ET CINS Active Threat Intelligence Poor Reputation IP group 253

7.0.35.0SID: 2403552Rev: 110264EnabledDerived6 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [179.189.72.116,179.190.204.149,179.191.149.157,179.191.215.227,179.191.225.156,179.209.141.255,179.209.46.136,179.210.226.104,179.213.188.61,179.214.105.55,179.214.97.214,179.215.122.210,179.217.153.132,179.218.10.0,179.218.20.249,179.219.20.39,179.221.49.80,179.222.188.69,179.222.189.197,179.223.204.132,179.223.204.55,179.223.24.100,179.225.36.45,179.232.216.49,179.246.146.51,179.251.71.5,179.32.208.214,179.42.126.134,179.42.126.69,179.42.127.167,179.42.142.128,179.42.57.169,179.42.74.183,179.42.96.6,179.42.98.0,179.42.98.120,179.43.168.58,179.51.102.101,179.54.213.94,179.54.96.162,179.60.149.115,179.60.149.116,179.60.149.117,179.60.149.118,179.6.35.230,179.61.30.12,179.63.124.22,179.63.15.107,179.63.189.198,179.7.180.17] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 253"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403552; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!