ET CINS Active Threat Intelligence Poor Reputation IP group 289
alert ip [216.180.246.226,216.180.246.227,216.180.246.239,216.180.246.24,216.180.246.240,216.180.246.242,216.180.246.248,216.180.246.250,216.180.246.28,216.180.246.3,216.180.246.30,216.180.246.33,216.180.246.37,216.180.246.38,216.180.246.40,216.180.246.43,216.180.246.44,216.180.246.45,216.180.246.51,216.180.246.52,216.180.246.55,216.180.246.56,216.180.246.58,216.180.246.59,216.180.246.60,216.180.246.61,216.180.246.62,216.180.246.63,216.180.246.64,216.180.246.65,216.180.246.67,216.180.246.68,216.180.246.70,216.180.246.71,216.180.246.73,216.180.246.76,216.180.246.77,216.180.246.79,216.180.246.80,216.180.246.82,216.180.246.83,216.180.246.86,216.180.246.88,216.180.246.90,216.180.246.92,216.180.246.95,216.180.246.97,216.181.38.7,216.213.145.231,216.226.77.10] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 289"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403588; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!