ET CINS Active Threat Intelligence Poor Reputation IP group 221

7.0.35.0SID: 2403520Rev: 111317EnabledDerived12 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [167.172.217.169,167.172.218.212,167.172.225.137,167.172.40.9,167.172.49.228,167.172.89.195,167.172.89.248,167.249.132.120,167.249.231.226,167.249.31.174,167.249.48.124,167.249.49.98,167.249.68.35,167.249.94.140,167.250.149.96,167.250.199.128,167.250.64.174,167.62.104.253,167.71.114.153,167.71.124.194,167.71.124.65,167.71.133.68,167.71.147.210,167.71.157.33,167.71.158.254,167.71.18.93,167.71.208.164,167.71.28.240,167.88.168.121,167.94.145.17,167.94.145.18,167.94.145.19,167.94.145.20,167.94.145.21,167.94.145.23,167.94.145.25,167.94.145.26,167.94.145.28,167.94.145.30,167.94.145.31,167.94.146.32,167.94.146.33,167.94.146.34,167.94.146.35,167.94.146.37,167.94.146.38,167.94.146.39,167.94.146.40,167.94.146.41,167.94.146.42] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 221"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403520; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!