ET CINS Active Threat Intelligence Poor Reputation IP group 258

7.0.35.0SID: 2403557Rev: 111389EnabledDerived6 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 31, 2026
Classificationmisc-attack
alert ip [189.113.8.254,189.114.211.196,189.115.63.3,189.121.200.161,189.121.200.80,189.121.202.252,189.121.202.88,189.123.106.143,189.123.106.218,189.123.126.40,189.123.172.37,189.123.39.201,189.123.96.164,189.123.96.196,189.123.97.122,189.123.97.219,189.123.97.224,189.123.97.77,189.123.99.225,189.124.117.201,189.124.15.252,189.124.78.191,189.127.187.94,189.127.19.19,189.127.253.69,189.129.139.214,189.129.161.118,189.129.161.149,189.129.177.44,189.133.115.254,189.133.172.71,189.137.174.189,189.139.105.152,189.139.244.101,189.139.95.38,189.14.183.69,189.142.115.111,189.146.184.41,189.147.46.125,189.148.253.124,189.150.28.83,189.153.163.95,189.160.161.49,189.162.185.13,189.162.192.36,189.167.7.253,189.169.115.19,189.169.120.74,189.169.12.52,189.172.155.26] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 258"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403557; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!