ET CINS Active Threat Intelligence Poor Reputation IP group 121

7.0.35.0SID: 2403420Rev: 113109EnabledDerived10 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [66.228.56.125,66.228.56.140,66.228.56.155,66.228.56.16,66.228.56.165,66.228.56.179,66.228.56.185,66.228.56.186,66.228.56.187,66.228.56.192,66.228.56.21,66.228.56.211,66.228.56.227,66.228.56.230,66.228.56.245,66.228.56.25,66.228.56.67,66.228.56.7,66.228.56.91,66.228.56.93,66.228.58.100,66.228.58.200,66.228.58.216,66.228.62.61,66.23.228.214,66.240.192.132,66.240.205.34,66.240.223.208,66.240.223.214,66.240.223.240,66.240.236.109,66.240.236.116,66.240.236.119,66.41.52.121,66.42.120.14,66.58.165.244,66.70.148.52,66.90.186.42,66.9.171.216,66.92.21.200,67.186.97.249,67.205.128.153,67.205.129.199,67.205.129.237,67.205.129.33,67.205.130.36,67.205.131.136,67.205.133.76,67.205.135.124,67.205.138.228] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 121"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403420; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!