ET CINS Active Threat Intelligence Poor Reputation IP group 158

7.0.35.0SID: 2403457Rev: 111413EnabledDerived3 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedSeptember 1, 2026
Classificationmisc-attack
alert ip [123.178.210.245,123.178.210.253,123.178.210.254,123.178.210.45,123.178.210.47,123.178.210.55,123.178.210.6,123.178.210.64,123.178.210.70,123.178.210.71,123.178.210.85,123.178.210.98,123.180.182.215,123.180.55.146,123.180.82.3,123.185.160.205,123.187.244.39,123.191.135.76,123.191.154.217,123.192.64.46,123.20.161.166,123.231.14.147,123.232.131.174,123.232.133.146,123.232.39.51,123.232.9.226,123.232.99.245,123.233.45.198,123.245.84.10,123.245.84.152,123.245.84.158,123.245.84.184,123.245.84.19,123.245.84.203,123.245.84.212,123.245.84.82,123.245.84.98,123.245.85.199,123.245.85.236,123.245.85.249,123.245.85.250,123.245.85.30,123.245.85.35,123.245.85.74,123.49.41.210,123.52.172.179,123.52.27.251,123.53.174.250,123.56.6.232,123.57.148.119] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 158"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403457; rev:111413; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_09_01;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_09_01

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!