ET CINS Active Threat Intelligence Poor Reputation IP group 128
alert ip [91.196.152.210,91.196.152.211,91.196.152.212,91.196.152.213,91.196.152.214,91.196.152.215,91.196.152.217,91.196.152.218,91.196.152.219,91.196.152.22,91.196.152.220,91.196.152.221,91.196.152.222,91.196.152.223,91.196.152.23,91.196.152.232,91.196.152.234,91.196.152.235,91.196.152.236,91.196.152.237,91.196.152.238,91.196.152.239,91.196.152.240,91.196.152.242,91.196.152.243,91.196.152.244,91.196.152.245,91.196.152.246,91.196.152.26,91.196.152.27,91.196.152.28,91.196.152.29,91.196.152.3,91.196.152.32,91.196.152.33,91.196.152.34,91.196.152.35,91.196.152.36,91.196.152.37,91.196.152.38,91.196.152.39,91.196.152.4,91.196.152.5,91.196.152.6,91.196.152.7,91.196.152.88,91.196.152.89,91.196.152.9,91.196.152.90,91.196.152.91] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 128"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403427; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!