ET CINS Active Threat Intelligence Poor Reputation IP group 149

7.0.35.0SID: 2403448Rev: 110264EnabledDerived4 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [102.204.200.78,102.208.61.92,102.214.117.62,102.215.242.87,102.216.181.15,102.217.122.118,102.217.38.249,102.218.25.244,102.218.67.9,102.219.170.103,102.22.81.180,102.223.185.60,102.223.59.188,102.23.162.11,102.23.162.14,102.23.162.3,102.23.162.6,102.23.162.9,102.38.81.245,102.67.181.198,102.68.76.225,103.1.210.25,103.105.67.170,103.106.105.30,103.106.78.53,103.108.141.126,103.109.187.12,103.109.212.116,103.113.39.133,103.115.196.90,103.116.176.6,103.116.178.48,103.118.29.7,103.118.77.148,103.120.189.68,103.120.189.74,103.123.175.6,103.123.226.138,103.124.137.137,103.124.165.218,103.124.196.58,103.126.173.205,103.126.217.241,103.131.101.224,103.131.101.225,103.132.236.30,103.132.98.160,103.139.212.98,103.146.42.230,103.15.140.126] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 149"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403448; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!