ET CINS Active Threat Intelligence Poor Reputation IP group 198

7.0.35.0SID: 2403497Rev: 111389EnabledDerived4 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 31, 2026
Classificationmisc-attack
alert ip [161.35.226.118,161.35.228.186,161.35.229.181,161.35.233.231,161.35.233.41,161.35.234.129,161.35.234.225,161.35.236.15,161.35.3.156,161.35.63.141,161.35.69.66,161.35.74.94,161.35.86.114,161.35.98.25,161.49.132.132,161.97.99.230,162.141.111.111,162.141.111.127,162.215.129.33,162.215.135.80,162.216.149.100,162.216.149.102,162.216.149.103,162.216.149.104,162.216.149.105,162.216.149.106,162.216.149.108,162.216.149.109,162.216.149.11,162.216.149.113,162.216.149.114,162.216.149.115,162.216.149.117,162.216.149.120,162.216.149.122,162.216.149.123,162.216.149.124,162.216.149.125,162.216.149.127,162.216.149.128,162.216.149.129,162.216.149.13,162.216.149.130,162.216.149.131,162.216.149.133,162.216.149.134,162.216.149.136,162.216.149.137,162.216.149.138,162.216.149.14] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 198"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403497; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!