ET CINS Active Threat Intelligence Poor Reputation IP group 286
alert ip [209.38.27.33,209.38.71.185,209.97.129.94,210.2.130.106,210.22.126.218,210.4.123.4,211.106.155.52,211.115.128.56,211.136.186.130,211.137.202.194,211.137.24.99,211.137.77.20,211.138.170.66,211.138.170.70,211.138.6.45,211.139.7.7,211.143.37.67,211.149.226.212,211.173.57.222,211.184.55.136,211.194.151.207,211.217.29.199,211.246.177.37,211.40.167.121,212.104.183.242,212.112.108.122,212.129.34.236,212.152.181.201,212.156.44.158,212.156.75.110,212.18.114.31,212.217.118.139,212.227.7.185,212.23.217.3,212.252.73.10,212.34.145.13,212.58.120.42,212.58.121.32,212.73.148.4,212.83.165.60,212.83.176.122,212.83.186.8,212.85.242.21,213.109.201.59,213.109.66.245,213.165.60.72,213.166.84.38,213.166.84.39,213.166.84.41,213.166.84.42] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 286"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403585; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!