IP Blacklisting in Snort
Tags
| attack-pattern: | Data Dns - T1071.004 Dns - T1590.002 Dns Server - T1583.002 Dns Server - T1584.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 2be8b1ee-d489-4fea-8caf-1789cc112640 |
| Fingerprint | ae7a8d5c38183333 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | May 13, 2009, 3:53 p.m. |
| Added to db | Oct. 9, 2022, 4:15 p.m. |
| Last updated | Nov. 2, 2024, 7:03 a.m. |
| Headline | Vulnerability Information |
| Title | IP Blacklisting in Snort |
| Detected Hints/Tags/Attributes | 11/1/6 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://blog.talosintelligence.com/2009/05/ip-blacklisting-in-snort.html |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 115 | www.snort.org |
|
| Details | Domain | 1 | securitysauce.blogspot.com |
|
| Details | File | 1 | ip-blacklisting-for-snort-2841.html |
|
| Details | IPv4 | 1 | 2.8.4.1 |
|
| Details | Url | 1 | http://www.snort.org/users/roesch/code/iplist.patch.tgz |
|
| Details | Url | 1 | http://securitysauce.blogspot.com/2009/05/ip-blacklisting-for-snort-2841.html |