ET COMPROMISED Known Compromised or Hostile Host Traffic group 2
Sourceet/open
Filecompromised.rules
CreatedApril 28, 2011
UpdatedOctober 14, 2026
Classificationmisc-attack
alert ip [103.153.65.59,103.154.137.43,103.154.81.166,103.159.2.113,103.159.51.70,103.160.5.123,103.162.1.80,103.170.215.118,103.189.5.190,103.214.100.4,103.228.36.205,103.28.37.12,103.28.38.27,103.39.93.76,103.47.15.110,103.57.64.11,103.77.172.146,103.79.90.26,103.83.86.39,103.83.87.15,103.83.87.185,103.83.87.34,103.83.87.37,103.87.16.26,103.90.25.243,103.90.25.52,103.90.67.3,104.155.100.207,104.155.17.130,104.155.26.39] any -> $HOME_NET any (msg:"ET COMPROMISED Known Compromised or Hostile Host Traffic group 2"; reference:url,danger.rulez.sk/projects/bruteforceblocker/blist.php ; classtype:misc-attack; sid:2500002; rev:7775; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag COMPROMISED, signature_severity Major, created_at 2011_04_28, updated_at 2026_10_14;)
Detection details are hidden.
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCOMPROMISED
signature severityMajor
created at2011_04_28
updated at2026_10_14
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!