ET CINS Active Threat Intelligence Poor Reputation IP group 208

7.0.35.0SID: 2403507Rev: 110288EnabledDerived11 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 16, 2026
Classificationmisc-attack
alert ip [159.203.10.63,159.203.120.106,159.203.16.165,159.203.176.237,159.203.184.22,159.203.187.143,159.203.191.8,159.203.21.205,159.203.24.59,159.203.30.17,159.203.31.161,159.203.57.4,159.203.67.164,159.203.8.112,159.203.8.149,159.223.0.20,159.223.101.229,159.223.112.120,159.223.113.242,159.223.119.46,159.223.127.41,159.223.152.15,159.223.153.2,159.223.156.29,159.223.159.88,159.223.160.156,159.223.169.117,159.223.170.77,159.223.171.169,159.223.173.157,159.223.192.5,159.223.196.149,159.223.200.222,159.223.201.241,159.223.204.191,159.223.207.5,159.223.217.240,159.223.41.46,159.223.99.71,159.224.216.16,159.65.163.52,159.65.168.103,159.65.17.223,159.65.191.190,159.65.193.17,159.65.195.140,159.65.223.126,159.65.232.134,159.65.232.184,159.65.239.11] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 208"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403507; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!