ET CINS Active Threat Intelligence Poor Reputation IP group 237

7.0.35.0SID: 2403536Rev: 113109EnabledDerived7 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [167.99.98.11,167.99.98.18,168.113.182.186,168.138.184.62,168.144.111.225,168.144.116.160,168.144.116.215,168.144.130.137,168.144.18.142,168.144.18.147,168.144.210.216,168.144.247.198,168.144.32.218,168.144.61.192,168.144.61.41,168.144.89.238,168.144.92.225,168.167.139.113,168.167.255.218,168.195.24.111,168.196.138.11,168.196.206.14,168.196.67.52,168.227.223.199,168.227.224.197,168.232.167.195,168.62.199.219,168.70.34.57,168.91.194.249,169.128.190.185,169.128.190.187,169.211.232.182,169.58.228.10,169.58.42.103,169.58.60.127,169.58.69.70,169.58.95.35,170.187.144.207,170.187.145.169,170.187.145.203,170.187.147.145,170.187.147.182,170.187.147.89,170.187.163.117,170.187.163.90,170.187.165.218,170.212.0.168,170.253.61.253,170.52.90.71,170.64.134.120] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 237"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403536; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!