ET CINS Active Threat Intelligence Poor Reputation IP group 157

7.0.35.0SID: 2403456Rev: 113109EnabledDerived2 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [103.63.25.218,103.66.148.82,103.67.236.147,103.68.40.204,103.68.68.121,103.75.54.67,103.78.166.108,103.78.229.56,103.83.217.18,103.85.85.247,103.87.175.110,103.89.46.33,103.93.94.115,103.97.125.122,103.99.196.0,104.131.177.89,104.131.182.98,104.131.9.27,104.168.153.37,104.196.180.22,104.200.21.132,104.200.21.163,104.200.21.170,104.218.165.188,104.221.203.3,104.236.229.227,104.236.72.17,104.237.130.21,104.237.138.225,104.237.138.253,104.237.139.4,104.237.141.227,104.237.141.44,104.237.141.8,104.237.154.252,104.237.154.58,104.244.74.201,104.247.160.135,104.248.113.192,104.248.114.4,104.248.114.69,104.248.115.162,104.248.115.41,104.248.116.165,104.248.117.95,104.248.122.27,104.248.124.147,104.248.126.130,104.248.126.47,104.248.130.34] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 157"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403456; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!