ET CINS Active Threat Intelligence Poor Reputation IP group 291

7.0.35.0SID: 2403590Rev: 110264EnabledDerived3 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [217.146.80.112,217.146.80.113,217.146.80.114,217.146.80.115,217.146.80.116,217.146.80.117,217.146.80.119,217.146.80.121,217.146.80.122,217.146.80.123,217.146.80.124,217.146.80.125,217.146.80.126,217.146.80.98,217.146.80.99,217.146.95.157,217.146.95.163,217.147.35.90,217.149.188.102,217.154.196.156,217.160.190.176,217.160.204.180,217.183.25.72,217.19.214.238,217.196.161.241,217.196.164.21,217.216.65.227,217.218.249.122,217.42.225.255,217.60.237.181,217.71.127.125,218.10.97.203,218.1.208.241,218.1.241.209,218.11.255.161,218.12.27.13,218.157.192.92,218.157.41.201,218.161.114.216,218.161.62.161,218.166.92.241,218.17.142.129,218.17.184.95,218.17.33.34,218.200.178.238,218.200.86.209,218.201.184.241,218.203.249.149,218.205.95.161,218.205.95.162] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 291"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403590; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!