ET CINS Active Threat Intelligence Poor Reputation IP group 234

7.0.35.0SID: 2403533Rev: 113109EnabledDerived5 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [167.172.213.54,167.172.214.130,167.172.21.46,167.172.215.179,167.172.215.228,167.172.215.5,167.172.217.32,167.172.217.94,167.172.218.212,167.172.43.108,167.172.75.217,167.172.87.73,167.172.89.248,167.61.42.175,167.71.110.14,167.71.120.23,167.71.123.137,167.71.124.194,167.71.124.65,167.71.126.0,167.71.127.44,167.71.133.68,167.71.144.194,167.71.146.139,167.71.147.210,167.71.152.157,167.71.153.158,167.71.155.133,167.71.157.33,167.71.158.254,167.71.169.243,167.71.170.145,167.71.173.4,167.71.178.68,167.71.190.179,167.71.20.177,167.71.21.122,167.71.21.211,167.71.22.198,167.71.22.64,167.71.23.202,167.71.24.129,167.71.24.145,167.71.25.168,167.71.25.223,167.71.25.3,167.71.255.241,167.71.28.240,167.71.76.97,167.86.125.122] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 234"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403533; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!