Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Aug 27, 2026, 9:11 PM
ET COMPROMISED Known Compromised or Hostile Host Traffic group 18
Sourceet/open
Filecompromised.rules
CreatedApril 28, 2011
UpdatedAugust 26, 2026
Classificationmisc-attack
alert ip [67.215.227.54,69.5.7.63,70.32.81.179,77.239.124.102,77.239.124.108,77.90.185.20,79.72.3.119,80.66.66.68,81.181.129.252,8.213.157.9,85.11.167.154,85.214.166.40,85.239.149.72,88.151.33.203,89.163.210.169,89.203.142.96,89.238.165.139,90.226.223.18,91.224.92.17,91.224.92.92,92.204.128.28,92.253.212.206,92.5.66.49,93.152.221.206,93.152.221.210,94.154.43.118,94.183.177.21,94.183.187.22,94.26.106.19,94.26.106.27] any -> $HOME_NET any (msg:"ET COMPROMISED Known Compromised or Hostile Host Traffic group 18"; reference:url,danger.rulez.sk/projects/bruteforceblocker/blist.php ; threshold:type limit, track by_src, seconds 60, count 1 ; classtype:misc-attack; sid:2500034; rev:7726; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag COMPROMISED, signature_severity Major, created_at 2011_04_28, updated_at 2026_08_26;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCOMPROMISED
signature severityMajor
created at2011_04_28
updated at2026_08_26
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!