WAF 350000

From Atomicorp Wiki
Revision as of 10:27, 4 May 2010 by Mshinn (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Rule ID

350000

Alert Message

Global RBL Match: IP is on the xbl.spamhaus.org Blacklist

Description

This rules detects that an IP address connecting to your server is listed on the xbl.spamhaus.org blacklist run by the SpamHaus project. They describe this RBL as:

"The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies (HTTP, socks, AnalogX, wingate, etc), worms/viruses with built-in spam engines, and other types of trojan-horse exploits."

False Positives

There are no known False Positives for this, however if you believe this is a false positive, it is recommended that you report this to the spamhaus project. Atomicorp does not run this RBL. You can access their website here:

http://www.spamhaus.org/xbl/

Similar Rules


Outside References

http://www.spamhaus.org/

Personal tools