rbn-BLOCK.rules) 2407794 - ET RBN Known Russian Business Network IP TCP - BLOCKING (398) (emerging-rbn-BLOCK.rules) 2407795 - ET RBN Known Russian Business Network IP UDP - BLOCKING (398) (emerging-rbn-BLOCK.rules) 2407796 - ET RBN Known Russian Business Network IP TCP - BLOCKING (399) (emerging-rbn-BLOCK.rules) 2407797 - ET RBN Known Russian Business Network IP UDP - BLOCKING (399) (emerging-rbn-BLOCK.rules) 2407798 - ET RBN Known Russian Business Network IP TCP - BLOCKING (400) (emerging-rbn-BLOCK.rules) 2407799 - ET RBN Known Russian Business Network IP UDP - BLOCKING (400) (emerging-rbn-BLOCK.rules) 2407800 - ET RBN Known Russian Business Network IP TCP - BLOCKING (401) (emerging-rbn-BLOCK.rules) 2407801 - ET RBN Known Russian Business Network IP UDP - BLOCKING (401) (emerging-rbn-BLOCK.rules) 2407802 - ET RBN Known Russian Business Network IP TCP - BLOCKING (402) (emerging-rbn-BLOCK.rules) 2407803 - ET RBN Known Russian Business Network IP UDP - BLOCKING (402) (emerging-rbn-BLOCK.rules) 2407804 - ET RBN Known Russian Business Network IP TCP - BLOCKING (403) (emerging-rbn-BLOCK.rules) 2407805 - ET RBN Known Russian Business Network IP UDP - BLOCKING (403) (emerging-rbn-BLOCK.rules) 2407806 - ET RBN Known Russian Business Network IP TCP - BLOCKING (404) (emerging-rbn-BLOCK.rules) 2407807 - ET RBN Known Russian Business Network IP UDP - BLOCKING (404) (emerging-rbn-BLOCK.rules) 2407808 - ET RBN Known Russian Business Network IP TCP - BLOCKING (405) (emerging-rbn-BLOCK.rules) 2407809 - ET RBN Known Russian Business Network IP UDP - BLOCKING (405) (emerging-rbn-BLOCK.rules) 2407810 - ET RBN Known Russian Business Network IP TCP - BLOCKING (406) (emerging-rbn-BLOCK.rules) 2407811 - ET RBN Known Russian Business Network IP UDP - BLOCKING (406) (emerging-rbn-BLOCK.rules) 2407812 - ET RBN Known Russian Business Network IP TCP - BLOCKING (407) (emerging-rbn-BLOCK.rules) 2407813 - ET RBN Known Russian Business Network IP UDP - BLOCKING (407) (emerging-rbn-BLOCK.rules) 2407814 - ET RBN Known Russian Business Network IP TCP - BLOCKING (408) (emerging-rbn-BLOCK.rules) 2407815 - ET RBN Known Russian Business Network IP UDP - BLOCKING (408) (emerging-rbn-BLOCK.rules) 2407816 - ET RBN Known Russian Business Network IP TCP - BLOCKING (409) (emerging-rbn-BLOCK.rules) 2407817 - ET RBN Known Russian Business Network IP UDP - BLOCKING (409) (emerging-rbn-BLOCK.rules) 2407818 - ET RBN Known Russian Business Network IP TCP - BLOCKING (410) (emerging-rbn-BLOCK.rules) 2407819 - ET RBN Known Russian Business Network IP UDP - BLOCKING (410) (emerging-rbn-BLOCK.rules) 2407820 - ET RBN Known Russian Business Network IP TCP - BLOCKING (411) (emerging-rbn-BLOCK.rules) 2407821 - ET RBN Known Russian Business Network IP UDP - BLOCKING (411) (emerging-rbn-BLOCK.rules) 2407822 - ET RBN Known Russian Business Network IP TCP - BLOCKING (412) (emerging-rbn-BLOCK.rules) 2407823 - ET RBN Known Russian Business Network IP UDP - BLOCKING (412) (emerging-rbn-BLOCK.rules) 2407824 - ET RBN Known Russian Business Network IP TCP - BLOCKING (413) (emerging-rbn-BLOCK.rules) 2407825 - ET RBN Known Russian Business Network IP UDP - BLOCKING (413) (emerging-rbn-BLOCK.rules) 2407826 - ET RBN Known Russian Business Network IP TCP - BLOCKING (414) (emerging-rbn-BLOCK.rules) 2407827 - ET RBN Known Russian Business Network IP UDP - BLOCKING (414) (emerging-rbn-BLOCK.rules) 2407828 - ET RBN Known Russian Business Network IP TCP - BLOCKING (415) (emerging-rbn-BLOCK.rules) 2407829 - ET RBN Known Russian Business Network IP UDP - BLOCKING (415) (emerging-rbn-BLOCK.rules) 2407830 - ET RBN Known Russian Business Network IP TCP - BLOCKING (416) (emerging-rbn-BLOCK.rules) 2407831 - ET RBN Known Russian Business Network IP UDP - BLOCKING (416) (emerging-rbn-BLOCK.rules) 2407832 - ET RBN Known Russian Business Network IP TCP - BLOCKING (417) (emerging-rbn-BLOCK.rules) 2407833 - ET RBN Known Russian Business Network IP UDP - BLOCKING (417) (emerging-rbn-BLOCK.rules) 2407834 - ET RBN Known Russian Business Network IP TCP - BLOCKING (418) (emerging-rbn-BLOCK.rules) 2407835 - ET RBN Known Russian Business Network IP UDP - BLOCKING (418) (emerging-rbn-BLOCK.rules) 2407836 - ET RBN Known Russian Business Network IP TCP - BLOCKING (419) (emerging-rbn-BLOCK.rules) 2407837 - ET RBN Known Russian Business Network IP UDP - BLOCKING (419) (emerging-rbn-BLOCK.rules) 2407838 - ET RBN Known Russian Business Network IP TCP - BLOCKING (420) (emerging-rbn-BLOCK.rules) 2407839 - ET RBN Known Russian Business Network IP UDP - BLOCKING (420) (emerging-rbn-BLOCK.rules) 2407840 - ET RBN Known Russian Business Network IP TCP - BLOCKING (421) (emerging-rbn-BLOCK.rules) 2407841 - ET RBN Known Russian Business Network IP UDP - BLOCKING (421) (emerging-rbn-BLOCK.rules) 2407842 - ET RBN Known Russian Business Network IP TCP - BLOCKING (422) (emerging-rbn-BLOCK.rules) 