ET CINS Active Threat Intelligence Poor Reputation IP group 296

7.0.35.0SID: 2403595Rev: 113109EnabledDerived8 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [220.197.85.103,220.197.85.110,220.197.85.120,220.197.85.123,220.197.85.127,220.197.85.128,220.197.85.143,220.197.85.150,220.197.85.156,220.197.85.157,220.197.85.158,220.197.85.167,220.197.85.172,220.197.85.177,220.197.85.179,220.197.85.193,220.197.85.194,220.197.85.20,220.197.85.201,220.197.85.207,220.197.85.211,220.197.85.214,220.197.85.219,220.197.85.223,220.197.85.226,220.197.85.228,220.197.85.239,220.197.85.251,220.197.85.28,220.197.85.3,220.197.85.31,220.197.85.35,220.197.85.37,220.197.85.39,220.197.85.41,220.197.85.5,220.197.85.54,220.197.85.55,220.197.85.56,220.197.85.61,220.197.85.63,220.197.85.67,220.197.85.68,220.197.85.77,220.197.85.81,220.197.85.91,220.197.85.96,220.202.112.102,220.202.112.103,220.202.112.104] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 296"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403595; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!