ET CINS Active Threat Intelligence Poor Reputation IP group 269

7.0.35.0SID: 2403568Rev: 110264EnabledDerived12 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [189.124.144.153,189.127.184.17,189.127.241.80,189.131.198.235,189.133.128.90,189.14.161.82,189.146.150.55,189.146.51.184,189.150.174.125,189.150.5.136,189.158.157.137,189.162.95.249,189.162.98.59,189.164.43.135,189.172.214.33,189.174.221.112,189.18.130.19,189.188.29.234,189.196.222.28,189.203.10.110,189.203.7.211,189.215.123.64,189.216.112.197,189.216.43.178,189.217.18.123,189.217.188.159,189.217.201.56,189.218.49.99,189.225.144.124,189.225.204.228,189.229.109.8,189.229.125.148,189.229.136.145,189.229.203.120,189.231.162.243,189.234.104.67,189.241.154.193,189.242.153.182,189.245.198.87,189.248.176.247,189.251.160.13,189.253.120.161,189.29.148.83,189.33.66.127,189.34.144.164,189.34.154.129,189.34.166.101,189.34.198.101,189.34.198.148,189.34.198.254] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 269"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403568; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!