Security Portal

Intrusion Prevention Service

 
Signature Version: 4.966

 



Botnet RBL Violation
 
Threat Level: High
Release Date: 2010/9/2
 
Category: BotNet
Signature ID: 1054210
Included In:
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Mac OS, iOS, Android, Windows Mobile, Symbian
 
Description: Realtime Black List is a list of IP addresses or Domain name whose owners refuse to stop the proliferation of malwares. The RBL usually lists server IP addresses from ISPs whose customers are responsible for the malware and from ISPs whose servers are hijacked for malware relay.
 
Impact: Remote code execution
Recommendation: Update vendor's patch.
 
False Positive: None
False Negative: None
 
Additional Information (Links open in new window):
N/A
Reference(s): http://en.wikipedia.org/wiki/Botnet
 

Search the Threat Database
Enter Rule ID or Name