ET CINS Active Threat Intelligence Poor Reputation IP group 295
alert ip [220.181.172.244,220.181.84.69,220.187.75.55,220.189.149.19,220.191.239.6,220.197.206.46,220.197.85.114,220.197.85.121,220.197.85.129,220.197.85.131,220.197.85.132,220.197.85.133,220.197.85.144,220.197.85.15,220.197.85.153,220.197.85.155,220.197.85.164,220.197.85.165,220.197.85.170,220.197.85.174,220.197.85.184,220.197.85.185,220.197.85.196,220.197.85.199,220.197.85.2,220.197.85.200,220.197.85.208,220.197.85.215,220.197.85.228,220.197.85.251,220.197.85.253,220.197.85.37,220.197.85.62,220.197.85.67,220.197.85.68,220.197.85.78,220.197.85.83,220.197.85.86,220.197.85.88,220.197.85.90,220.197.85.98,220.202.112.10,220.202.112.113,220.202.112.119,220.202.112.121,220.202.112.124,220.202.112.127,220.202.112.133,220.202.112.142,220.202.112.145] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 295"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403594; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!