2407843 - ET RBN Known Russian Business Network IP UDP - BLOCKING (422) (emerging-rbn-BLOCK.rules) 2407844 - ET RBN Known Russian Business Network IP TCP - BLOCKING (423) (emerging-rbn-BLOCK.rules) 2407845 - ET RBN Known Russian Business Network IP UDP - BLOCKING (423) (emerging-rbn-BLOCK.rules) 2407846 - ET RBN Known Russian Business Network IP TCP - BLOCKING (424) (emerging-rbn-BLOCK.rules) 2407847 - ET RBN Known Russian Business Network IP UDP - BLOCKING (424) (emerging-rbn-BLOCK.rules) 2407848 - ET RBN Known Russian Business Network IP TCP - BLOCKING (425) (emerging-rbn-BLOCK.rules) 2407849 - ET RBN Known Russian Business Network IP UDP - BLOCKING (425) (emerging-rbn-BLOCK.rules) 2407850 - ET RBN Known Russian Business Network IP TCP - BLOCKING (426) (emerging-rbn-BLOCK.rules) 2407851 - ET RBN Known Russian Business Network IP UDP - BLOCKING (426) (emerging-rbn-BLOCK.rules) 2407852 - ET RBN Known Russian Business Network IP TCP - BLOCKING (427) (emerging-rbn-BLOCK.rules) 2407853 - ET RBN Known Russian Business Network IP UDP - BLOCKING (427) (emerging-rbn-BLOCK.rules) 2407854 - ET RBN Known Russian Business Network IP TCP - BLOCKING (428) (emerging-rbn-BLOCK.rules) 2407855 - ET RBN Known Russian Business Network IP UDP - BLOCKING (428) (emerging-rbn-BLOCK.rules) 2407856 - ET RBN Known Russian Business Network IP TCP - BLOCKING (429) (emerging-rbn-BLOCK.rules) 2407857 - ET RBN Known Russian Business Network IP UDP - BLOCKING (429) (emerging-rbn-BLOCK.rules) 2407858 - ET RBN Known Russian Business Network IP TCP - BLOCKING (430) (emerging-rbn-BLOCK.rules) 2407859 - ET RBN Known Russian Business Network IP UDP - BLOCKING (430) (emerging-rbn-BLOCK.rules) 2407860 - ET RBN Known Russian Business Network IP TCP - BLOCKING (431) (emerging-rbn-BLOCK.rules) 2407861 - ET RBN Known Russian Business Network IP UDP - BLOCKING (431) (emerging-rbn-BLOCK.rules) 2407862 - ET RBN Known Russian Business Network IP TCP - BLOCKING (432) (emerging-rbn-BLOCK.rules) 2407863 - ET RBN Known Russian Business Network IP UDP - BLOCKING (432) (emerging-rbn-BLOCK.rules) 2407864 - ET RBN Known Russian Business Network IP TCP - BLOCKING (433) (emerging-rbn-BLOCK.rules) 2407865 - ET RBN Known Russian Business Network IP UDP - BLOCKING (433) (emerging-rbn-BLOCK.rules) 2407866 - ET RBN Known Russian Business Network IP TCP - BLOCKING (434) (emerging-rbn-BLOCK.rules) 2407867 - ET RBN Known Russian Business Network IP UDP - BLOCKING (434) (emerging-rbn-BLOCK.rules) 2407868 - ET RBN Known Russian Business Network IP TCP - BLOCKING (435) (emerging-rbn-BLOCK.rules) 2407869 - ET RBN Known Russian Business Network IP UDP - BLOCKING (435) (emerging-rbn-BLOCK.rules) 2407870 - ET RBN Known Russian Business Network IP TCP - BLOCKING (436) (emerging-rbn-BLOCK.rules) 2407871 - ET RBN Known Russian Business Network IP UDP - BLOCKING (436) (emerging-rbn-BLOCK.rules) 2407872 - ET RBN Known Russian Business Network IP TCP - BLOCKING (437) (emerging-rbn-BLOCK.rules) 2407873 - ET RBN Known Russian Business Network IP UDP - BLOCKING (437) (emerging-rbn-BLOCK.rules) 2407874 - ET RBN Known Russian Business Network IP TCP - BLOCKING (438) (emerging-rbn-BLOCK.rules) 2407875 - ET RBN Known Russian Business Network IP UDP - BLOCKING (438) (emerging-rbn-BLOCK.rules) 2407876 - ET RBN Known Russian Business Network IP TCP - BLOCKING (439) (emerging-rbn-BLOCK.rules) 2407877 - ET RBN Known Russian Business Network IP UDP - BLOCKING (439) (emerging-rbn-BLOCK.rules) 2407878 - ET RBN Known Russian Business Network IP TCP - BLOCKING (440) (emerging-rbn-BLOCK.rules) 2407879 - ET RBN Known Russian Business Network IP UDP - BLOCKING (440) (emerging-rbn-BLOCK.rules) 2407880 - ET RBN Known Russian Business Network IP TCP - BLOCKING (441) (emerging-rbn-BLOCK.rules) 2407881 - ET RBN Known Russian Business Network IP UDP - BLOCKING (441) (emerging-rbn-BLOCK.rules) [+++] Added non-rule lines: [+++] -> Added to emerging-rbn-BLOCK.rules (2): # VERSION 147 # Updated 2009-09-30 20:56:59 -> Added to emerging-rbn.rules (2): # VERSION 147 # Updated 2009-09-30 20:56:59 -> Added to emerging-scan.rules (1): #by evilghost -> Added to emerging-sid-msg.map (41): 2009401 || ET WEB_ACTIVEX Microgaming FlashXControl Control Clsid Access || url,www.microgaming.co.uk/news_flashxcontrol.php || url,www.microsoft.com/technet/security/advisory/969898.mspx 2009485 || ET WEB /etc/shadow Detected in URI || url,en.wikipedia.org/wiki/Shadow_password 2010009 || ET WEB Webmin Pre-1.290 Compromise Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_Webmin || url,doc.emergingthreats.net/2010009 || url,bliki.rimuhosting.com/comments/knowledgebase/linux/miscapplications/webmin 2010010 || ET WEB_ACTIVEX Possible HP LoadRunner XUpload.ocx ActiveX Control MakeHttpRequest Arbitrary File Download Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_HP || url,doc.emergingthreats.net/2010010 || url,www.securityfocus.com/bid/36550/info 2010011 || ET WEB_ACTIVEX Possible Symantec Altiris Deployment Solution AeXNSPkgDLLib.dll ActiveX Control DownloadAndInstall Method Arbitrary Code Execution Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_Altiris || url,doc.emergingthreats.net/2010011 || url,trac.metasploit.com/browser/framework3/trunk/modules/exploits/windows/browser/symantec_altirisdeployment_downloadandinstall.rb?rev=7023 || url,www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090922_00 || url,securitytracker.com/alerts/2009/Sep/1022928.html 2010012 || ET WEB_ACTIVEX Possible KeyWorks KeyHelp Module keyhelp.ocx ActiveX Control Remote Buffer Overflow Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_Keyworks || url,doc.emergingthreats.net/2010012 || url,www.securityfocus.com/bid/36546/info 2010013 || ET WEB_ACTIVEX Possible SAP GUI ActiveX Control Insecure Method File Overwrite Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_SAP || url,doc.emergingthreats.net/2010013 || url,www.securitytracker.com/alerts/2009/Sep/1022953.html 2010014 || ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter UNION SELECT SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Joomla || url,doc.emergingthreats.net/2010014 || url,www.securityfocus.com/bid/36213/info 2010015 || ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter SELECT FROM SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Joomla || url,doc.emergingthreats.net/2010015 || url,www.securityfocus.com/bid/36213/info 2010016 || ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter DELETE FROM SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Joomla || url,doc.emergingthreats.net/2010016 || url,www.securityfocus.com/bid/36213/info 2010017 || ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter UPDATE SET SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Joomla || url,doc.emergingthreats.net/2010017 || url,www.securityfocus.com/bid/36213/info 2010018 || ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter INSERT INTO SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Joomla || url,doc.emergingthreats.net/2010018 || url,www.securityfocus.com/bid/36213/info 2010019 || ET SCAN Tomcat Web Application Manager scanning || url,doc.emergingthreats.net/2010019 || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_Tomcat_Brute 2010020 || ET WEB_SPECIFIC SHOP-INET show_cat2.php grid Parameter SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Shop-inet || url,doc.emergingthreats.net/2010020 || url,secunia.com/advisories/33660/ || url,milw0rm.com/exploits/7874 || bugtraq,33471 2010021 || ET WEB_SPECIFIC RS-CMS rscms_mod_newsview.php key Parameter Processing Remote SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_RS-CMS || url,doc.emergingthreats.net/2010021 || url,vupen.com/english/advisories/2009/1658 || url,milw0rm.com/exploits/9000 2010022 || ET WEB_SPECIFIC AdaptWeb a_index.php CodigoDisciplina Parameter Remote SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_AdaptWeb || url,doc.emergingthreats.net/2010022 || url,milw0rm.com/exploits/8954 || url,en.securitylab.ru/nvd/381723.php || cve,CVE-2009-2152 2010023 || ET WEB_SPECIFIC LightOpenCMS smarty.php cwd Parameter Local File Inclusion || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_LightOpenCMS || url,doc.emergingthreats.net/2010023 || url,en.securitylab.ru/nvd/381880.php || url,milw0rm.com/exploits/9015 2010024 || ET WEB_SPECIFIC LightOpenCMS smarty.php cwd Parameter Remote File Inclusion || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_LightOpenCMS || url,doc.emergingthreats.net/2010024 || url,en.securitylab.ru/nvd/381880.php || url,milw0rm.com/exploits/9015 2010025 || ET WEB_SPECIFIC DM Albums album.php SECURITY_FILE Parameter Local File Inclusion || url,milw0rm.com/exploits/9044 || bugtraq,35521 || url,secunia.com/advisories/35622/ 2010026 || WEB-PHP TorrentTrader Classic delreq.php categ Parameter Sql Injection || bugtraq,35369 || url,milw0rm.com/exploits/8958 2010027 || ET WEB_SPECIFIC DM Albums album.php SECURITY_FILE Parameter Remote File Inclusion || url,milw0rm.com/exploits/9044 || bugtraq,35521 || url,secunia.com/advisories/35622/ 2010028 || ET WEB_SPECIFIC NewSolved newsscript.php jahr Parameter SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_NewSolved || url,doc.emergingthreats.net/7741 || url,milw0rm.com/exploits/9042 || url,secunia.com/advisories/35611/ 2010029 || ET WEB_ACTIVEX PDFZilla 1.0.8 ActiveX DebugMsgLog method DOS CLSid Access || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_PDFZilla || url,doc.emergingthreats.net/9130 || url,packetstormsecurity.org/0908-exploits/pdfzilla-overflow.txt 2010030 || ET POLICY Exchange 2003 OWA plain-text E-Mail message access, not SSL || url,support.microsoft.com/kb/321832 2010031 || ET WEB Possible Novell