ET CINS Active Threat Intelligence Poor Reputation IP group 139

7.0.35.0SID: 2403438Rev: 113109EnabledDerived5 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [85.217.149.27,85.217.149.28,85.217.149.29,85.217.149.3,85.217.149.31,85.217.149.32,85.217.149.33,85.217.149.34,85.217.149.36,85.217.149.38,85.217.149.39,85.217.149.4,85.217.149.40,85.217.149.42,85.217.149.43,85.217.149.44,85.217.149.45,85.217.149.47,85.217.149.48,85.217.149.49,85.217.149.50,85.217.149.52,85.217.149.53,85.217.149.54,85.217.149.55,85.217.149.57,85.217.149.58,85.217.149.59,85.217.149.6,85.217.149.60,85.217.149.62,85.217.149.63,85.217.149.64,85.217.149.65,85.217.149.67,85.217.149.68,85.217.149.69,85.217.149.7,85.217.149.70,85.217.149.72,85.217.149.73,85.217.149.74,85.217.149.8,85.217.149.9,85.226.88.225,85.235.43.183,85.239.149.173,85.239.151.34,85.239.151.42,85.239.232.238] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 139"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403438; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!