ET CINS Active Threat Intelligence Poor Reputation IP group 279

7.0.35.0SID: 2403578Rev: 113109EnabledDerived3 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [199.165.159.11,199.165.159.114,199.165.159.122,199.165.159.124,199.165.159.131,199.165.159.134,199.165.159.137,199.165.159.138,199.165.159.143,199.165.159.147,199.165.159.153,199.165.159.154,199.165.159.156,199.165.159.157,199.165.159.164,199.165.159.169,199.165.159.17,199.165.159.18,199.165.159.180,199.165.159.183,199.165.159.194,199.165.159.198,199.165.159.201,199.165.159.204,199.165.159.21,199.165.159.216,199.165.159.219,199.165.159.221,199.165.159.24,199.165.159.27,199.165.159.29,199.165.159.30,199.165.159.33,199.165.159.36,199.165.159.37,199.165.159.40,199.165.159.41,199.165.159.44,199.165.159.52,199.165.159.53,199.165.159.55,199.165.159.56,199.165.159.57,199.165.159.59,199.165.159.61,199.165.159.62,199.165.159.63,199.165.159.65,199.165.159.69,199.165.159.73] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 279"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403578; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!