ET CINS Active Threat Intelligence Poor Reputation IP group 280

7.0.35.0SID: 2403579Rev: 113109EnabledDerived10 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [199.165.159.83,199.165.159.87,199.165.159.88,199.165.159.89,199.165.159.92,199.165.159.97,199.165.159.98,199.189.253.30,199.195.249.183,199.195.250.33,199.195.252.209,199.91.244.145,200.102.179.173,200.119.210.13,200.123.248.97,200.138.46.100,200.138.46.102,200.138.46.103,200.138.46.104,200.138.46.106,200.138.46.108,200.138.46.109,200.138.46.110,200.138.46.112,200.138.46.115,200.138.46.117,200.138.46.119,200.138.46.12,200.138.46.120,200.138.46.121,200.138.46.122,200.138.46.123,200.138.46.125,200.138.46.126,200.138.46.127,200.138.46.13,200.138.46.130,200.138.46.135,200.138.46.137,200.138.46.138,200.138.46.14,200.138.46.141,200.138.46.143,200.138.46.147,200.138.46.15,200.138.46.153,200.138.46.156,200.138.46.157,200.138.46.161,200.138.46.164] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 280"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403579; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!