ET CINS Active Threat Intelligence Poor Reputation IP group 136
alert ip [91.196.152.18,91.196.152.180,91.196.152.183,91.196.152.185,91.196.152.186,91.196.152.187,91.196.152.19,91.196.152.190,91.196.152.191,91.196.152.193,91.196.152.194,91.196.152.196,91.196.152.198,91.196.152.20,91.196.152.201,91.196.152.202,91.196.152.203,91.196.152.204,91.196.152.206,91.196.152.208,91.196.152.209,91.196.152.21,91.196.152.213,91.196.152.214,91.196.152.215,91.196.152.216,91.196.152.217,91.196.152.219,91.196.152.220,91.196.152.221,91.196.152.222,91.196.152.223,91.196.152.23,91.196.152.232,91.196.152.233,91.196.152.236,91.196.152.238,91.196.152.240,91.196.152.241,91.196.152.244,91.196.152.246,91.196.152.26,91.196.152.28,91.196.152.29,91.196.152.3,91.196.152.31,91.196.152.33,91.196.152.34,91.196.152.35,91.196.152.36] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 136"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403435; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!