eDirectory 'dconserv.dlm' Cross-Site Scripting Attempt || url,www.securityfocus.com/bid/36567/info 2500368 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (185) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500369 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP (185) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500370 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (186) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500371 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP (186) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500372 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (187) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500373 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP (187) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500374 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (188) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500375 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP (188) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510368 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP - BLOCKING (185) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510369 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP - BLOCKING (185) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510370 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP - BLOCKING (186) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510371 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP - BLOCKING (186) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510372 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP - BLOCKING (187) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510373 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP - BLOCKING (187) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510374 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP - BLOCKING (188) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510375 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP - BLOCKING (188) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts -> Added to emerging-sid-msg.map.txt (41): 2009401 || ET WEB_ACTIVEX Microgaming FlashXControl Control Clsid Access || url,www.microgaming.co.uk/news_flashxcontrol.php || url,www.microsoft.com/technet/security/advisory/969898.mspx 2009485 || ET WEB /etc/shadow Detected in URI || url,en.wikipedia.org/wiki/Shadow_password 2010009 || ET WEB Webmin Pre-1.290 Compromise Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_Webmin || url,doc.emergingthreats.net/2010009 || url,bliki.rimuhosting.com/comments/knowledgebase/linux/miscapplications/webmin 2010010 || ET WEB_ACTIVEX Possible HP LoadRunner XUpload.ocx ActiveX Control MakeHttpRequest Arbitrary File Download Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_HP || url,doc.emergingthreats.net/2010010 || url,www.securityfocus.com/bid/36550/info 2010011 || ET WEB_ACTIVEX Possible Symantec Altiris Deployment Solution AeXNSPkgDLLib.dll ActiveX Control DownloadAndInstall Method Arbitrary Code Execution Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_Altiris || url,doc.emergingthreats.net/2010011 || url,trac.metasploit.com/browser/framework3/trunk/modules/exploits/windows/browser/symantec_altirisdeployment_downloadandinstall.rb?rev=7023 || url,www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090922_00 || url,securitytracker.com/alerts/2009/Sep/1022928.html 2010012 || ET WEB_ACTIVEX Possible KeyWorks KeyHelp Module keyhelp.ocx ActiveX Control Remote Buffer Overflow Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_Keyworks || url,doc.emergingthreats.net/2010012 || url,www.securityfocus.com/bid/36546/info 2010013 || ET WEB_ACTIVEX Possible SAP GUI ActiveX Control Insecure Method File Overwrite Attempt || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_SAP || url,doc.emergingthreats.net/2010013 || url,www.securitytracker.com/alerts/2009/Sep/1022953.html 2010014 || ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter UNION SELECT SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Joomla || url,doc.emergingthreats.net/2010014 || url,www.securityfocus.com/bid/36213/info 2010015 || ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter SELECT FROM SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Joomla || url,doc.emergingthreats.net/2010015 || url,www.securityfocus.com/bid/36213/info 2010016 || ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter DELETE FROM SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Joomla || url,doc.emergingthreats.net/2010016 || url,www.securityfocus.com/bid/36213/info 2010017 || ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter UPDATE SET SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Joomla || url,doc.emergingthreats.net/2010017 || url,www.securityfocus.com/bid/36213/info 2010018 || ET