ET CINS Active Threat Intelligence Poor Reputation IP group 232

7.0.35.0SID: 2403531Rev: 111317EnabledDerived8 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [172.202.118.67,172.202.118.8,172.202.120.244,172.202.121.132,172.202.121.211,172.202.121.66,172.202.49.190,172.202.49.251,172.203.211.120,172.203.211.224,172.203.212.21,172.203.226.87,172.203.227.223,172.203.229.5,172.203.245.49,172.203.252.132,172.206.227.114,172.206.228.47,172.206.228.64,172.208.51.148,172.208.64.76,172.208.65.31,172.208.66.105,172.210.9.156,172.212.200.142,172.212.200.188,172.212.203.117,172.212.203.66,172.212.203.72,172.212.203.75,172.212.203.85,172.212.224.40,172.212.226.215,172.212.227.53,172.212.228.106,172.212.228.32,172.212.228.63,172.214.5.176,172.215.145.207,172.232.108.36,172.232.15.250,172.232.27.232,172.232.3.17,172.232.8.247,172.233.219.44,172.234.16.94,172.234.192.12,172.234.192.95,172.234.199.190,172.234.199.8] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 232"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403531; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!