ET CINS Active Threat Intelligence Poor Reputation IP group 212

7.0.35.0SID: 2403511Rev: 110264EnabledDerived7 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [156.238.224.4,156.240.121.205,156.59.254.169,156.59.80.211,156.67.105.7,156.67.81.164,157.0.160.45,157.100.107.205,157.100.110.1,157.100.112.143,157.100.202.96,157.100.203.18,157.100.69.92,157.100.89.40,157.122.198.212,157.137.187.229,157.137.189.141,157.137.190.85,157.148.122.208,157.15.58.45,157.20.144.241,157.230.101.158,157.230.11.234,157.230.129.55,157.230.134.252,157.230.141.197,157.230.142.72,157.230.146.104,157.230.148.136,157.230.15.107,157.230.154.90,157.230.160.171,157.230.161.27,157.230.163.234,157.230.164.56,157.230.168.158,157.230.170.244,157.230.171.79,157.230.175.56,157.230.191.212,157.230.208.70,157.230.209.117,157.230.223.41,157.230.228.1,157.230.235.148,157.230.4.31,157.230.5.194,157.230.60.29,157.230.63.195,157.230.8.75] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 212"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403511; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!