ET CINS Active Threat Intelligence Poor Reputation IP group 238
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [170.64.134.89,170.64.154.131,170.64.177.80,170.64.187.18,170.80.37.155,170.82.253.77,170.83.158.68,171.104.81.214,171.104.81.215,171.104.81.245,171.104.83.136,171.104.83.137,171.104.83.173,171.105.200.100,171.105.200.125,171.105.200.67,171.105.200.81,171.105.200.87,171.105.200.90,171.105.200.92,171.105.200.98,171.108.182.198,171.108.182.204,171.108.182.210,171.108.182.219,171.108.182.233,171.108.182.236,171.108.182.245,171.108.182.246,171.108.182.249,171.111.153.223,171.116.180.143,171.116.181.70,171.120.32.254,171.120.33.208,171.120.37.230,171.120.38.196,171.12.10.91,171.250.77.135,171.36.209.253,171.61.19.199,171.8.138.118,171.8.173.3,172.103.150.88,172.104.100.117,172.104.108.170,172.104.209.25,172.104.209.31,172.104.209.50,172.104.209.54] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 238"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403537; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!