ET CINS Active Threat Intelligence Poor Reputation IP group 209

7.0.35.0SID: 2403508Rev: 110264EnabledDerived4 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [152.32.252.233,152.32.255.94,152.53.148.66,152.53.191.99,152.53.21.84,152.53.3.237,153.0.122.2,153.101.67.190,153.117.32.130,153.117.34.153,153.117.34.155,153.3.119.91,153.36.238.106,153.37.164.122,153.67.112.104,153.67.15.156,153.67.3.52,153.75.83.119,154.0.30.137,154.127.213.101,154.14.23.208,154.146.235.32,154.16.44.10,154.16.44.106,154.16.44.12,154.16.44.127,154.16.44.132,154.16.44.137,154.16.44.139,154.16.44.146,154.16.44.148,154.16.44.149,154.16.44.157,154.16.44.164,154.16.44.167,154.16.44.168,154.16.44.17,154.16.44.177,154.16.44.181,154.16.44.183,154.16.44.19,154.16.44.195,154.16.44.202,154.16.44.206,154.16.44.213,154.16.44.217,154.16.44.220,154.16.44.238,154.16.44.249,154.16.44.26] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 209"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403508; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!