ET CINS Active Threat Intelligence Poor Reputation IP group 233

7.0.35.0SID: 2403532Rev: 110264EnabledDerived12 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [167.172.124.186,167.172.130.235,167.172.136.250,167.172.137.32,167.172.138.147,167.172.138.229,167.172.140.150,167.172.148.206,167.172.153.101,167.172.158.11,167.172.159.86,167.172.207.27,167.172.208.20,167.172.208.245,167.172.216.143,167.172.223.106,167.172.223.162,167.172.223.199,167.172.223.46,167.172.223.63,167.172.241.89,167.172.37.93,167.172.40.9,167.172.47.74,167.172.76.181,167.172.79.176,167.249.110.8,167.249.145.4,167.249.94.180,167.249.94.36,167.60.74.86,167.71.102.95,167.71.110.14,167.71.159.227,167.71.162.85,167.71.17.22,167.71.178.127,167.71.188.73,167.71.197.122,167.71.207.50,167.71.228.234,167.71.229.198,167.71.24.181,167.71.27.53,167.71.48.52,167.71.70.88,167.71.96.196,167.94.145.16,167.94.145.17,167.94.145.18] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 233"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403532; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!