WEB_SPECIFIC Possible Joomla! Game Server Component 'id' Parameter INSERT INTO SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Joomla || url,doc.emergingthreats.net/2010018 || url,www.securityfocus.com/bid/36213/info 2010019 || ET SCAN Tomcat Web Application Manager scanning || url,doc.emergingthreats.net/2010019 || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_Tomcat_Brute 2010020 || ET WEB_SPECIFIC SHOP-INET show_cat2.php grid Parameter SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_Shop-inet || url,doc.emergingthreats.net/2010020 || url,secunia.com/advisories/33660/ || url,milw0rm.com/exploits/7874 || bugtraq,33471 2010021 || ET WEB_SPECIFIC RS-CMS rscms_mod_newsview.php key Parameter Processing Remote SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_RS-CMS || url,doc.emergingthreats.net/2010021 || url,vupen.com/english/advisories/2009/1658 || url,milw0rm.com/exploits/9000 2010022 || ET WEB_SPECIFIC AdaptWeb a_index.php CodigoDisciplina Parameter Remote SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_AdaptWeb || url,doc.emergingthreats.net/2010022 || url,milw0rm.com/exploits/8954 || url,en.securitylab.ru/nvd/381723.php || cve,CVE-2009-2152 2010023 || ET WEB_SPECIFIC LightOpenCMS smarty.php cwd Parameter Local File Inclusion || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_LightOpenCMS || url,doc.emergingthreats.net/2010023 || url,en.securitylab.ru/nvd/381880.php || url,milw0rm.com/exploits/9015 2010024 || ET WEB_SPECIFIC LightOpenCMS smarty.php cwd Parameter Remote File Inclusion || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_LightOpenCMS || url,doc.emergingthreats.net/2010024 || url,en.securitylab.ru/nvd/381880.php || url,milw0rm.com/exploits/9015 2010025 || ET WEB_SPECIFIC DM Albums album.php SECURITY_FILE Parameter Local File Inclusion || url,milw0rm.com/exploits/9044 || bugtraq,35521 || url,secunia.com/advisories/35622/ 2010026 || WEB-PHP TorrentTrader Classic delreq.php categ Parameter Sql Injection || bugtraq,35369 || url,milw0rm.com/exploits/8958 2010027 || ET WEB_SPECIFIC DM Albums album.php SECURITY_FILE Parameter Remote File Inclusion || url,milw0rm.com/exploits/9044 || bugtraq,35521 || url,secunia.com/advisories/35622/ 2010028 || ET WEB_SPECIFIC NewSolved newsscript.php jahr Parameter SQL Injection || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB_SQL_INJECTION/WEB_NewSolved || url,doc.emergingthreats.net/7741 || url,milw0rm.com/exploits/9042 || url,secunia.com/advisories/35611/ 2010029 || ET WEB_ACTIVEX PDFZilla 1.0.8 ActiveX DebugMsgLog method DOS CLSid Access || url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/WEB/WEB_PDFZilla || url,doc.emergingthreats.net/9130 || url,packetstormsecurity.org/0908-exploits/pdfzilla-overflow.txt 2010030 || ET POLICY Exchange 2003 OWA plain-text E-Mail message access, not SSL || url,support.microsoft.com/kb/321832 2010031 || ET WEB Possible Novell eDirectory 'dconserv.dlm' Cross-Site Scripting Attempt || url,www.securityfocus.com/bid/36567/info 2500368 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (185) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500369 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP (185) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500370 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (186) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500371 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP (186) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500372 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (187) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500373 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP (187) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500374 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP (188) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2500375 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP (188) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510368 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP - BLOCKING (185) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510369 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP - BLOCKING (185) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510370 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP - BLOCKING (186) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510371 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP - BLOCKING (186) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510372 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP - BLOCKING (187) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510373 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP - BLOCKING (187) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510374 || ET COMPROMISED Known Compromised or Hostile Host Traffic TCP - BLOCKING (188) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts 2510375 || ET COMPROMISED Known Compromised or Hostile Host Traffic UDP - BLOCKING (188) || url,doc.emergingthreats.net/bin/view/Main/CompromisedHosts [---] Removed non-rule lines: [---] -> Removed from emerging-rbn-BLOCK.rules (2): # VERSION 146 # Updated 2009-09-24 16:13:32 -> Removed from emerging-rbn.rules (2): # VERSION 146 # Updated 2009-09-24 16:13:32 -> Removed from emerging-sid-msg.map (5): 2010009 || ET WEB Webmin Pre-1.290 Compromise Attempt || url,bliki.rimuhosting.com/comments/knowledgebase/linux/miscapplications/webmin 2010010 || ET WEB_ACTIVEX Possible HP LoadRunner XUpload.ocx ActiveX Control MakeHttpRequest Arbitrary File Download Attempt || url,www.securityfocus.com/bid/36550/info 2010011 || ET WEB_ACTIVEX Possible Symantec Altiris Deployment Solution AeXNSPkgDLLib.dll ActiveX Control DownloadAndInstall Method Arbitrary Code Execution Attempt || url,trac.metasploit.com/browser/framework3/trunk/modules/exploits/windows/browser/symantec_altirisdeployment_downloadandinstall.rb?rev=7023 || url,www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090922_00 || url,securitytracker.com/alerts/2009/Sep/1022928.html 2010012 || ET WEB_ACTIVEX Possible KeyWorks KeyHelp Module keyhelp.ocx ActiveX Control Remote Buffer Overflow Attempt || url,www.securityfocus.com/bid/36546/info 2010013 || ET WEB_ACTIVEX Possible SAP GUI ActiveX Control Insecure Method File Overwrite Attempt || url,www.securitytracker.com/alerts/2009/Sep/1022953.html -> Removed from emerging-sid-msg.map.txt (5): 2010009 || ET WEB Webmin Pre-1.290 Compromise Attempt || url,bliki.rimuhosting.com/comments/knowledgebase/linux/miscapplications/webmin 2010010 || ET WEB_ACTIVEX Possible HP LoadRunner XUpload.ocx ActiveX Control MakeHttpRequest Arbitrary File Download Attempt || url,www.securityfocus.com/bid/36550/info 2010011 || ET WEB_ACTIVEX Possible Symantec Altiris Deployment Solution AeXNSPkgDLLib.dll ActiveX Control DownloadAndInstall Method Arbitrary Code Execution Attempt || url,trac.metasploit.com/browser/framework3/trunk/modules/exploits/windows/browser/symantec_altirisdeployment_downloadandinstall.rb?rev=7023 || url,www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090922_00 || url,securitytracker.com/alerts/2009/Sep/1022928.html 2010012 || ET WEB_ACTIVEX Possible KeyWorks KeyHelp Module keyhelp.ocx ActiveX Control Remote Buffer Overflow Attempt || url,www.securityfocus.com/bid/36546/info 2010013 || ET WEB_ACTIVEX Possible SAP GUI ActiveX Control Insecure Method File Overwrite Attempt || url,www.securitytracker.com/alerts/2009/Sep/1022953.html From evilghost at packetmail.net Thu Oct 1 16:10:17 2009 From: evilghost at packetmail.net (evilghost@packetmail.net) Date: Thu, 1 Oct 2009 15:10:17 -0500 Subject: [Emerging-Sigs] Corrected: Proposed Signature; Exchange 2003 OWA not SSL In-Reply-To: <4AC4F33D.1070309@jonkmans.com> References: <4AC4F1CF.7000603@packetmail.net> <4AC4F29B.9080207@packetmail.net> <4AC4F33D.1070309@jonkmans.com> Message-ID: <4AC50CA9.60308@packetmail.net> Can't get this sig to match/fire. Should match just fine, probably more Snort 2.8.4.1 fun-games whilst the SourceFire guys shoot off squeezy-pigs with rocket engines in them. Must be nice to be able to do that while 2.8.4.1 flowbits is borked and http_inspect mangles content matching. Tried rawbytes, throwing out the flow matching, etc. I think I may upgrade to 2.8.5 around Christmas to see what "gifts" the new year will give me. Sorry to waste you time. Disable the sig unless it actually *works* for someone. :( -evilghost. Matt Jonkman wrote: > Interesting one, posting now. Thanks! > > Matt > > evilghost at packetmail.net wrote: > >> Bad eyes, semi-color in flow: >> >> alert tcp $HOME_NET 80 -> $EXTERNAL_NET any (msg:"ET POLICY Exchange >> 2003 OWA plain-text E-Mail message access, not SSL"; >> flow:established,from_server; content:"var g_szURL = \"http\://"; >> content:"var g_szFolder = \""; content:"var g_szVirtualRoot = >> \"http\://"; content:"Microsoft Corporation."; >> classtype:web-application-activity; >> reference:url,support.microsoft.com/kb/321832; sid:2009xxx; rev:1;) >> >> evilghost at packetmail.net wrote: >> >>> Below proposed signature for Exchange OWA in the plain. >>> Comments/input welcome. >>> >>> alert tcp $HOME_NET 80 -> $EXTERNAL_NET any (msg:"ET POLICY Exchange >>> 2003 OWA plain-text E-Mail message access, not SSL"; >>> flow:established;from_server; content:"var g_szURL = \"http\://"; >>> content:"var g_szFolder = \""; content:"var g_szVirtualRoot = >>> \"http\://"; content:"Microsoft Corporation."; >>> classtype:web-application-activity; >>> reference:url,support.microsoft.com/kb/321832; sid:2009xxx; rev:1;) >>> >>> -evilghost >>> >>> >> _______________________________________________ >> Emerging-sigs mailing list >> Emerging-sigs at emergingthreats.net >> http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs >> > > From jules at visionintel.com Fri Oct 2 04:22:12 2009 From: jules at visionintel.com (Jules Pagna Disso) Date: Fri, 2 Oct 2009 09:22:12 +0100 Subject: [Emerging-Sigs] Ruleset Change Reminder In-Reply-To: <4AC4FB70.40901@jonkmans.com> References: <4AC4FB70.40901@jonkmans.com> Message-ID: <69544300910020122y3fac1e9fufcf6bb768309f3cb@mail.gmail.com> hi Matt I would be nice if you could add a text file describing the content of each .rules file. (i hope u don't mind reminder - sorry if you do) thanks, Jules 2009/10/1 Matt Jonkman > One last reminder, we're changing ruleset names tonight at midnight EST. > > There will be five new files: > > emerging-web_server.rules > emerging-web_client.rules > emerging-web_specific_apps.rules > > emerging-user_agents.rules > emerging-current_events.rules > > > And one will go away: > emerging-sql_injection.rules > > We will keep an empty file in place for the one going away for the > foreseeable future. > > -- > -------------------------------------------- > Matthew Jonkman > Emerging Threats > Open Information Security Foundation (OISF) > Phone 765-429-0398 > Fax 312-264-0205 > http://www.emergingthreats.net > http://www.openinformationsecurityfoundation.org > -------------------------------------------- > > PGP: http://www.jonkmans.com/mattjonkman.asc > > > _______________________________________________ > Emerging-sigs mailing list > Emerging-sigs at emergingthreats.net > http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.emergingthreats.net/pipermail/emerging-sigs/attachments/20091002/d0e2809a/attachment.html From jonkman at jonkmans.com Fri Oct 2 09:07:11 2009 From: jonkman at jonkmans.com (Matt Jonkman) Date: Fri, 02 Oct 2009 09:07:11 -0400 Subject: [Emerging-Sigs] Ruleset Change Reminder In-Reply-To: <69544300910020122y3fac1e9fufcf6bb768309f3cb@mail.gmail.com> References: <4AC4FB70.40901@jonkmans.com> <69544300910020122y3fac1e9fufcf6bb768309f3cb@mail.gmail.com> Message-ID: <4AC5FAFF.2090001@jonkmans.com> Absolutely, doing that up today. It took me a LOT longer to make the changes yesterday than I had planned. Please test the new ruleset and let me know about any issues. I dropped a few very old and very high load rules along the way, but not many. I have yet to change the references in many of the rules. That will go in today. As well as the readme. Matt Jules Pagna Disso wrote: > hi Matt > > I would be nice if you could add a text file describing the content of > each .rules file. (i hope u don't mind reminder - sorry if you do) > > thanks, > Jules > > 2009/10/1 Matt Jonkman > > > One last reminder, we're changing ruleset names tonight at midnight EST. > > There will be five new files: > > emerging-web_server.rules > emerging-web_client.rules > emerging-web_specific_apps.rules > > emerging-user_agents.rules > emerging-current_events.rules > > > And one will go away: > emerging-sql_injection.rules > > We will keep an empty file in place for the one going away for the > foreseeable future. > > -- > -------------------------------------------- > Matthew Jonkman > Emerging Threats > Open Information Security Foundation (OISF) > Phone 765-429-0398 > Fax 312-264-0205 > http://www.emergingthreats.net > http://www.openinformationsecurityfoundation.org > -------------------------------------------- > > PGP: http://www.jonkmans.com/mattjonkman.asc > > > _______________________________________________ > Emerging-sigs mailing list > Emerging-sigs at emergingthreats.net > > http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs > > > > ------------------------------------------------------------------------ > > _______________________________________________ > Emerging-sigs mailing list > Emerging-sigs at emergingthreats.net > http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs -- -------------------------------------------- Matthew Jonkman Emerging Threats Open Information Security Foundation (OISF) Phone 765-429-0398 Fax 312-264-0205 http://www.emergingthreats.net http://www.openinformationsecurityfoundation.org -------------------------------------------- PGP: http://www.jonkmans.com/mattjonkman.asc From security at davidwharton.us Fri Oct 2 12:26:58 2009 From: security at davidwharton.us (David Wharton) Date: Fri, 2 Oct 2009 11:26:58 -0500 Subject: [Emerging-Sigs] ET CURRENT_EVENTS Internal User may have Visited an ASProx Infected Site Message-ID: Here are some (temporary) signatures to identify if an internal user has visited a site that has been hit by the recent ASProx attack. See http://garwarner.blogspot.com/2009/10/cyber-security-awareness-month-day-one.html for details. I opted against a single signature with a PCRE for performance reasons. My ISP is blocking these rules in the clear because they are flagged as spam. Sorry about this but just base64 