ET CINS Active Threat Intelligence Poor Reputation IP group 289
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [212.103.118.144,212.108.143.200,212.156.63.62,212.30.36.140,212.47.65.218,212.56.44.53,212.56.54.42,212.64.201.216,212.75.227.226,212.83.165.60,212.83.186.100,213.136.81.100,213.142.151.135,213.142.151.157,213.166.84.34,213.166.84.35,213.166.84.36,213.166.84.37,213.166.84.39,213.166.84.40,213.166.84.42,213.166.84.44,213.166.84.46,213.166.84.47,213.166.84.52,213.166.84.54,213.166.84.57,213.166.84.58,213.166.84.59,213.166.84.61,213.166.84.62,213.170.135.8,213.189.218.54,213.199.38.242,213.199.50.216,213.199.57.64,213.227.133.171,213.238.237.47,213.254.134.82,213.35.102.40,213.64.173.245,213.65.93.47,216.126.231.22,216.126.231.25,216.126.231.34,216.137.98.135,216.152.240.21,216.164.102.111,216.180.246.100,216.180.246.102] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 289"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403588; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!