ET CINS Active Threat Intelligence Poor Reputation IP group 292

7.0.35.0SID: 2403591Rev: 111413EnabledDerived6 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedSeptember 1, 2026
Classificationmisc-attack
alert ip [216.25.89.171,216.25.89.174,216.25.89.175,216.25.89.180,216.25.89.183,216.25.89.186,216.25.89.187,216.25.89.188,216.25.89.191,216.25.89.70,216.25.89.71,216.25.89.75,216.25.89.76,216.25.89.77,216.25.89.78,216.25.89.82,216.25.89.83,216.25.89.86,216.25.89.87,216.25.89.88,216.25.89.89,216.25.89.90,216.25.89.91,216.25.89.92,216.25.89.93,216.25.89.94,216.25.89.95,216.25.89.96,216.25.89.97,216.98.211.111,217.146.80.100,217.146.80.101,217.146.80.102,217.146.80.103,217.146.80.104,217.146.80.105,217.146.80.108,217.146.80.111,217.146.80.116,217.146.80.118,217.146.80.123,217.146.80.125,217.154.152.20,217.154.217.5,217.156.122.139,217.160.171.212,217.160.190.176,217.196.163.209,217.196.163.66,217.196.164.115] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 292"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403591; rev:111413; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_09_01;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_09_01

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!