ET CINS Active Threat Intelligence Poor Reputation IP group 247
alert ip [181.198.13.109,181.199.10.59,181.199.59.16,181.209.95.75,181.216.63.5,181.216.66.149,181.217.190.28,181.217.89.26,181.220.109.228,181.220.125.137,181.222.212.7,181.222.228.27,181.223.246.91,181.224.230.26,181.225.70.75,181.229.23.98,181.232.239.244,181.233.17.147,181.234.50.167,181.26.160.35,181.48.179.82,181.52.218.29,181.53.99.27,181.54.1.9,181.55.23.86,181.55.68.141,181.55.68.76,181.59.3.6,181.61.209.73,181.62.56.35,181.63.26.159,181.78.242.139,181.91.173.245,182.105.123.10,182.105.24.71,182.116.68.214,182.119.225.59,182.119.227.239,182.126.62.149,182.128.96.227,182.131.74.5,182.132.215.14,182.132.73.68,182.133.173.86,182.138.135.5,182.138.158.104,182.138.158.107,182.138.158.11,182.138.158.12,182.138.158.122] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 247"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403546; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!