ET CINS Active Threat Intelligence Poor Reputation IP group 158

7.0.35.0SID: 2403457Rev: 111317EnabledDerived12 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [113.84.42.156,113.9.146.232,113.99.19.100,114.103.233.133,114.130.156.50,114.132.82.125,114.135.76.71,114.217.103.2,114.217.51.183,114.220.169.173,114.222.18.210,114.225.54.148,114.227.65.18,114.228.251.151,114.231.107.108,114.234.112.27,114.234.41.38,114.243.109.238,114.243.99.87,114.246.204.192,114.247.65.130,114.252.246.103,114.29.236.16,114.33.12.13,114.66.29.126,114.84.119.214,114.88.33.169,115.124.66.54,115.160.67.73,115.175.227.164,115.182.75.28,115.187.59.168,115.190.232.245,115.190.251.247,115.190.56.150,115.190.97.5,115.191.15.234,115.191.32.57,115.191.4.11,115.191.6.58,115.192.255.254,115.193.121.59,115.195.145.231,115.195.248.65,115.197.40.76,115.206.158.96,115.208.89.96,115.210.128.73,115.211.219.54,115.212.201.104] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 158"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403457; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!