ET CINS Active Threat Intelligence Poor Reputation IP group 280
alert ip [197.248.3.28,197.248.99.109,197.254.11.250,197.95.111.99,197.95.48.121,198.11.177.57,198.11.178.139,198.11.179.136,198.11.179.46,198.11.183.234,198.12.56.32,198.163.195.86,198.199.123.141,198.199.75.236,198.199.87.216,198.199.94.79,198.211.100.19,198.23.209.169,198.23.244.211,198.251.62.31,198.27.77.9,198.52.28.98,198.52.29.77,198.58.100.172,198.58.100.4,198.58.100.49,198.58.111.249,198.58.111.250,198.74.50.114,198.74.53.109,198.74.58.148,198.74.59.236,198.8.62.166,198.98.54.35,199.101.189.135,199.103.16.28,199.195.249.11,199.45.154.121,199.45.154.136,199.45.154.149,199.45.155.102,199.45.155.103,199.45.155.107,199.45.155.108,199.45.155.72,199.45.155.77,199.45.155.78,199.45.155.80,199.45.155.86,199.45.155.89] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 280"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403579; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!