Dshield Top Attackers

This ruleset takes a daily list of the top attackers reported to Dshield and converts them into Snort signatures, Bro Signatures, and Firewall rules.

Source is

http://www.dshield.org/top10.html

Specifically: http://feeds.dshield.org/block.txt

Rules are available here:

Dshield Top Attackers List (DshieldTopAttackers) :

• emerging-dshield.rules
• emerging-dshield-drop.rules

Sid Range info:

2402000-2402999 Dshield Top Attackers Rules — Updated Daily

2403000-2403999 Dshield Top Attackers Rules with fwsam Drop statements — Updated Daily

Firewall Rules http://www.emergingthreats.net/fwrules

-- MattJonkman - 26 Jun 2008