ET CINS Active Threat Intelligence Poor Reputation IP group 254

7.0.35.0SID: 2403553Rev: 111317EnabledDerived6 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [185.223.235.39,185.223.235.44,185.223.235.47,185.223.235.53,185.223.235.54,185.223.235.56,185.223.235.58,185.223.235.61,185.223.235.8,185.223.235.9,185.224.128.16,185.226.196.12,185.226.196.13,185.226.196.14,185.226.196.15,185.226.196.17,185.226.196.18,185.226.196.19,185.226.196.22,185.226.196.23,185.226.196.24,185.226.196.25,185.226.196.27,185.226.196.29,185.226.196.30,185.226.197.100,185.226.197.101,185.226.197.102,185.226.197.106,185.226.197.107,185.226.197.108,185.226.197.111,185.226.197.112,185.226.197.113,185.226.197.114,185.226.197.12,185.226.197.13,185.226.197.14,185.226.197.15,185.226.197.29,185.226.197.30,185.226.197.33,185.226.197.34,185.226.197.37,185.226.197.38,185.226.197.43,185.226.197.44,185.226.197.45,185.226.197.47,185.226.197.50] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 254"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403553; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!