Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Oct 12, 2026, 9:26 PM
ET COMPROMISED Known Compromised or Hostile Host Traffic group 18
Sourceet/open
Filecompromised.rules
CreatedApril 28, 2011
UpdatedOctober 9, 2026
Classificationmisc-attack
alert ip [51.4.98.141,5.180.184.8,51.81.119.252,5.189.153.148,52.173.67.116,54.153.106.101,54.153.51.142,54.193.29.59,54.219.6.186,54.219.98.87,54.241.49.151,54.67.77.110,59.24.222.224,60.52.63.65,62.210.205.111,62.244.6.35,63.250.36.183,64.177.89.152,64.227.191.20,66.29.129.108,66.29.156.149,66.36.226.250,67.206.199.37,67.206.199.46,67.206.199.61,68.183.95.102,69.33.213.117,69.5.21.194,73.147.19.171,73.34.17.163] any -> $HOME_NET any (msg:"ET COMPROMISED Known Compromised or Hostile Host Traffic group 18"; reference:url,danger.rulez.sk/projects/bruteforceblocker/blist.php ; classtype:misc-attack; sid:2500034; rev:7770; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag COMPROMISED, signature_severity Major, created_at 2011_04_28, updated_at 2026_10_09;)
Detection details are hidden.
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCOMPROMISED
signature severityMajor
created at2011_04_28
updated at2026_10_09
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!