# # Rules to block the following: # # C&C servers identified by Shadowserver (www.shadowserver.org) # Spam nes identified by Spamhaus (www.spamhaus.org) # Top Attackers listed by Dhsield (www.dhsield.org) # # More information available at www.bleedingthreats.net # # Please submit any feedback or ideas to bleeding@bleedingthreats.net or the bleeding-sigs mailing list. # #************************************************************* # # Copyright (c) 2003-2007, Bleeding Edge Threats # All rights reserved. # # Redistribution and use in source and binary forms, with or without modification, are permitted provided that the # following conditions are met: # # * Redistributions of source code must retain the above copyright notice, this list of conditions and the following # disclaimer. # * Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the # following disclaimer in the documentation and/or other materials provided with the distribution. # * Neither the name of the nor the names of its contributors may be used to endorse or promote products derived # from this software without specific prior written permission. # # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES, # INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE # DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, # SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR # SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE # USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. # # #Shadowserver C&C Rules # Rev 821 #Shadowserver C&C Rules block in log quick from to any block in log quick from any to block in log quick from The Shadowserver Foundation to any block in log quick from any to The Shadowserver Foundation block in log quick from ---------------------------------------------------------------------- to any block in log quick from any to ---------------------------------------------------------------------- block in log quick from Good Day, to any block in log quick from any to Good Day, block in log quick from The Shadowserver Foundation to any block in log quick from any to The Shadowserver Foundation block in log quick from While we have always strived to be open and share our data with those to any block in log quick from any to While we have always strived to be open and share our data with those block in log quick from You are seeing this message instead of the contents of one of our to any block in log quick from any to You are seeing this message instead of the contents of one of our block in log quick from data files because of abuse of that data. We apologize for any issues to any block in log quick from any to data files because of abuse of that data. We apologize for any issues block in log quick from now being used by those same criminal elements. to any block in log quick from any to now being used by those same criminal elements. block in log quick from please send email to admin@shadowserver.org with who you are, and why to any block in log quick from any to please send email to admin@shadowserver.org with who you are, and why block in log quick from this might be causing you. If you still require access to that data, to any block in log quick from any to this might be causing you. If you still require access to that data, block in log quick from you would need access to that data. to any block in log quick from any to you would need access to that data. #Spamhaus DROP Nets block in log quick from 116.199.128.0/19 to any block in log quick from any to 116.199.128.0/19 block in log quick from 116.50.8.0/21 to any block in log quick from any to 116.50.8.0/21 block in log quick from 128.199.0.0/16 to any block in log quick from any to 128.199.0.0/16 block in log quick from 129.47.0.0/16 to any block in log quick from any to 129.47.0.0/16 block in log quick from 132.232.0.0/16 to any block in log quick from any to 132.232.0.0/16 block in log quick from 132.240.0.0/16 to any block in log quick from any to 132.240.0.0/16 block in log quick from 134.175.0.0/16 to any block in log quick from any to 134.175.0.0/16 block in log quick from 134.33.0.0/16 to any block in log quick from any to 134.33.0.0/16 block in log quick from 138.252.0.0/16 to any block in log quick from any to 138.252.0.0/16 block in log quick from 138.43.0.0/16 to any block in log quick from any to 138.43.0.0/16 block in log quick from 139.167.0.0/16 to any block in log quick from any to 139.167.0.0/16 block in log quick from 141.193.0.0/16 to any block in log quick from any to 141.193.0.0/16 block in log quick from 143.49.0.0/16 to any block in log quick from any to 143.49.0.0/16 block in log quick from 147.203.0.0/16 to any block in log quick from any to 147.203.0.0/16 block in log quick from 148.51.0.0/16 to any block in log quick from any to 148.51.0.0/16 