alert ip $HOME_NET any -> [72.47.69.7,71.136.208.4,76.99.189.18,63.160.178.124,205.209.179.37] any (msg:"BLEEDING-EDGE CURRENT_EVENTS Known Storm Worm Master site"; threshold: type both, count 1, seconds 60, track by_dst; classtype:trojan-activity; sid:2006390; rev:2;)

Added 2007-07-27 05:33:11 UTC


alert ip $HOME_NET any -> [205.209.179.37] any (msg:"BLEEDING-EDGE CURRENT_EVENTS Known Storm Worm Master site"; threshold: type both, count 1, seconds 60, track by_dst; classtype:trojan-activity; sid:2006390; rev:1;)

Added 2007-07-11 02:45:54 UTC


Topic revision: r1 - 2008-01-08 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats