[prev in list] [next in list] [prev in thread] [next in thread] 

List:       emerging-sigs
Subject:    [Emerging-Sigs] Shadow server sinkhole IPs
From:       AD <elhoim () gmail ! com>
Date:       2013-01-08 10:23:43
Message-ID: CAFb3UMg0ypR3PmDxnz02pPBzC-xsJM4tG7na_DkGcEHSzZ7nLg () mail ! gmail ! com
[Download RAW message or body]

Inspired by rules 2016101 to 2016105.

Some IPs / reverse hostnames i could find searching on shadowserver sinkholes.
Using robtex:
http://ip.robtex.com/212.227.55.84.html
http://ip.robtex.com/74.208.15.160.html
http://ip.robtex.com/74.208.164.166.html
http://ip.robtex.com/87.106.240.162.html

Using ISC passive DNS DB:
212.227.55.84
74.208.15.160
74.208.15.97
74.208.164.166
74.208.64.145
74.208.64.191
87.106.24.200
87.106.240.162
87.106.250.34
87.106.26.9
87.106.86.28
_______________________________________________
Emerging-sigs mailing list
[email protected]
http://lists.emergingthreats.net/mailman/listinfo/emerging-sigs

Support Emerging Threats! Subscribe to Emerging Threats Pro \
http://www.emergingthreatspro.com The ONLY place to get complete premium rulesets for \
all versions of Suricata and Snort 2.4.0 through Current!


[prev in list] [next in list] [prev in thread] [next in thread]