Shadowserver.org Known Command and Control Rules

This ruleset takes a daily list of the known CnC? Servers as researched by Shadowserver.org and converts them into Snort signatures, Bro Signatures, and Firewall rules.

Rules are available here:

Shadowserver Botnet Command and Control Server Rules (ShadowServerCC):

• emerging-botcc.rules
• emerging-botcc-BLOCK.rules

Sid Range info:

2404000-2404999 Shadowserver.org Bot C&C List — Updated Daily

2405000-2405999 Shadowserver.org Bot C&C List with fwsam Drop Statements– Updated Daily

Firewall Rules http://www.emergingthreats.net/fwrules