decode the following: YWxlcnQgdGNwICRFWFRFUk5BTF9ORVQgJEhUVFBfUE9SVFMgLT4gJEhPTUVfTkVUIGFueSAobXNnOiJFVCBDVVJSRU5UX0VWRU5UUyBJbnRlcm5hbCBVc2VyIG1heSBoYXZlIFZpc2l0ZWQgYW4gQVNQcm94IEluZmVjdGVkIFNpdGUiOyBmbG93OmVzdGFibGlzaGVkLGZyb21fc2VydmVyOyBjb250ZW50OiI8c2NyaXB0IHNyYz1odHRwOi8vd3d3LmFkcy10LnJ1L2Fkcy5qcz4iOyBub2Nhc2U7IGNsYXNzdHlwZTp0cm9qYW4tYWN0aXZpdHk7IHJlZmVyZW5jZTp1cmwsZ2Fyd2FybmVyLmJsb2dzcG90LmNvbS8yMDA5LzEwL2N5YmVyLXNlY3VyaXR5LWF3YXJlbmVzcy1tb250aC1kYXktb25lLmh0bWw7IHNpZDoyMDA5eHh4OyByZXY6MDspCgphbGVydCB0Y3AgJEVYVEVSTkFMX05FVCAkSFRUUF9QT1JUUyAtPiAkSE9NRV9ORVQgYW55IChtc2c6IkVUIENVUlJFTlRfRVZFTlRTIEludGVybmFsIFVzZXIgbWF5IGhhdmUgVmlzaXRlZCBhbiBBU1Byb3ggSW5mZWN0ZWQgU2l0ZSI7IGZsb3c6ZXN0YWJsaXNoZWQsZnJvbV9zZXJ2ZXI7IGNvbnRlbnQ6IjxzY3JpcHQgc3JjPWh0dHA6Ly93d3cuYmFubmVydC5ydS9hZHMuanM + Ijsgbm9jYXNlOyBjbGFzc3R5cGU6dHJvamFuLWFjdGl2aXR5OyByZWZlcmVuY2U6dXJsLGdhcndhcm5lci5ibG9nc3BvdC5jb20vMjAwOS8xMC9jeWJlci1zZWN1cml0eS1hd2FyZW5lc3MtbW9udGgtZGF5LW9uZS5odG1sOyBzaWQ6MjAwOXh4eDsgcmV2OjA7KQoKYWxlcnQgdGNwICRFWFRFUk5BTF9ORVQgJEhUVFBfUE9SVFMgLT4gJEhPTUVfTkVUIGFueSAobXNnOiJFVCBDVVJSRU5UX0VWRU5UUyBJbnRlcm5hbCBVc2VyIG1heSBoYXZlIFZpc2l0ZWQgYW4gQVNQcm94IEluZmVjdGVkIFNpdGUiOyBmbG93OmVzdGFibGlzaGVkLGZyb21fc2VydmVyOyBjb250ZW50OiI8c2NyaXB0IHNyYz1odHRwOi8vd3d3LmJhbm5lcmRyaXZlbi5ydS9hZHMuanM + Ijsgbm9jYXNlOyBjbGFzc3R5cGU6dHJvamFuLWFjdGl2aXR5OyByZWZlcmVuY2U6dXJsLGdhcndhcm5lci5ibG9nc3BvdC5jb20vMjAwOS8xMC9jeWJlci1zZWN1cml0eS1hd2FyZW5lc3MtbW9udGgtZGF5LW9uZS5odG1sOyBzaWQ6MjAwOXh4eDsgcmV2OjA7KQo = -David Wharton From jonkman at jonkmans.com Fri Oct 2 13:28:33 2009 From: jonkman at jonkmans.com (Matt Jonkman) Date: Fri, 02 Oct 2009 13:28:33 -0400 Subject: [Emerging-Sigs] ET CURRENT_EVENTS Internal User may have Visited an ASProx Infected Site In-Reply-To: References: Message-ID: <4AC63841.10405@jonkmans.com> Haha, base64 to defeat your ISP. That's classic. Matt David Wharton wrote: > Here are some (temporary) signatures to identify if an internal user > has visited a site that has been hit by the recent ASProx attack. See http://garwarner.blogspot.com/2009/10/cyber-security-awareness-month-day-one.html > for details. I opted against a single signature with a PCRE for > performance reasons. > > My ISP is blocking these rules in the clear because they are flagged > as spam. Sorry about this but just base64 decode the following: > > YWxlcnQgdGNwICRFWFRFUk5BTF9ORVQgJEhUVFBfUE9SVFMgLT4gJEhPTUVfTkVUIGFueSAobXNnOiJFVCBDVVJSRU5UX0VWRU5UUyBJbnRlcm5hbCBVc2VyIG1heSBoYXZlIFZpc2l0ZWQgYW4gQVNQcm94IEluZmVjdGVkIFNpdGUiOyBmbG93OmVzdGFibGlzaGVkLGZyb21fc2VydmVyOyBjb250ZW50OiI8c2NyaXB0IHNyYz1odHRwOi8vd3d3LmFkcy10LnJ1L2Fkcy5qcz4iOyBub2Nhc2U7IGNsYXNzdHlwZTp0cm9qYW4tYWN0aXZpdHk7IHJlZmVyZW5jZTp1cmwsZ2Fyd2FybmVyLmJsb2dzcG90LmNvbS8yMDA5LzEwL2N5YmVyLXNlY3VyaXR5LWF3YXJlbmVzcy1tb250aC1kYXktb25lLmh0bWw7IHNpZDoyMDA5eHh4OyByZXY6MDspCgphbGVydCB0Y3AgJEVYVEVSTkFMX05FVCAkSFRUUF9QT1JUUyAtPiAkSE9NRV9ORVQgYW55IChtc2c6IkVUIENVUlJFTlRfRVZFTlRTIEludGVybmFsIFVzZXIgbWF5IGhhdmUgVmlzaXRlZCBhbiBBU1Byb3ggSW5mZWN0ZWQgU2l0ZSI7IGZsb3c6ZXN0YWJsaXNoZWQsZnJvbV9zZXJ2ZXI7IGNvbnRlbnQ6IjxzY3JpcHQgc3JjPWh0dHA6Ly93d3cuYmFubmVydC5ydS9hZHMuanM > + > Ijsgbm9jYXNlOyBjbGFzc3R5cGU6dHJvamFuLWFjdGl2aXR5OyByZWZlcmVuY2U6dXJsLGdhcndhcm5lci5ibG9nc3BvdC5jb20vMjAwOS8xMC9jeWJlci1zZWN1cml0eS1hd2FyZW5lc3MtbW9udGgtZGF5LW9uZS5odG1sOyBzaWQ6MjAwOXh4eDsgcmV2OjA7KQoKYWxlcnQgdGNwICRFWFRFUk5BTF9ORVQgJEhUVFBfUE9SVFMgLT4gJEhPTUVfTkVUIGFueSAobXNnOiJFVCBDVVJSRU5UX0VWRU5UUyBJbnRlcm5hbCBVc2VyIG1heSBoYXZlIFZpc2l0ZWQgYW4gQVNQcm94IEluZmVjdGVkIFNpdGUiOyBmbG93OmVzdGFibGlzaGVkLGZyb21fc2VydmVyOyBjb250ZW50OiI8c2NyaXB0IHNyYz1odHRwOi8vd3d3LmJhbm5lcmRyaXZlbi5ydS9hZHMuanM > + > Ijsgbm9jYXNlOyBjbGFzc3R5cGU6dHJvamFuLWFjdGl2aXR5OyByZWZlcmVuY2U6dXJsLGdhcndhcm5lci5ibG9nc3BvdC5jb20vMjAwOS8xMC9jeWJlci1zZWN1cml0eS1hd2FyZW5lc3MtbW9udGgtZGF5LW9uZS5odG1sOyBzaWQ6MjAwOXh4eDsgcmV2OjA7KQo > = > > -David Wharton > _______________________________________________ > Emerging-sigs mailing list > Emerging-sigs at emergingthreats.net > http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs -- -------------------------------------------- Matthew Jonkman Emerging Threats Open Information Security Foundation (OISF) Phone 765-429-0398 Fax 312-264-0205 http://www.emergingthreats.net http://www.openinformationsecurityfoundation.org -------------------------------------------- PGP: http://www.jonkmans.com/mattjonkman.asc From jonkman at jonkmans.com Fri Oct 2 13:29:10 2009 From: jonkman at jonkmans.com (Matt Jonkman) Date: Fri, 02 Oct 2009 13:29:10 -0400 Subject: [Emerging-Sigs] ET CURRENT_EVENTS Internal User may have Visited an ASProx Infected Site In-Reply-To: References: Message-ID: <4AC63866.2050801@jonkmans.com> What I believe you sent: #by David Wharton alert tcp $EXTERNAL_NET $HTTP_PORTS -> $HOME_NET any (msg:"ET CURRENT_EVENTS Internal User may have Visited an ASProx Infected Site"; flow:established,from_server; content:"