ET COMPROMISED Known Compromised or Hostile Host Traffic group 9
Sourceet/open
Filecompromised.rules
CreatedApril 28, 2011
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [213.209.159.230,213.5.130.217,217.154.120.73,217.154.150.0,217.59.129.228,217.60.255.130,218.17.176.80,2.189.130.67,219.248.115.178,219.78.63.235,220.123.222.114,220.76.68.23,220.85.210.200,220.86.129.106,220.90.220.204,221.221.136.146,222.108.250.153,223.123.92.56,2.26.83.186,23.163.40.5,23.254.242.32,24.199.89.143,2.57.121.112,2.57.122.53,27.79.1.70,27.79.2.42,27.79.2.68,27.79.3.148,27.79.40.180,27.79.41.230] any -> $HOME_NET any (msg:"ET COMPROMISED Known Compromised or Hostile Host Traffic group 9"; reference:url,danger.rulez.sk/projects/bruteforceblocker/blist.php ; threshold:type limit, track by_src, seconds 60, count 1 ; classtype:misc-attack; sid:2500016; rev:7728; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag COMPROMISED, signature_severity Major, created_at 2011_04_28, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCOMPROMISED
signature severityMajor
created at2011_04_28
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!