ET CINS Active Threat Intelligence Poor Reputation IP group 294
alert ip [220.194.138.12,220.196.72.130,220.196.72.131,220.197.85.108,220.197.85.109,220.197.85.124,220.197.85.127,220.197.85.131,220.197.85.135,220.197.85.141,220.197.85.151,220.197.85.165,220.197.85.167,220.197.85.174,220.197.85.175,220.197.85.180,220.197.85.181,220.197.85.187,220.197.85.19,220.197.85.2,220.197.85.203,220.197.85.207,220.197.85.21,220.197.85.225,220.197.85.232,220.197.85.242,220.197.85.251,220.197.85.34,220.197.85.40,220.197.85.58,220.197.85.60,220.197.85.68,220.197.85.78,220.197.85.97,220.197.85.99,220.202.110.138,220.202.112.112,220.202.112.115,220.202.112.119,220.202.112.120,220.202.112.123,220.202.112.128,220.202.112.134,220.202.112.135,220.202.112.138,220.202.112.142,220.202.112.15,220.202.112.151,220.202.112.154,220.202.112.158] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 294"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403593; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!