ET COMPROMISED Known Compromised or Hostile Host Traffic group 4
Sourceet/open
Filecompromised.rules
CreatedApril 28, 2011
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [134.122.119.106,134.209.233.100,134.209.30.45,13.56.138.99,136.255.168.188,137.184.137.233,138.122.140.200,139.59.177.227,139.59.191.30,139.59.224.159,141.94.19.216,14.225.165.177,142.93.35.180,144.126.196.46,144.225.6.182,146.190.227.79,147.182.211.45,147.90.235.216,148.72.64.140,15.204.173.173,152.32.186.39,152.53.225.147,152.53.52.136,154.16.115.34,154.16.115.37,154.57.209.199,155.117.13.160,155.4.218.159,155.94.142.85,156.239.238.244] any -> $HOME_NET any (msg:"ET COMPROMISED Known Compromised or Hostile Host Traffic group 4"; reference:url,danger.rulez.sk/projects/bruteforceblocker/blist.php ; threshold:type limit, track by_src, seconds 60, count 1 ; classtype:misc-attack; sid:2500006; rev:7728; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag COMPROMISED, signature_severity Major, created_at 2011_04_28, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCOMPROMISED
signature severityMajor
created at2011_04_28
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!