ET CINS Active Threat Intelligence Poor Reputation IP group 284

7.0.35.0SID: 2403583Rev: 111389EnabledDerived1 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 31, 2026
Classificationmisc-attack
alert ip [201.81.3.63,201.87.151.89,201.93.161.154,201.93.245.188,201.94.147.50,201.95.46.62,201.95.5.153,202.10.37.135,202.105.190.161,202.106.153.162,202.106.54.126,202.110.74.30,202.112.47.54,202.138.238.145,202.138.251.49,202.138.251.55,202.141.251.198,202.151.29.117,202.166.164.46,202.168.189.182,202.175.123.218,202.183.243.94,202.189.11.90,202.4.105.149,202.47.50.39,202.56.3.26,202.58.206.242,202.58.66.50,202.79.34.163,202.93.133.49,202.98.252.213,203.121.198.2,203.128.10.32,203.132.60.9,203.134.140.228,203.142.5.186,203.145.63.139,203.146.129.235,203.150.171.19,203.177.49.106,203.186.124.210,203.204.135.118,203.219.125.138,203.221.7.131,203.25.208.145,203.25.223.151,203.55.131.3,203.55.131.5,203.63.100.86,203.76.98.65] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 284"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403583; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!