ET CINS Active Threat Intelligence Poor Reputation IP group 127
alert ip [91.196.152.104,91.196.152.107,91.196.152.108,91.196.152.109,91.196.152.111,91.196.152.112,91.196.152.115,91.196.152.116,91.196.152.117,91.196.152.12,91.196.152.120,91.196.152.122,91.196.152.123,91.196.152.125,91.196.152.126,91.196.152.127,91.196.152.13,91.196.152.14,91.196.152.176,91.196.152.177,91.196.152.179,91.196.152.180,91.196.152.181,91.196.152.182,91.196.152.183,91.196.152.184,91.196.152.185,91.196.152.187,91.196.152.188,91.196.152.189,91.196.152.19,91.196.152.192,91.196.152.193,91.196.152.194,91.196.152.196,91.196.152.197,91.196.152.198,91.196.152.199,91.196.152.2,91.196.152.20,91.196.152.200,91.196.152.201,91.196.152.202,91.196.152.203,91.196.152.205,91.196.152.206,91.196.152.207,91.196.152.208,91.196.152.209,91.196.152.21] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 127"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403426; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!