ET CINS Active Threat Intelligence Poor Reputation IP group 286

7.0.35.0SID: 2403585Rev: 110264EnabledDerived9 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 15, 2026
Classificationmisc-attack
alert ip [209.38.72.12,209.38.74.210,209.51.3.76,209.61.65.92,209.97.148.246,210.105.67.198,210.117.212.108,210.172.173.61,210.18.140.203,210.211.122.97,210.211.20.114,210.217.42.139,210.22.123.10,210.22.180.146,210.61.48.101,210.61.64.135,211.105.145.85,211.106.155.52,211.137.24.102,211.137.77.16,211.138.6.45,211.139.7.2,211.139.7.7,211.142.34.214,211.142.86.50,211.143.37.67,211.145.38.32,211.145.38.60,211.149.226.212,211.158.145.140,211.184.55.136,211.184.82.5,211.217.108.4,211.246.177.37,211.248.244.97,211.250.26.54,211.38.82.215,211.40.167.121,211.59.174.163,211.90.236.7,211.91.59.238,212.100.67.239,212.108.130.27,212.112.108.122,212.132.60.239,212.152.181.201,212.217.118.139,212.227.7.185,212.23.217.3,212.53.231.159] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 286"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403585; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!