ET CINS Active Threat Intelligence Poor Reputation IP group 288
alert ip [216.180.246.121,216.180.246.125,216.180.246.126,216.180.246.127,216.180.246.128,216.180.246.136,216.180.246.144,216.180.246.145,216.180.246.15,216.180.246.151,216.180.246.154,216.180.246.155,216.180.246.159,216.180.246.16,216.180.246.160,216.180.246.162,216.180.246.165,216.180.246.166,216.180.246.168,216.180.246.169,216.180.246.170,216.180.246.172,216.180.246.173,216.180.246.176,216.180.246.179,216.180.246.18,216.180.246.180,216.180.246.182,216.180.246.188,216.180.246.191,216.180.246.196,216.180.246.197,216.180.246.198,216.180.246.2,216.180.246.200,216.180.246.201,216.180.246.202,216.180.246.203,216.180.246.204,216.180.246.207,216.180.246.209,216.180.246.210,216.180.246.211,216.180.246.215,216.180.246.216,216.180.246.217,216.180.246.218,216.180.246.220,216.180.246.223,216.180.246.224] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 288"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403587; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!