ET CINS Active Threat Intelligence Poor Reputation IP group 282

7.0.35.0SID: 2403581Rev: 111389EnabledDerived6 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 31, 2026
Classificationmisc-attack
alert ip [201.13.202.165,201.131.178.92,201.131.182.18,201.132.11.46,201.132.250.233,201.132.251.19,201.137.98.110,201.138.208.151,201.138.208.85,201.138.213.97,201.138.85.11,201.139.94.168,201.139.95.35,201.140.243.229,201.14.196.63,201.14.32.89,201.145.152.55,201.148.245.59,201.148.253.124,201.148.42.196,201.150.27.242,201.15.233.176,201.153.223.243,201.158.9.21,201.159.182.94,201.161.46.131,201.161.46.133,201.162.80.174,201.163.133.252,201.163.141.150,201.163.63.74,201.165.28.114,201.17.148.79,201.17.157.139,201.17.157.248,201.17.158.5,201.17.208.138,201.17.211.125,201.17.216.181,201.182.14.9,201.182.181.25,201.187.112.177,201.187.131.1,201.187.68.88,201.20.89.213,201.2.191.99,201.205.241.198,201.21.152.227,201.214.15.162,201.215.129.169] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 282"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403581; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!