ET COMPROMISED Known Compromised or Hostile Host Traffic group 16
Sourceet/open
Filecompromised.rules
CreatedApril 28, 2011
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [43.153.206.227,43.226.36.17,45.135.194.26,45.142.193.164,45.153.34.158,45.154.244.193,45.156.87.192,45.198.224.26,49.248.197.50,50.114.172.201,51.195.223.189,51.222.85.30,51.38.71.171,5.144.179.246,51.68.181.167,51.68.214.191,51.75.170.40,51.75.21.168,51.77.221.142,54.151.0.202,54.176.247.139,54.200.58.153,54.67.120.189,54.67.23.164,54.71.162.151,57.129.134.159,57.131.27.43,58.209.82.167,59.120.178.166,59.12.116.210] any -> $HOME_NET any (msg:"ET COMPROMISED Known Compromised or Hostile Host Traffic group 16"; reference:url,danger.rulez.sk/projects/bruteforceblocker/blist.php ; threshold:type limit, track by_src, seconds 60, count 1 ; classtype:misc-attack; sid:2500030; rev:7728; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag COMPROMISED, signature_severity Major, created_at 2011_04_28, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCOMPROMISED
signature severityMajor
created at2011_04_28
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!