ET CINS Active Threat Intelligence Poor Reputation IP group 283

7.0.35.0SID: 2403582Rev: 111389EnabledDerived3 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 31, 2026
Classificationmisc-attack
alert ip [201.215.198.96,201.215.98.39,201.217.212.74,201.219.165.195,201.222.25.107,201.222.37.30,201.226.239.98,201.239.53.235,201.241.149.15,201.241.205.73,201.244.42.57,201.245.175.76,201.27.197.56,201.3.71.241,201.32.26.146,201.33.80.113,201.40.159.158,201.40.226.251,201.42.127.121,201.42.201.83,201.43.176.106,201.43.247.129,201.43.88.243,201.46.20.141,201.48.108.11,201.51.39.225,201.58.199.164,201.59.131.2,201.62.86.118,201.68.1.191,201.68.231.23,201.7.213.34,201.71.22.82,201.71.39.130,201.71.40.212,201.75.169.225,201.75.170.101,201.75.170.125,201.75.170.199,201.75.189.114,201.76.104.224,201.77.100.93,201.79.0.226,201.79.11.128,201.79.8.152,201.81.0.36,201.81.233.164,201.81.234.177,201.81.234.247,201.81.235.194] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 283"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403582; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!