ET COMPROMISED Known Compromised or Hostile Host Traffic group 11

7.0.35.0SID: 2500020Rev: 7802EnabledDerived36 views
History
Sourceet/open
Filecompromised.rules
CreatedApril 28, 2011
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [34.78.26.141,34.79.12.66,34.79.192.173,34.79.89.168,35.187.125.32,35.187.25.156,35.187.63.236,35.187.70.55,35.187.8.59,35.195.132.188,35.195.148.108,35.205.182.224,35.205.228.238,35.205.59.95,35.206.133.147,35.206.150.39,35.206.151.215,35.206.153.174,35.206.155.103,35.206.158.12,35.206.163.251,35.206.169.253,35.206.172.81,35.206.174.128,35.206.181.209,35.206.183.188,35.210.107.114,35.210.11.30,35.210.114.22,35.210.116.204] any -> $HOME_NET any (msg:"ET COMPROMISED Known Compromised or Hostile Host Traffic group 11"; reference:url,danger.rulez.sk/projects/bruteforceblocker/blist.php; threshold:type limit, track by_src, seconds 60, count 1; classtype:misc-attack; sid:2500020; rev:7802; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag COMPROMISED, signature_severity Major, created_at 2011_04_28, updated_at 2026_11_11;)

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCOMPROMISED
signature severityMajor
created at2011_04_28
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!