ET CINS Active Threat Intelligence Poor Reputation IP group 229

7.0.35.0SID: 2403528Rev: 110288EnabledDerived5 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 16, 2026
Classificationmisc-attack
alert ip [172.105.147.12,172.105.147.120,172.105.147.121,172.105.147.122,172.105.147.123,172.105.147.124,172.105.147.125,172.105.147.127,172.105.147.128,172.105.147.129,172.105.147.13,172.105.147.130,172.105.147.131,172.105.147.132,172.105.147.133,172.105.147.134,172.105.147.135,172.105.147.136,172.105.147.137,172.105.147.138,172.105.147.14,172.105.147.140,172.105.147.141,172.105.147.142,172.105.147.143,172.105.147.144,172.105.147.146,172.105.147.147,172.105.147.15,172.105.147.150,172.105.147.151,172.105.147.152,172.105.147.153,172.105.147.154,172.105.147.155,172.105.147.156,172.105.147.157,172.105.147.160,172.105.147.162,172.105.147.163,172.105.147.164,172.105.147.165,172.105.147.168,172.105.147.169,172.105.147.170,172.105.147.171,172.105.147.172,172.105.147.174,172.105.147.175,172.105.147.176] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 229"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403528; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!