ET CINS Active Threat Intelligence Poor Reputation IP group 159

7.0.35.0SID: 2403458Rev: 110264EnabledDerived4 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [109.205.211.217,109.205.211.219,109.205.211.221,109.205.211.223,109.205.211.225,109.205.211.227,109.205.211.229,109.205.211.231,109.205.211.233,109.205.211.235,109.205.211.237,109.205.211.239,109.205.211.241,109.205.211.243,109.205.211.245,109.205.211.251,109.205.211.253,109.207.169.11,109.209.108.202,109.224.17.86,109.227.68.147,109.62.119.215,109.63.188.175,109.69.19.248,109.77.154.216,109.77.41.177,109.79.12.232,109.86.217.167,110.164.64.243,110.17.84.193,110.171.151.27,110.179.80.100,110.179.80.125,110.179.80.151,110.179.80.167,110.179.80.17,110.179.80.175,110.179.80.180,110.179.80.198,110.179.80.202,110.179.80.207,110.179.80.21,110.179.80.213,110.179.80.225,110.179.80.226,110.179.80.230,110.179.80.231,110.179.80.41,110.179.80.44,110.179.80.5] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 159"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403458; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!