block in log quick from 148.7.0.0/16 to any block in log quick from any to 148.7.0.0/16 block in log quick from 149.47.0.0/16 to any block in log quick from any to 149.47.0.0/16 block in log quick from 152.147.0.0/16 to any block in log quick from any to 152.147.0.0/16 block in log quick from 167.97.0.0/16 to any block in log quick from any to 167.97.0.0/16 block in log quick from 170.26.0.0/16 to any block in log quick from any to 170.26.0.0/16 block in log quick from 170.67.0.0/16 to any block in log quick from any to 170.67.0.0/16 block in log quick from 192.115.68.0/22 to any block in log quick from any to 192.115.68.0/22 block in log quick from 192.160.44.0/24 to any block in log quick from any to 192.160.44.0/24 block in log quick from 192.43.153.0/24 to any block in log quick from any to 192.43.153.0/24 block in log quick from 192.43.154.0/23 to any block in log quick from any to 192.43.154.0/23 block in log quick from 192.43.156.0/22 to any block in log quick from any to 192.43.156.0/22 block in log quick from 192.43.160.0/24 to any block in log quick from any to 192.43.160.0/24 block in log quick from 192.67.16.0/24 to any block in log quick from any to 192.67.16.0/24 block in log quick from 192.86.85.0/24 to any block in log quick from any to 192.86.85.0/24 block in log quick from 193.110.136.0/24 to any block in log quick from any to 193.110.136.0/24 block in log quick from 193.142.244.0/24 to any block in log quick from any to 193.142.244.0/24 block in log quick from 193.16.100.0/24 to any block in log quick from any to 193.16.100.0/24 block in log quick from 193.19.120.0/23 to any block in log quick from any to 193.19.120.0/23 block in log quick from 193.200.29.0/24 to any block in log quick from any to 193.200.29.0/24 block in log quick from 193.238.36.0/22 to any block in log quick from any to 193.238.36.0/22 block in log quick from 193.93.236.0/22 to any block in log quick from any to 193.93.236.0/22 block in log quick from 194.1.152.0/24 to any block in log quick from any to 194.1.152.0/24 block in log quick from 194.110.160.0/22 to any block in log quick from any to 194.110.160.0/22 block in log quick from 194.116.146.0/23 to any block in log quick from any to 194.116.146.0/23 block in log quick from 194.126.193.0/24 to any block in log quick from any to 194.126.193.0/24 block in log quick from 194.145.235.0/24 to any block in log quick from any to 194.145.235.0/24 block in log quick from 194.146.204.0/22 to any block in log quick from any to 194.146.204.0/22 block in log quick from 194.189.44.0/22 to any block in log quick from any to 194.189.44.0/22 block in log quick from 195.114.16.0/23 to any block in log quick from any to 195.114.16.0/23 block in log quick from 195.114.8.0/23 to any block in log quick from any to 195.114.8.0/23 block in log quick from 195.225.176.0/22 to any block in log quick from any to 195.225.176.0/22 block in log quick from 195.234.159.0/24 to any block in log quick from any to 195.234.159.0/24 block in log quick from 195.238.242.0/24 to any block in log quick from any to 195.238.242.0/24 block in log quick from 195.64.162.0/23 to any block in log quick from any to 195.64.162.0/23 block in log quick from 195.74.88.0/23 to any block in log quick from any to 195.74.88.0/23 block in log quick from 195.93.218.0/23 to any block in log quick from any to 195.93.218.0/23 block in log quick from 195.95.161.0/24 to any block in log quick from any to 195.95.161.0/24 block in log quick from 196.32.216.0/21 to any block in log quick from any to 196.32.216.0/21 block in log quick from 198.151.152.0/22 to any block in log quick from any to 198.151.152.0/22 block in log quick from 198.186.16.0/20 to any block in log quick from any to 198.186.16.0/20 block in log quick from 198.186.25.0/24 to any block in log quick from any to 198.186.25.0/24 block in log quick from 198.204.0.0/21 to any block in log quick from any to 198.204.0.0/21 block in log quick from 199.120.163.0/24 to any block in log quick from any to 199.120.163.0/24 block in log quick from 199.166.200.0/22 to any block in log quick from any to 199.166.200.0/22 block in log quick from 199.245.138.0/24 to any block in log quick from any to 199.245.138.0/24 block in log quick from 199.60.102.0/24 to any block in log quick from any to 199.60.102.0/24 block in log quick from 200.108.160.0/20 to any block in log quick from any to 200.108.160.0/20 block in log quick from 200.124.64.0/20 to any block in log quick from any to 200.124.64.0/20 block in log quick from 200.63.42.0/24 to any block in log quick from any to 200.63.42.0/24 block in log quick from 200.63.47.0/24 to any block in log quick from any to 200.63.47.0/24 block in log quick from 201.158.96.0/21 to any block in log quick from any to 201.158.96.0/21 block in log quick