ET CINS Active Threat Intelligence Poor Reputation IP group 159

7.0.35.0SID: 2403458Rev: 111389EnabledDerived4 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 31, 2026
Classificationmisc-attack
alert ip [120.196.86.140,120.197.218.183,120.198.91.246,120.205.80.220,120.209.70.192,120.209.98.55,120.211.138.165,120.211.145.102,120.211.145.99,120.224.18.210,120.224.3.167,120.225.180.120,120.225.97.98,120.226.111.86,120.228.139.183,120.228.194.48,120.229.65.8,120.230.12.70,120.230.191.144,120.230.19.29,120.230.232.167,120.231.120.124,120.234.133.74,120.234.19.196,120.239.13.86,120.239.209.187,120.240.153.43,120.24.185.178,120.24.221.142,120.24.222.150,120.24.223.12,120.24.45.128,120.24.46.143,120.24.95.94,120.242.72.122,120.26.220.254,120.26.46.63,120.29.68.209,120.34.24.143,120.36.170.36,120.36.245.160,120.37.75.72,120.40.130.196,120.4.5.111,120.41.143.78,120.46.74.171,120.48.174.141,120.48.71.105,120.7.16.230,120.76.130.170] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 159"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403458; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!