ET CINS Active Threat Intelligence Poor Reputation IP group 280

7.0.35.0SID: 2403579Rev: 111413EnabledDerived8 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedSeptember 1, 2026
Classificationmisc-attack
alert ip [198.74.59.59,198.98.48.5,199.127.60.75,199.16.59.214,199.195.249.249,199.195.252.209,199.195.254.198,199.45.154.180,199.45.154.181,199.45.154.183,199.45.154.184,199.45.154.186,199.91.221.58,200.100.117.178,200.10.28.166,200.102.159.132,200.104.177.252,200.104.21.112,200.105.254.67,200.110.100.252,200.110.203.37,200.110.205.141,200.111.103.70,200.112.217.52,200.116.173.64,200.118.145.113,200.118.145.56,200.118.18.7,200.118.62.220,200.118.63.65,200.119.54.134,200.120.101.194,200.120.158.143,200.123.248.97,200.124.165.82,200.125.168.57,200.138.135.116,200.138.231.70,200.138.89.75,200.139.121.142,200.139.70.154,200.146.199.192,200.146.199.204,200.149.201.62,200.150.253.122,200.150.253.198,200.150.254.16,200.150.254.46,200.15.17.104,200.15.17.13] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 280"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403579; rev:111413; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_09_01;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_09_01

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!