ET CINS Active Threat Intelligence Poor Reputation IP group 280
alert ip [196.39.202.215,196.6.105.24,197.101.141.201,197.14.12.36,197.155.40.128,197.161.89.30,197.164.196.251,197.210.143.182,197.231.129.6,197.232.20.75,197.245.106.3,197.248.3.28,197.31.52.146,197.95.111.99,198.11.177.252,198.11.177.57,198.11.178.139,198.11.180.16,198.11.183.234,198.163.193.131,198.199.123.141,198.199.67.227,198.199.75.236,198.199.87.216,198.23.209.169,198.27.77.9,198.36.146.84,198.52.28.98,198.52.29.77,198.58.100.172,198.58.100.4,198.58.100.99,198.58.111.249,198.58.111.250,198.58.122.43,198.74.50.114,198.74.53.109,198.74.58.148,198.98.54.35,199.101.189.135,199.103.16.28,199.103.61.107,199.195.249.11,199.45.154.134,199.45.154.146,199.45.154.176,199.45.154.177,199.45.154.178,199.45.154.179,199.45.154.180] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 280"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403579; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!