ET CINS Active Threat Intelligence Poor Reputation IP group 278
alert ip [196.115.154.132,196.115.59.3,196.119.192.62,196.127.157.210,196.170.53.167,196.188.47.105,196.189.236.151,196.189.91.218,196.190.92.28,196.192.88.41,196.202.110.41,196.202.127.38,196.202.4.176,196.207.227.118,196.210.216.126,196.217.154.115,196.219.43.245,196.221.164.156,196.250.178.215,196.250.184.47,196.64.79.186,197.101.220.12,197.153.58.78,197.160.71.183,197.210.143.182,197.221.121.11,197.232.80.95,197.248.3.28,197.249.107.44,197.249.255.56,197.31.48.57,197.31.52.146,197.91.83.14,197.95.10.80,197.95.119.113,197.95.6.11,197.95.89.234,198.11.177.252,198.11.178.139,198.11.179.136,198.11.179.46,198.11.180.16,198.11.181.143,198.11.183.234,198.169.254.211,198.199.123.141,198.199.74.47,198.199.83.121,198.199.83.145,198.199.91.162] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 278"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403577; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!