ET CINS Active Threat Intelligence Poor Reputation IP group 297

7.0.35.0SID: 2403596Rev: 111317EnabledDerived7 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedAugust 28, 2026
Classificationmisc-attack
alert ip [221.133.9.25,221.146.11.168,221.164.137.248,221.178.157.30,221.179.30.253,221.195.124.50,221.199.14.245,221.2.153.169,221.203.157.170,221.206.225.58,221.206.42.177,221.207.215.238,221.211.3.58,221.213.7.50,221.214.120.248,221.214.182.189,221.215.8.233,221.220.108.150,221.224.39.154,221.226.7.130,221.230.78.236,221.232.11.25,221.233.24.226,221.235.136.39,221.3.63.114,221.5.213.189,221.5.67.99,222.106.15.209,222.117.120.157,222.120.220.37,222.127.16.109,222.127.54.18,222.128.28.56,222.135.122.162,222.135.123.6,222.135.178.13,222.137.37.36,222.141.81.210,222.161.223.54,222.173.103.227,222.173.133.174,222.173.202.250,222.173.216.234,222.175.132.226,222.176.200.107,222.176.200.122,222.176.200.164,222.176.200.18,222.176.200.4,222.176.200.40] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 297"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403596; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!