ET CINS Active Threat Intelligence Poor Reputation IP group 209

7.0.35.0SID: 2403508Rev: 111389EnabledDerived4 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 31, 2026
Classificationmisc-attack
alert ip [165.22.128.186,165.22.134.80,165.22.136.39,165.22.151.192,165.22.155.124,165.22.160.189,165.22.167.183,165.22.168.250,165.22.168.87,165.22.169.163,165.22.177.65,165.22.18.162,165.22.182.106,165.22.182.51,165.22.188.130,165.22.212.94,165.22.229.92,165.22.4.206,165.227.106.31,165.227.110.45,165.227.111.23,165.227.172.206,165.227.200.245,165.227.201.127,165.227.203.112,165.227.205.29,165.227.2.252,165.227.227.105,165.227.23.54,165.227.238.235,165.227.30.51,165.227.30.74,165.227.3.136,165.227.57.33,165.227.61.60,165.227.83.252,165.227.84.181,165.227.90.164,165.227.92.18,165.227.9.29,165.227.98.225,165.232.118.73,165.232.128.224,165.232.129.94,165.232.131.160,165.232.131.187,165.232.132.167,165.232.135.2,165.232.142.15,165.232.142.61] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 209"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403508; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!