ET CINS Active Threat Intelligence Poor Reputation IP group 284

7.0.35.0SID: 2403583Rev: 110264EnabledDerived1 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [203.25.212.194,203.25.223.151,203.55.131.3,203.55.131.4,203.55.131.5,203.76.98.65,203.81.236.89,203.83.11.160,203.83.11.202,203.83.11.208,203.83.11.210,203.83.11.211,203.83.11.212,203.83.11.214,203.83.239.51,203.86.236.127,203.94.53.88,203.99.187.204,203.99.61.172,204.168.248.38,204.186.242.209,204.48.22.120,204.48.28.23,205.185.122.90,205.237.105.154,206.130.213.109,206.189.120.50,206.189.13.97,206.189.140.151,206.189.15.32,206.189.164.159,206.189.167.156,206.189.172.155,206.189.172.170,206.189.188.7,206.189.191.128,206.189.206.164,206.189.209.165,206.189.210.201,206.189.213.128,206.189.213.52,206.189.217.224,206.189.218.232,206.189.5.249,206.189.57.162,206.189.66.174,206.189.71.46,206.189.71.66,206.189.72.103,206.221.176.60] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 284"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403583; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!