ET CINS Active Threat Intelligence Poor Reputation IP group 200

7.0.35.0SID: 2403499Rev: 111389EnabledDerived6 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 31, 2026
Classificationmisc-attack
alert ip [162.216.149.227,162.216.149.228,162.216.149.229,162.216.149.230,162.216.149.231,162.216.149.233,162.216.149.236,162.216.149.237,162.216.149.239,162.216.149.24,162.216.149.240,162.216.149.241,162.216.149.243,162.216.149.244,162.216.149.247,162.216.149.25,162.216.149.250,162.216.149.251,162.216.149.253,162.216.149.26,162.216.149.34,162.216.149.35,162.216.149.38,162.216.149.44,162.216.149.46,162.216.149.47,162.216.149.48,162.216.149.49,162.216.149.52,162.216.149.54,162.216.149.55,162.216.149.56,162.216.149.57,162.216.149.59,162.216.149.61,162.216.149.62,162.216.149.63,162.216.149.67,162.216.149.68,162.216.149.69,162.216.149.70,162.216.149.71,162.216.149.76,162.216.149.77,162.216.149.80,162.216.149.81,162.216.149.82,162.216.149.83,162.216.149.84,162.216.149.85] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 200"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403499; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!