ET CINS Active Threat Intelligence Poor Reputation IP group 220

7.0.35.0SID: 2403519Rev: 111317EnabledDerived12 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [165.227.57.33,165.227.61.60,165.227.82.20,165.227.84.181,165.227.90.164,165.227.9.29,165.232.115.135,165.232.118.73,165.232.131.71,165.232.134.77,165.232.142.61,165.232.143.176,165.232.144.61,165.232.146.132,165.232.146.64,165.232.148.247,165.232.182.138,165.232.36.4,165.232.42.199,165.232.58.129,165.232.58.4,165.232.60.36,165.232.60.75,165.232.61.133,165.232.63.91,165.245.172.73,165.245.182.17,165.245.189.184,165.245.219.84,165.245.228.214,165.245.238.181,166.114.137.202,166.114.143.150,166.114.154.193,166.114.163.242,166.48.178.176,167.160.95.118,167.172.116.161,167.172.127.97,167.172.138.147,167.172.140.217,167.172.150.24,167.172.157.17,167.172.18.44,167.172.185.85,167.172.205.210,167.172.211.137,167.172.212.4,167.172.213.54,167.172.214.130] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 220"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403519; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!