ET CINS Active Threat Intelligence Poor Reputation IP group 209
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [155.0.34.18,155.103.49.228,155.117.188.238,155.117.43.252,155.2.191.36,155.94.154.104,155.94.241.58,155.94.251.156,156.207.231.118,156.225.1.10,156.225.1.70,156.225.1.71,156.225.1.86,156.225.1.87,156.225.1.98,156.225.1.99,156.227.234.198,156.229.16.142,156.229.21.54,156.232.100.95,156.235.89.82,156.236.76.199,156.67.63.60,157.101.174.99,157.137.187.229,157.148.122.208,157.173.119.195,157.230.10.72,157.230.11.53,157.230.12.59,157.230.128.50,157.230.130.128,157.230.131.107,157.230.13.18,157.230.13.31,157.230.133.168,157.230.135.79,157.230.136.77,157.230.138.1,157.230.13.9,157.230.139.228,157.230.140.241,157.230.141.28,157.230.148.139,157.230.150.245,157.230.15.204,157.230.15.240,157.230.154.233,157.230.159.240,157.230.162.149] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 209"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403508; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!