ET CINS Active Threat Intelligence Poor Reputation IP group 149

7.0.35.0SID: 2403448Rev: 111389EnabledDerived4 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 31, 2026
Classificationmisc-attack
alert ip [111.167.167.212,111.170.22.174,111.172.196.204,111.174.83.203,111.179.215.8,111.182.13.135,111.182.28.98,111.182.84.114,111.19.105.32,111.199.78.177,111.20.153.86,111.2.113.13,111.2.114.19,111.2.1.143,111.2.78.183,111.202.166.25,111.202.166.26,111.21.35.228,111.21.37.66,111.21.99.86,111.22.118.230,111.22.157.153,111.229.197.27,111.229.202.56,111.230.213.46,111.248.25.10,111.25.248.96,111.252.113.26,111.26.161.196,111.30.98.26,111.36.224.182,111.36.53.94,111.36.56.80,111.36.57.95,111.36.88.59,111.37.130.190,111.37.245.243,111.40.32.182,111.40.50.146,111.40.55.169,111.40.69.190,111.42.226.149,111.42.42.121,111.42.44.132,111.44.137.197,111.44.137.198,111.44.137.199,111.46.20.13,111.46.20.251,111.53.52.125] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 149"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403448; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!