ET COMPROMISED Known Compromised or Hostile Host Traffic group 9
Sourceet/open
Filecompromised.rules
CreatedApril 28, 2011
UpdatedAugust 31, 2026
Classificationmisc-attack
alert ip [217.154.120.73,217.154.150.0,217.59.129.228,217.60.255.130,2.189.130.67,219.248.115.178,219.78.63.235,220.123.222.114,220.76.68.23,220.86.129.106,220.90.220.204,221.207.55.165,221.221.136.146,223.123.92.56,23.163.40.5,23.254.242.32,24.199.89.143,2.57.121.112,2.57.122.53,27.128.172.199,27.79.1.70,27.79.2.42,27.79.3.148,27.79.40.180,27.79.41.230,27.79.4.145,27.79.41.76,27.79.42.143,27.79.42.249,27.79.4.229] any -> $HOME_NET any (msg:"ET COMPROMISED Known Compromised or Hostile Host Traffic group 9"; reference:url,danger.rulez.sk/projects/bruteforceblocker/blist.php ; threshold:type limit, track by_src, seconds 60, count 1 ; classtype:misc-attack; sid:2500016; rev:7731; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag COMPROMISED, signature_severity Major, created_at 2011_04_28, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCOMPROMISED
signature severityMajor
created at2011_04_28
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!