ET CINS Active Threat Intelligence Poor Reputation IP group 222

7.0.35.0SID: 2403521Rev: 110288EnabledDerived6 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 16, 2026
Classificationmisc-attack
alert ip [165.227.209.27,165.227.21.160,165.227.21.75,165.227.2.252,165.227.231.42,165.227.23.2,165.227.26.149,165.227.38.58,165.227.42.212,165.227.47.218,165.227.57.18,165.227.62.15,165.227.62.206,165.227.8.95,165.227.9.110,165.227.91.52,165.232.117.238,165.232.118.73,165.232.132.146,165.232.132.173,165.232.141.7,165.232.141.72,165.232.142.10,165.232.149.112,165.232.156.244,165.232.33.216,165.232.53.74,165.232.61.133,165.232.73.237,165.245.212.223,165.245.230.18,165.255.13.99,166.114.132.198,166.114.132.225,166.114.137.87,166.114.154.92,166.88.14.52,167.172.104.30,167.172.122.153,167.172.124.186,167.172.136.250,167.172.137.32,167.172.138.147,167.172.138.229,167.172.153.101,167.172.158.11,167.172.159.86,167.172.207.27,167.172.207.59,167.172.208.20] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 222"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403521; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!