ET CINS Active Threat Intelligence Poor Reputation IP group 187

7.0.35.0SID: 2403486Rev: 113109EnabledDerived8 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [139.170.73.35,139.170.73.82,139.177.205.25,139.177.205.71,139.177.207.222,139.180.201.34,139.19.117.129,139.19.117.130,139.19.117.131,139.19.117.197,139.196.150.12,139.196.185.128,139.59.109.224,139.59.12.60,139.59.181.152,139.59.37.187,139.59.42.255,139.59.58.140,139.59.82.165,139.59.94.63,139.84.215.41,139.99.42.91,140.228.246.171,140.238.153.39,140.238.188.117,140.245.39.88,140.82.25.183,141.164.60.41,141.227.131.225,141.255.165.66,141.82.3.32,141.98.83.48,142.129.148.234,142.255.7.90,142.67.249.79,142.93.0.230,142.93.0.246,142.93.1.146,142.93.115.106,142.93.117.164,142.93.118.100,142.93.119.26,142.93.120.27,142.93.12.139,142.93.122.117,142.93.124.161,142.93.124.194,142.93.125.171,142.93.125.28,142.93.125.95] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 187"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403486; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!