ET CINS Active Threat Intelligence Poor Reputation IP group 279
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [199.165.159.11,199.165.159.114,199.165.159.122,199.165.159.124,199.165.159.131,199.165.159.134,199.165.159.137,199.165.159.138,199.165.159.143,199.165.159.147,199.165.159.153,199.165.159.154,199.165.159.156,199.165.159.157,199.165.159.164,199.165.159.169,199.165.159.17,199.165.159.18,199.165.159.180,199.165.159.183,199.165.159.194,199.165.159.198,199.165.159.201,199.165.159.204,199.165.159.21,199.165.159.216,199.165.159.219,199.165.159.221,199.165.159.24,199.165.159.27,199.165.159.29,199.165.159.30,199.165.159.33,199.165.159.36,199.165.159.37,199.165.159.40,199.165.159.41,199.165.159.44,199.165.159.52,199.165.159.53,199.165.159.55,199.165.159.56,199.165.159.57,199.165.159.59,199.165.159.61,199.165.159.62,199.165.159.63,199.165.159.65,199.165.159.69,199.165.159.73] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 279"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403578; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!