ET CINS Active Threat Intelligence Poor Reputation IP group 291
alert ip [216.25.89.166,216.25.89.167,216.25.89.168,216.25.89.169,216.25.89.170,216.25.89.171,216.25.89.174,216.25.89.175,216.25.89.177,216.25.89.178,216.25.89.180,216.25.89.183,216.25.89.184,216.25.89.186,216.25.89.187,216.25.89.188,216.25.89.191,216.25.89.64,216.25.89.66,216.25.89.67,216.25.89.70,216.25.89.75,216.25.89.76,216.25.89.77,216.25.89.78,216.25.89.79,216.25.89.82,216.25.89.85,216.25.89.86,216.25.89.87,216.25.89.88,216.25.89.89,216.25.89.91,216.25.89.93,216.25.89.94,216.25.89.96,216.25.89.97,216.25.89.98,216.25.89.99,216.60.162.61,216.73.107.16,216.73.123.169,216.74.240.254,216.98.211.15,216.98.214.229,217.118.40.169,217.142.20.209,217.142.250.125,217.146.80.100,217.146.80.102] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 291"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403590; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!