ET CINS Active Threat Intelligence Poor Reputation IP group 172

7.0.35.0SID: 2403471Rev: 110288EnabledDerived6 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 16, 2026
Classificationmisc-attack
alert ip [124.117.194.15,124.117.194.158,124.117.194.210,124.117.194.235,124.117.194.69,124.117.195.1,124.117.195.147,124.117.195.226,124.117.195.227,124.117.195.51,124.119.121.193,124.119.147.60,124.128.60.98,124.128.75.108,124.130.131.110,124.134.217.16,124.146.44.248,124.154.131.199,124.160.65.108,124.189.239.121,124.205.0.66,124.220.135.125,124.220.178.219,124.223.112.24,124.223.63.19,124.229.240.254,124.234.207.24,124.236.108.172,124.237.9.106,124.238.60.249,124.239.112.164,124.253.107.211,124.253.107.79,124.253.119.33,124.253.121.105,124.253.128.33,124.253.180.55,124.253.182.246,124.253.185.189,124.253.199.83,124.253.200.6,124.253.201.235,124.253.20.150,124.253.20.245,124.253.211.252,124.253.21.170,124.253.212.119,124.253.64.26,124.253.64.66,124.253.89.109] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 172"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403471; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!