ET CINS Active Threat Intelligence Poor Reputation IP group 213

7.0.35.0SID: 2403512Rev: 113109EnabledDerived4 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [158.94.187.128,158.94.187.13,158.94.187.130,158.94.187.131,158.94.187.133,158.94.187.134,158.94.187.135,158.94.187.137,158.94.187.138,158.94.187.139,158.94.187.140,158.94.187.141,158.94.187.143,158.94.187.144,158.94.187.145,158.94.187.146,158.94.187.147,158.94.187.148,158.94.187.149,158.94.187.15,158.94.187.150,158.94.187.154,158.94.187.155,158.94.187.156,158.94.187.157,158.94.187.158,158.94.187.16,158.94.187.162,158.94.187.163,158.94.187.164,158.94.187.165,158.94.187.166,158.94.187.170,158.94.187.171,158.94.187.172,158.94.187.173,158.94.187.174,158.94.187.175,158.94.187.176,158.94.187.177,158.94.187.178,158.94.187.18,158.94.187.182,158.94.187.184,158.94.187.186,158.94.187.188,158.94.187.19,158.94.187.190,158.94.187.191,158.94.187.192] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 213"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403512; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!