urlhaus-filter (Snort 3)

Von /
von Ming Di Leom Malware Regex
https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-snort3-online.rules Rohliste öffnen
9.448Einträge
+9.422 -9.489letzte Änderung
zuletzt aktualisiert
2,6 MBGröße
vor 13 Stundenzuletzt geprüft

Beschreibung

Filterliste aus den Bereichen Malware. Betreut von Ming Di Leom. Einzelheiten und Aufnahmekriterien stehen auf der Projektseite.

Integration

Keine spezifische Anleitung verfügbar. Fügen Sie die Listen-URL in Ihrem Blocker hinzu:

https://malware-filter.gitlab.io/malware-filter/urlhaus-filter-snort3-online.rules

Letzte Änderungen

Kürzlich hinzugefügte Einträge

  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"102.53.15.18",nocase; classtype:trojan-activity; sid:100000021; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"102.68.74.45",nocase; classtype:trojan-activity; sid:100000022; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.101.85.165",nocase; classtype:trojan-activity; sid:100000023; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.101.85.173",nocase; classtype:trojan-activity; sid:100000024; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.106.250.161",nocase; classtype:trojan-activity; sid:100000025; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.116.190.93",nocase; classtype:trojan-activity; sid:100000026; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.125.163.10",nocase; classtype:trojan-activity; sid:100000027; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.154.90.21",nocase; classtype:trojan-activity; sid:100000028; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.159.152.118",nocase; classtype:trojan-activity; sid:100000029; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.159.221.33",nocase; classtype:trojan-activity; sid:100000030; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.164.128.184",nocase; classtype:trojan-activity; sid:100000033; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.164.18.170",nocase; classtype:trojan-activity; sid:100000034; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.164.200.170",nocase; classtype:trojan-activity; sid:100000035; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.168.67.55",nocase; classtype:trojan-activity; sid:100000036; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.179.240.227",nocase; classtype:trojan-activity; sid:100000037; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.187.151.107",nocase; classtype:trojan-activity; sid:100000038; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.20.213.34",nocase; classtype:trojan-activity; sid:100000039; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.203.210.102",nocase; classtype:trojan-activity; sid:100000040; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.226.249.227",nocase; classtype:trojan-activity; sid:100000045; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.227.118.45",nocase; classtype:trojan-activity; sid:100000046; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.231.14.104",nocase; classtype:trojan-activity; sid:100000047; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.240.211.121",nocase; classtype:trojan-activity; sid:100000048; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.245.10.51",nocase; classtype:trojan-activity; sid:100000049; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.245.204.42",nocase; classtype:trojan-activity; sid:100000050; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.247.164.242",nocase; classtype:trojan-activity; sid:100000051; rev:1;)

Kürzlich entfernte Einträge

  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"102.53.15.17",nocase; classtype:trojan-activity; sid:100000021; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"102.53.15.18",nocase; classtype:trojan-activity; sid:100000022; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"102.68.74.45",nocase; classtype:trojan-activity; sid:100000023; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.101.85.165",nocase; classtype:trojan-activity; sid:100000024; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.101.85.173",nocase; classtype:trojan-activity; sid:100000025; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.106.250.161",nocase; classtype:trojan-activity; sid:100000026; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.116.190.93",nocase; classtype:trojan-activity; sid:100000027; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.125.163.10",nocase; classtype:trojan-activity; sid:100000028; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.153.93.18",nocase; classtype:trojan-activity; sid:100000029; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.154.90.21",nocase; classtype:trojan-activity; sid:100000030; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.164.117.74",nocase; classtype:trojan-activity; sid:100000033; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.164.128.184",nocase; classtype:trojan-activity; sid:100000034; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.164.18.170",nocase; classtype:trojan-activity; sid:100000035; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.164.200.170",nocase; classtype:trojan-activity; sid:100000036; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.168.67.55",nocase; classtype:trojan-activity; sid:100000037; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.179.240.227",nocase; classtype:trojan-activity; sid:100000038; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.187.151.107",nocase; classtype:trojan-activity; sid:100000039; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.20.213.34",nocase; classtype:trojan-activity; sid:100000040; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.227.118.45",nocase; classtype:trojan-activity; sid:100000045; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.231.14.104",nocase; classtype:trojan-activity; sid:100000046; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.236.133.81",nocase; classtype:trojan-activity; sid:100000047; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.236.135.177",nocase; classtype:trojan-activity; sid:100000048; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.240.211.121",nocase; classtype:trojan-activity; sid:100000049; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.245.10.51",nocase; classtype:trojan-activity; sid:100000050; rev:1;)
  • alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"urlhaus-filter malicious website detected"; http_header:field host; content:"103.245.204.42",nocase; classtype:trojan-activity; sid:100000051; rev:1;)
Nach oben scrollen