ET CINS Active Threat Intelligence Poor Reputation IP group 202

7.0.35.0SID: 2403501Rev: 111317EnabledDerived9 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [154.197.57.71,154.210.208.252,154.217.245.175,154.221.24.43,154.27.138.109,154.36.154.28,154.58.4.13,154.58.4.52,154.61.72.205,154.79.251.210,154.83.197.10,154.83.197.107,154.83.197.108,154.83.197.11,154.83.197.124,154.83.197.126,154.83.197.127,154.83.197.130,154.83.197.139,154.83.197.14,154.83.197.142,154.83.197.148,154.83.197.15,154.83.197.151,154.83.197.158,154.83.197.161,154.83.197.164,154.83.197.169,154.83.197.185,154.83.197.200,154.83.197.203,154.83.197.210,154.83.197.22,154.83.197.225,154.83.197.29,154.83.197.33,154.83.197.4,154.83.197.41,154.83.197.42,154.83.197.49,154.83.197.50,154.83.197.57,154.83.197.60,154.83.197.64,154.83.197.69,154.83.197.70,154.83.197.72,154.83.197.83,154.83.197.87,154.83.197.9] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 202"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403501; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!