ET CINS Active Threat Intelligence Poor Reputation IP group 223

7.0.35.0SID: 2403522Rev: 110288EnabledDerived12 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 16, 2026
Classificationmisc-attack
alert ip [167.172.208.245,167.172.216.143,167.172.223.106,167.172.223.162,167.172.223.244,167.172.40.9,167.172.47.74,167.172.79.176,167.172.89.195,167.249.145.4,167.249.151.204,167.249.190.43,167.249.242.30,167.249.50.90,167.249.94.180,167.57.183.102,167.71.113.24,167.71.133.68,167.71.152.64,167.71.156.63,167.71.159.227,167.71.165.27,167.71.17.22,167.71.228.113,167.71.229.198,167.71.239.153,167.71.24.181,167.71.27.184,167.71.27.53,167.86.74.161,167.94.145.16,167.94.145.20,167.94.145.22,167.94.145.25,167.94.145.30,167.94.145.31,167.94.146.32,167.94.146.33,167.94.146.34,167.94.146.35,167.94.146.36,167.94.146.37,167.94.146.39,167.94.146.41,167.94.146.42,167.94.146.43,167.94.146.44,167.94.146.46,167.94.146.47,167.94.146.51] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 223"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403522; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!