ET CINS Active Threat Intelligence Poor Reputation IP group 296

7.0.35.0SID: 2403595Rev: 110288EnabledDerived8 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 16, 2026
Classificationmisc-attack
alert ip [221.11.51.23,221.11.51.27,221.11.5.50,221.11.5.52,221.11.5.62,221.11.60.146,221.11.60.150,221.12.66.41,221.126.15.219,221.131.139.70,221.131.2.4,221.133.9.25,221.14.17.239,221.151.146.24,221.153.227.12,221.162.74.166,221.164.137.248,221.176.229.130,221.178.157.30,221.179.40.38,221.182.185.190,221.193.0.104,221.193.18.32,221.199.14.242,221.199.14.246,221.199.14.247,221.199.42.158,221.2.40.78,221.2.9.67,221.203.38.3,221.210.170.72,221.212.58.242,221.214.182.189,221.217.58.154,221.218.245.18,221.225.166.202,221.226.177.66,221.227.163.232,221.228.183.30,221.230.78.236,221.232.102.202,221.233.24.226,221.236.188.191,221.236.21.55,221.238.104.70,221.5.213.189,221.5.67.99,221.9.16.87,222.117.120.157,222.128.28.56] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 296"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403595; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!