ET CINS Active Threat Intelligence Poor Reputation IP group 229

7.0.35.0SID: 2403528Rev: 110264EnabledDerived8 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [165.154.172.108,165.154.172.111,165.154.172.115,165.154.172.116,165.154.172.152,165.154.172.181,165.154.172.191,165.154.172.200,165.154.172.204,165.154.172.218,165.154.172.223,165.154.172.231,165.154.172.234,165.154.172.244,165.154.172.249,165.154.172.253,165.154.172.37,165.154.172.47,165.154.172.53,165.154.172.57,165.154.172.65,165.154.172.72,165.154.172.73,165.154.172.79,165.154.172.86,165.154.172.88,165.154.172.94,165.154.173.104,165.154.173.115,165.154.173.120,165.154.173.143,165.154.173.148,165.154.173.169,165.154.173.17,165.154.173.182,165.154.173.196,165.154.173.20,165.154.173.204,165.154.173.21,165.154.173.211,165.154.173.215,165.154.173.218,165.154.173.226,165.154.173.236,165.154.173.239,165.154.173.242,165.154.173.74,165.154.173.83,165.154.173.97,165.154.174.206] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 229"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403528; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!