ET CINS Active Threat Intelligence Poor Reputation IP group 225

7.0.35.0SID: 2403524Rev: 111317EnabledDerived11 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [170.64.195.55,170.64.213.37,170.64.234.39,170.78.118.173,170.78.118.76,170.78.149.162,170.78.245.78,170.79.222.130,170.79.222.41,170.79.52.126,170.79.81.196,170.80.146.232,170.80.35.118,170.80.35.27,170.80.35.74,170.80.62.103,170.81.177.168,170.81.203.151,170.81.63.103,170.82.105.22,170.82.177.3,170.82.200.79,170.82.218.80,170.82.90.181,170.83.2.92,170.84.146.193,170.84.225.2,170.84.57.179,170.84.62.253,171.10.56.16,171.101.20.138,171.104.81.196,171.104.81.203,171.104.81.210,171.104.81.211,171.104.81.213,171.104.81.219,171.104.81.221,171.104.81.231,171.104.81.239,171.104.81.253,171.104.83.135,171.104.83.147,171.104.83.149,171.104.83.153,171.104.83.172,171.104.83.182,171.104.83.186,171.108.182.214,171.108.182.224] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 225"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403524; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!