ET CINS Active Threat Intelligence Poor Reputation IP group 118

7.0.35.0SID: 2403417Rev: 113109EnabledDerived6 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [65.49.1.78,65.49.1.81,65.49.1.91,65.49.1.92,65.49.1.96,65.49.20.101,65.49.20.103,65.49.20.112,65.49.20.114,65.49.20.116,65.49.20.117,65.49.20.119,65.49.20.120,65.49.20.124,65.49.20.125,65.49.20.70,65.49.20.72,65.49.20.75,65.49.20.78,65.49.20.80,65.49.20.81,65.49.20.85,65.49.20.86,65.49.20.89,65.49.20.93,65.49.20.98,65.49.20.99,66.132.159.107,66.132.159.109,66.132.159.117,66.132.159.119,66.132.159.133,66.132.159.136,66.132.159.46,66.132.172.112,66.132.172.117,66.132.172.123,66.132.172.124,66.132.172.126,66.132.172.127,66.132.172.145,66.132.172.146,66.132.172.147,66.132.172.148,66.132.172.149,66.132.172.154,66.132.172.155,66.132.172.156,66.132.172.159,66.132.172.225] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 118"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403417; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!