ET CINS Active Threat Intelligence Poor Reputation IP group 279

7.0.35.0SID: 2403578Rev: 111317EnabledDerived8 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [198.2.105.76,198.211.101.235,198.211.99.18,198.23.209.169,198.38.89.100,198.58.248.94,198.71.61.115,198.72.224.117,198.74.57.47,198.74.58.111,198.74.58.130,198.74.58.148,198.74.58.201,198.74.58.213,198.74.58.45,199.45.154.124,199.45.154.125,199.45.154.176,199.45.154.177,199.45.154.179,199.45.154.180,199.45.154.181,199.45.154.182,199.45.154.184,199.45.154.185,199.45.154.186,199.45.154.187,199.45.154.188,199.45.154.189,199.45.154.190,199.45.154.191,199.45.154.49,199.45.154.61,199.45.154.62,199.45.154.65,199.45.154.69,199.45.155.18,199.45.155.23,199.45.155.29,199.45.155.51,199.45.155.53,199.45.155.56,199.45.155.61,199.45.155.80,199.45.155.82,199.45.155.85,199.45.155.86,199.45.155.88,199.45.155.93,199.91.221.58] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 279"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403578; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!