ET CINS Active Threat Intelligence Poor Reputation IP group 213

7.0.35.0SID: 2403512Rev: 111389EnabledDerived4 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 31, 2026
Classificationmisc-attack
alert ip [168.196.206.14,168.196.232.39,168.196.40.245,168.196.85.159,168.197.11.148,168.197.148.142,168.197.7.1,168.205.103.124,168.205.142.55,168.205.176.202,168.205.7.179,168.210.105.81,168.222.197.60,168.227.155.66,168.227.18.145,168.227.228.131,168.228.173.62,168.228.38.253,168.228.39.25,168.232.12.132,168.232.162.100,168.232.163.206,168.232.163.3,168.232.58.183,168.232.70.17,168.62.199.219,168.90.167.58,168.90.18.223,168.90.189.237,168.90.189.247,168.90.31.125,169.0.151.146,169.148.124.211,169.155.237.103,169.197.113.175,169.197.131.40,169.204.230.166,169.239.120.11,169.255.236.74,169.58.125.156,169.58.151.194,169.58.153.151,169.58.170.94,169.58.178.44,169.58.47.169,169.58.60.127,170.0.222.5,170.0.59.77,170.0.72.164,170.150.175.61] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 213"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403512; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!