ET CINS Active Threat Intelligence Poor Reputation IP group 242

7.0.35.0SID: 2403541Rev: 113109EnabledDerived4 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [172.203.228.230,172.203.251.103,172.203.251.162,172.203.252.37,172.206.224.51,172.206.227.114,172.206.227.150,172.206.242.255,172.206.243.83,172.208.106.191,172.208.106.233,172.208.49.250,172.208.50.59,172.208.52.163,172.208.65.31,172.208.8.36,172.208.8.54,172.210.11.213,172.210.12.54,172.210.67.101,172.210.67.88,172.210.9.220,172.210.9.231,172.212.104.63,172.212.106.27,172.212.107.121,172.212.203.125,172.212.203.13,172.212.203.134,172.212.203.49,172.212.203.91,172.212.226.215,172.212.226.249,172.212.226.97,172.212.227.53,172.212.227.97,172.212.227.98,172.232.20.149,172.232.27.232,172.233.219.44,172.233.74.207,172.234.155.181,172.234.192.12,172.234.199.75,172.234.218.22,172.234.218.245,172.234.218.34,172.234.218.87,172.234.221.84,172.234.25.150] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 242"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403541; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!