ET COMPROMISED Known Compromised or Hostile Host Traffic group 14
Sourceet/open
Filecompromised.rules
CreatedApril 28, 2011
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [35.241.189.123,35.241.210.215,35.241.224.162,35.241.250.23,35.80.21.128,35.87.173.189,35.88.9.149,35.94.101.37,36.137.75.115,36.138.78.195,36.255.97.234,37.119.238.184,37.119.239.229,41.111.172.25,41.33.45.100,43.153.114.203,43.162.105.78,43.163.7.211,43.172.81.176,43.226.44.65,43.228.157.207,43.228.157.231,43.228.157.232,44.229.15.19,44.248.196.163,44.251.247.18,45.115.26.38,45.115.26.39,45.136.7.187,45.141.22.63] any -> $HOME_NET any (msg:"ET COMPROMISED Known Compromised or Hostile Host Traffic group 14"; reference:url,danger.rulez.sk/projects/bruteforceblocker/blist.php ; threshold:type limit, track by_src, seconds 60, count 1 ; classtype:misc-attack; sid:2500026; rev:7802; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag COMPROMISED, signature_severity Major, created_at 2011_04_28, updated_at 2026_11_11;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCOMPROMISED
signature severityMajor
created at2011_04_28
updated at2026_11_11
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!