ET CINS Active Threat Intelligence Poor Reputation IP group 228

7.0.35.0SID: 2403527Rev: 110288EnabledDerived7 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 16, 2026
Classificationmisc-attack
alert ip [171.208.55.120,171.213.148.149,171.213.199.154,171.213.233.46,171.213.248.48,171.220.181.143,171.221.213.33,171.221.213.7,171.222.252.229,171.236.124.47,171.240.254.100,171.246.67.254,171.35.32.209,171.35.79.69,171.37.215.120,171.44.141.9,171.44.158.35,171.5.84.163,171.78.153.197,171.83.53.133,171.83.76.152,171.97.60.237,171.97.82.132,172.101.134.16,172.104.100.117,172.104.146.120,172.104.146.126,172.104.146.127,172.104.146.166,172.104.17.51,172.104.30.66,172.104.5.239,172.104.5.254,172.105.147.10,172.105.147.100,172.105.147.101,172.105.147.102,172.105.147.104,172.105.147.105,172.105.147.106,172.105.147.107,172.105.147.108,172.105.147.109,172.105.147.11,172.105.147.110,172.105.147.112,172.105.147.113,172.105.147.114,172.105.147.115,172.105.147.116] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 228"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403527; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!