One last new ruleset to add this week. I promise no more for a bit.

http://docs.bleedingthreats.net/bin/view/Main/CompromisedHost

This is a compilation of several very reliable sources of hosts that are compromised. Not your everyday compromised spewing a little spam kind of hosts. These are significantly hostile.

These are updated daily or better, so be sure you’re updating as well.

If you have an intelligence source to add to the list please let me know.

http://www.bleedingthreats.net/rules/bleeding-compromised.rules
http://www.bleedingthreats.net/rules/bleeding-compromised-BLOCK.rules

Matt

This entry was posted on Friday, August 24th, 2007 at 2:57 am and is filed under Documentation, General, New Rules. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.