phishing-filter (Snort 3)

Von /
von Ming Di Leom Phishing Regex
https://malware-filter.gitlab.io/malware-filter/phishing-filter-snort3.rules Rohliste öffnen
66,0kEinträge
+66,0k -65,8kletzte Änderung
zuletzt aktualisiert
15,2 MBGröße
vor 7 Stundenzuletzt geprüft

Beschreibung

Filterliste aus den Bereichen Phishing. Betreut von Ming Di Leom. Einzelheiten und Aufnahmekriterien stehen auf der Projektseite.

Integration

Keine spezifische Anleitung verfügbar. Fügen Sie die Listen-URL in Ihrem Blocker hinzu:

https://malware-filter.gitlab.io/malware-filter/phishing-filter-snort3.rules

Letzte Änderungen

Kürzlich hinzugefügte Einträge

  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0668ka.com",nocase; classtype:attempted-recon; sid:200000042; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"06d6ie-3j9aw-hg4xco-jhjx3.pages.dev",nocase; classtype:attempted-recon; sid:200000043; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"06egte3.top",nocase; classtype:attempted-recon; sid:200000044; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"06t-xiy883-tl87j-xoae-ffyrj.pages.dev",nocase; classtype:attempted-recon; sid:200000045; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0800numbers-uk.co.uk",nocase; classtype:attempted-recon; sid:200000046; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0898yczc.com",nocase; classtype:attempted-recon; sid:200000047; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"08yw-wdxv-wbds-ynvme-ojl0fa.pages.dev",nocase; classtype:attempted-recon; sid:200000048; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09-appelmanques.weebly.com",nocase; classtype:attempted-recon; sid:200000049; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09-uludag-edu-tr.weebly.com",nocase; classtype:attempted-recon; sid:200000050; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09.2026x02find.shop",nocase; classtype:attempted-recon; sid:200000051; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"090675.weebly.com",nocase; classtype:attempted-recon; sid:200000052; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0918784avispdf.weebly.com",nocase; classtype:attempted-recon; sid:200000053; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09248ar.weebly.com",nocase; classtype:attempted-recon; sid:200000054; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0932es.weebly.com",nocase; classtype:attempted-recon; sid:200000055; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"093421tr.weebly.com",nocase; classtype:attempted-recon; sid:200000056; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"093748ci.weebly.com",nocase; classtype:attempted-recon; sid:200000057; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0938jp.weebly.com",nocase; classtype:attempted-recon; sid:200000058; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0938roundcube.weebly.com",nocase; classtype:attempted-recon; sid:200000059; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09392.weebly.com",nocase; classtype:attempted-recon; sid:200000060; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"094847.webflow.io",nocase; classtype:attempted-recon; sid:200000061; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09636.weebly.com",nocase; classtype:attempted-recon; sid:200000062; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0975896749.weebly.com",nocase; classtype:attempted-recon; sid:200000063; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"097ey43.top",nocase; classtype:attempted-recon; sid:200000064; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0988576657456223.weebly.com",nocase; classtype:attempted-recon; sid:200000065; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0auth2.1mb.site",nocase; classtype:attempted-recon; sid:200000066; rev:1;)

Kürzlich entfernte Einträge

  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"06d6ie-3j9aw-hg4xco-jhjx3.pages.dev",nocase; classtype:attempted-recon; sid:200000042; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"06egte3.top",nocase; classtype:attempted-recon; sid:200000043; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"06t-xiy883-tl87j-xoae-ffyrj.pages.dev",nocase; classtype:attempted-recon; sid:200000044; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0800numbers-uk.co.uk",nocase; classtype:attempted-recon; sid:200000045; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"08yw-wdxv-wbds-ynvme-ojl0fa.pages.dev",nocase; classtype:attempted-recon; sid:200000046; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09-appelmanques.weebly.com",nocase; classtype:attempted-recon; sid:200000047; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09-uludag-edu-tr.weebly.com",nocase; classtype:attempted-recon; sid:200000048; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09.2026x02find.shop",nocase; classtype:attempted-recon; sid:200000049; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"090675.weebly.com",nocase; classtype:attempted-recon; sid:200000050; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0918784avispdf.weebly.com",nocase; classtype:attempted-recon; sid:200000051; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09248ar.weebly.com",nocase; classtype:attempted-recon; sid:200000052; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0932es.weebly.com",nocase; classtype:attempted-recon; sid:200000053; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"093421tr.weebly.com",nocase; classtype:attempted-recon; sid:200000054; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"093748ci.weebly.com",nocase; classtype:attempted-recon; sid:200000055; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0938jp.weebly.com",nocase; classtype:attempted-recon; sid:200000056; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0938roundcube.weebly.com",nocase; classtype:attempted-recon; sid:200000057; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09392.weebly.com",nocase; classtype:attempted-recon; sid:200000058; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"094847.webflow.io",nocase; classtype:attempted-recon; sid:200000059; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"09636.weebly.com",nocase; classtype:attempted-recon; sid:200000060; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0975896749.weebly.com",nocase; classtype:attempted-recon; sid:200000061; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"097ey43.top",nocase; classtype:attempted-recon; sid:200000062; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0988576657456223.weebly.com",nocase; classtype:attempted-recon; sid:200000063; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0auth2.1mb.site",nocase; classtype:attempted-recon; sid:200000064; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0btu8g.icu",nocase; classtype:attempted-recon; sid:200000065; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0d9a56c5-6a18-4f41-9dcf-1fa0531f9645-00-3s6jlesunorig.riker.replit.dev",nocase; classtype:attempted-recon; sid:200000066; rev:1;)
Nach oben scrollen