ET COMPROMISED Known Compromised or Hostile Host Traffic group 5
Sourceet/open
Filecompromised.rules
CreatedApril 28, 2011
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [157.245.148.118,157.245.233.97,158.51.96.38,159.138.88.16,159.223.29.238,159.223.63.12,161.118.212.147,16.147.238.233,162.240.148.144,162.241.130.124,162.241.235.82,162.243.86.7,163.41.112.89,163.53.201.45,164.92.107.13,164.92.109.155,165.22.205.91,165.227.194.144,165.232.109.145,165.245.221.68,167.172.54.184,167.99.41.127,167.99.66.71,168.144.120.7,168.144.89.244,171.231.176.42,171.231.177.118,171.231.178.241,171.231.178.70,171.231.179.20] any -> $HOME_NET any (msg:"ET COMPROMISED Known Compromised or Hostile Host Traffic group 5"; reference:url,danger.rulez.sk/projects/bruteforceblocker/blist.php ; threshold:type limit, track by_src, seconds 60, count 1 ; classtype:misc-attack; sid:2500008; rev:7728; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag COMPROMISED, signature_severity Major, created_at 2011_04_28, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCOMPROMISED
signature severityMajor
created at2011_04_28
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!