from 201.71.0.0/20 to any block in log quick from any to 201.71.0.0/20 block in log quick from 203.19.101.0/24 to any block in log quick from any to 203.19.101.0/24 block in log quick from 203.202.236.0/22 to any block in log quick from any to 203.202.236.0/22 block in log quick from 203.31.88.0/23 to any block in log quick from any to 203.31.88.0/23 block in log quick from 203.33.120.0/24 to any block in log quick from any to 203.33.120.0/24 block in log quick from 203.34.205.0/24 to any block in log quick from any to 203.34.205.0/24 block in log quick from 203.34.70.0/23 to any block in log quick from any to 203.34.70.0/23 block in log quick from 203.34.71.0/24 to any block in log quick from any to 203.34.71.0/24 block in log quick from 204.13.32.0/21 to any block in log quick from any to 204.13.32.0/21 block in log quick from 204.14.24.0/21 to any block in log quick from any to 204.14.24.0/21 block in log quick from 204.153.248.0/21 to any block in log quick from any to 204.153.248.0/21 block in log quick from 204.18.0.0/16 to any block in log quick from any to 204.18.0.0/16 block in log quick from 204.236.0.0/19 to any block in log quick from any to 204.236.0.0/19 block in log quick from 204.52.255.0/24 to any block in log quick from any to 204.52.255.0/24 block in log quick from 204.79.220.0/22 to any block in log quick from any to 204.79.220.0/22 block in log quick from 204.89.224.0/24 to any block in log quick from any to 204.89.224.0/24 block in log quick from 205.210.137.0/24 to any block in log quick from any to 205.210.137.0/24 block in log quick from 205.235.64.0/20 to any block in log quick from any to 205.235.64.0/20 block in log quick from 205.236.189.0/24 to any block in log quick from any to 205.236.189.0/24 block in log quick from 206.197.175.0/24 to any block in log quick from any to 206.197.175.0/24 block in log quick from 206.197.176.0/24 to any block in log quick from any to 206.197.176.0/24 block in log quick from 206.197.177.0/24 to any block in log quick from any to 206.197.177.0/24 block in log quick from 206.197.28.0/24 to any block in log quick from any to 206.197.28.0/24 block in log quick from 206.197.29.0/24 to any block in log quick from any to 206.197.29.0/24 block in log quick from 208.38.192.0/18 to any block in log quick from any to 208.38.192.0/18 block in log quick from 208.64.44.0/22 to any block in log quick from any to 208.64.44.0/22 block in log quick from 208.66.192.0/22 to any block in log quick from any to 208.66.192.0/22 block in log quick from 208.72.168.0/21 to any block in log quick from any to 208.72.168.0/21 block in log quick from 208.76.160.0/21 to any block in log quick from any to 208.76.160.0/21 block in log quick from 208.76.48.0/21 to any block in log quick from any to 208.76.48.0/21 block in log quick from 208.77.224.0/21 to any block in log quick from any to 208.77.224.0/21 block in log quick from 208.81.136.0/21 to any block in log quick from any to 208.81.136.0/21 block in log quick from 208.82.136.0/21 to any block in log quick from any to 208.82.136.0/21 block in log quick from 208.84.28.0/22 to any block in log quick from any to 208.84.28.0/22 block in log quick from 208.87.152.0/21 to any block in log quick from any to 208.87.152.0/21 block in log quick from 208.93.152.0/22 to any block in log quick from any to 208.93.152.0/22 block in log quick from 209.145.192.0/18 to any block in log quick from any to 209.145.192.0/18 block in log quick from 209.165.224.0/20 to any block in log quick from any to 209.165.224.0/20 block in log quick from 209.205.192.0/19 to any block in log quick from any to 209.205.192.0/19 block in log quick from 209.205.224.0/20 to any block in log quick from any to 209.205.224.0/20 block in log quick from 209.213.48.0/20 to any block in log quick from any to 209.213.48.0/20 block in log quick from 216.188.128.0/19 to any block in log quick from any to 216.188.128.0/19 block in log quick from 216.243.240.0/20 to any block in log quick from any to 216.243.240.0/20 block in log quick from 216.255.176.0/20 to any block in log quick from any to 216.255.176.0/20 block in log quick from 216.37.96.0/20 to any block in log quick from any to 216.37.96.0/20 block in log quick from 58.65.232.0/21 to any block in log quick from any to 58.65.232.0/21 block in log quick from 58.83.12.0/22 to any block in log quick from any to 58.83.12.0/22 block in log quick from 58.83.8.0/22 to any block in log quick from any to 58.83.8.0/22 block in log quick from 62.176.16.0/22 to any block in log quick from any to 62.176.16.0/22 block in log quick from 64.255.128.0/19 to any block in log quick from any to 64.255.128.0/19 block in log quick from 64.28.176.0/20 to any block in log quick from any to 64.28.176.0/20 block in log quick from 66.206.32.0/22 to any block in log quick from any to 66.206.32.0/22 block in log quick from 66.231.64.0/20 to any block in log quick from any to 66.231.64.0/20 block in log quick from 66.54.91.0/24 to any block in log quick from any to 66.54.91.0/24 block in log quick from 66.55.160.0/19 to any block in log quick from any to 66.55.160.0/19 block in log quick from 67.210.0.0/20 to any block in log quick from any to 67.210.0.0/20 block in log quick from 67.213.128.0/20 to any block in log quick from any to 67.213.128.0/20 block in log quick from 69.42.160.0/32 to any block in log quick from any to 69.42.160.0/32 block in log quick from 69.50.160.0/19 to any block in log quick from any to 69.50.160.0/19 block in log quick from 69.8.176.0/20 to any block in log quick from any to 69.8.176.0/20 block in log quick from 69.80.0.0/17 to any block in log quick from any to 69.80.0.0/17 block in log quick from 72.2.176.0/20 to any block in log quick from any to 72.2.176.0/20 block in log quick from 78.108.176.0/20 to any block in log quick from any to 78.108.176.0/20 block in log quick from 78.157.128.0/19 to any block in log quick from any to 78.157.128.0/19 block in log quick from 79.110.160.0/20 to any block in log quick from any to 79.110.160.0/20 block in log quick from 79.135.160.0/19 to any block in log quick from any to 79.135.160.0/19 block in log quick from 81.29.240.0/20 to any block in log quick from any to 81.29.240.0/20 block in log quick from 81.95.144.0/20 to any block in log quick from any to 81.95.144.0/20 block in log quick from 85.255.112.0/20 to any block in log quick from any to 85.255.112.0/20 block in log quick from 86.105.230.0/24 to any block in log quick from any to 86.105.230.0/24 block in log quick from 89.35.0.0/23 to any block in log quick from any to 89.35.0.0/23 block in log quick from 91.196.232.0/22 to any block in log quick from any to 91.196.232.0/22 block in log quick from 91.200.144.0/22 to any block in log quick from any to 91.200.144.0/22 block in log quick from 91.203.92.0/22 to any block in log quick from any to 91.203.92.0/22 block in log quick from 91.208.0.0/24 to any block in log quick from any to 91.208.0.0/24 block in log quick from 91.208.162.0/24 to any block in log quick from any to 91.208.162.0/24 block in log quick from 91.208.228.0/24 to any block in log quick from any to 91.208.228.0/24 block in log quick from 91.209.14.0/24 to any block in log quick from any to 91.209.14.0/24 block in log quick from 92.53.104.0/22 to any block in log quick from any to 92.53.104.0/22 block in log quick from 93.188.160.0/21 to any block in log quick from any to 93.188.160.0/21 block in log quick from 94.154.0.0/18 to any block in log quick from any to 94.154.0.0/18 block in log quick from 94.154.128.0/18 to any block in log quick from any to 94.154.128.0/18 block in log quick from 94.176.96.0/20 to any block in log quick from any to 94.176.96.0/20 #Dshield Top Attackers block in log quick from 121.14.213.0/24 to any block in log quick from any to 121.14.213.0/24 block in log quick from 189.57.19.0/24 to any block in log quick from any to 189.57.19.0/24 block in log quick from 88.58.193.0/24 to any block in log quick from any to 88.58.193.0/24 block in log quick from 198.87.3.0/24 to any block in log quick from any to 198.87.3.0/24 block in log quick from 202.99.11.0/24 to any block in log quick from any to 202.99.11.0/24 block in log quick from 221.233.242.0/24 to any block in log quick from any to 221.233.242.0/24 block in log quick from 211.103.139.0/24 to any block in log quick from any to 211.103.139.0/24 block in log quick from 61.139.54.0/24 to any block in log quick from any to 61.139.54.0/24 block in log quick from 218.75.199.0/24 to any block in log quick from any to 218.75.199.0/24 block in log quick from 218.75.84.0/24 to any block in log quick from any to 218.75.84.0/24 block in log quick from 209.173.173.0/24 to any block in log quick from any to 209.173.173.0/24 block in log quick from 218.71.136.0/24 to any block in log quick from any to 218.71.136.0/24 block in log quick from 218.22.244.0/24 to any block in log quick from any to 218.22.244.0/24 block in log quick from 202.109.129.0/24 to any block in log quick from any to 202.109.129.0/24 block in log quick from 222.183.224.0/24 to any block in log quick from any to 222.183.224.0/24 block in log quick from 222.82.249.0/24 to any block in log quick from any to 222.82.249.0/24 block in log quick from 220.250.21.0/24 to any block in log quick from any to 220.250.21.0/24 block in log quick from 202.109.242.0/24 to any block in log quick from any to 202.109.242.0/24 block in log quick from 219.148.64.0/24 to any block in log quick from any to 219.148.64.0/24 block in log quick from 61.177.196.0/24 to any block in log quick from any to 61.177.196.0/24