ET CINS Active Threat Intelligence Poor Reputation IP group 239

7.0.35.0SID: 2403538Rev: 110264EnabledDerived5 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [171.43.94.174,171.44.143.38,171.8.138.207,171.8.138.89,171.81.8.243,171.92.15.22,171.97.60.237,171.97.63.119,172.101.134.16,172.103.203.164,172.104.134.164,172.104.141.138,172.104.141.5,172.104.146.120,172.104.146.127,172.104.146.166,172.104.17.51,172.104.19.160,172.104.5.239,172.104.5.254,172.105.147.10,172.105.147.102,172.105.147.103,172.105.147.104,172.105.147.105,172.105.147.107,172.105.147.112,172.105.147.113,172.105.147.117,172.105.147.118,172.105.147.119,172.105.147.12,172.105.147.120,172.105.147.121,172.105.147.122,172.105.147.124,172.105.147.125,172.105.147.127,172.105.147.13,172.105.147.130,172.105.147.131,172.105.147.132,172.105.147.133,172.105.147.134,172.105.147.136,172.105.147.137,172.105.147.138,172.105.147.139,172.105.147.141,172.105.147.142] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 239"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403538; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!