ET CINS Active Threat Intelligence Poor Reputation IP group 239
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [172.104.209.75,172.104.209.84,172.104.209.86,172.104.27.176,172.104.27.211,172.104.27.244,172.104.27.33,172.104.27.48,172.105.106.201,172.105.135.16,172.105.135.36,172.105.135.52,172.105.135.67,172.105.135.78,172.105.135.81,172.105.147.10,172.105.147.103,172.105.147.105,172.105.147.106,172.105.147.110,172.105.147.117,172.105.147.121,172.105.147.125,172.105.147.127,172.105.147.128,172.105.147.130,172.105.147.131,172.105.147.136,172.105.147.137,172.105.147.140,172.105.147.143,172.105.147.145,172.105.147.148,172.105.147.153,172.105.147.159,172.105.147.163,172.105.147.167,172.105.147.168,172.105.147.178,172.105.147.179,172.105.147.18,172.105.147.190,172.105.147.195,172.105.147.196,172.105.147.208,172.105.147.213,172.105.147.221,172.105.147.224,172.105.147.226,172.105.147.230] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 239"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403538; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!