ET CINS Active Threat Intelligence Poor Reputation IP group 288

7.0.35.0SID: 2403587Rev: 111413EnabledDerived5 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedSeptember 1, 2026
Classificationmisc-attack
alert ip [211.217.29.199,211.22.25.205,211.229.127.206,211.23.246.94,211.233.58.148,211.24.78.174,211.246.177.37,211.90.188.185,211.91.59.238,212.100.67.239,212.104.183.242,212.132.194.74,212.156.75.110,212.178.16.95,212.18.108.190,212.217.118.139,212.220.15.227,212.23.217.3,212.24.45.146,212.252.73.10,212.58.120.42,212.73.148.19,212.73.148.24,212.73.148.26,212.73.148.4,212.85.242.21,212.91.161.162,213.109.201.59,213.109.66.245,213.136.78.123,213.166.84.34,213.166.84.35,213.166.84.36,213.166.84.38,213.166.84.39,213.166.84.40,213.166.84.41,213.166.84.44,213.166.84.49,213.166.84.50,213.166.84.53,213.166.84.55,213.166.84.57,213.166.84.58,213.166.84.61,213.166.84.62,213.172.155.60,213.199.42.227,213.22.68.161,213.230.78.222] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 288"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403587; rev:111413; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_09_01;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_09_01

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!