ET CINS Active Threat Intelligence Poor Reputation IP group 209

SID: 2403508Rev: 109616Derived2 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJune 18, 2026
Classificationmisc-attack
alert ip [156.238.232.64,156.239.41.50,156.67.105.7,156.67.81.164,157.0.0.10,157.100.127.119,157.100.142.237,157.100.202.96,157.100.203.18,157.100.54.104,157.100.69.92,157.100.88.128,157.10.30.34,157.137.190.85,157.15.66.90,157.20.215.101,157.211.192.244,157.22.198.192,157.230.101.158,157.230.103.128,157.230.104.221,157.230.123.22,157.230.129.112,157.230.130.107,157.230.133.142,157.230.15.107,157.230.61.58,157.230.8.75,157.230.99.66,157.245.107.127,157.245.108.163,157.245.118.61,157.245.123.148,157.245.139.84,157.245.144.216,157.245.169.128,157.245.176.143,157.245.213.221,157.245.220.50,157.245.32.92,157.245.35.161,157.245.38.54,157.245.56.210,157.245.69.32,157.245.69.67,157.245.70.61,157.245.72.96,157.245.76.159,157.245.78.79,157.245.79.205] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 209"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403508; rev:109616; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_06_18;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_06_18

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!