ET CINS Active Threat Intelligence Poor Reputation IP group 278
alert ip [197.249.107.44,197.249.96.58,197.31.48.57,197.31.52.168,197.39.111.141,197.5.192.202,197.52.90.8,197.91.83.14,197.92.207.185,197.95.10.80,197.95.15.60,197.95.24.224,197.95.29.88,197.95.89.234,198.11.179.46,198.11.180.16,198.11.180.76,198.11.181.143,198.15.126.237,198.163.193.189,198.199.123.141,198.199.74.47,198.199.83.121,198.199.83.145,198.199.91.162,198.211.101.235,198.211.99.18,198.23.209.169,198.38.89.100,198.58.116.92,198.72.224.117,198.74.58.130,198.74.58.157,198.74.58.192,198.98.48.5,198.98.58.74,199.45.154.113,199.45.154.117,199.45.154.121,199.45.154.125,199.45.154.177,199.45.154.178,199.45.154.179,199.45.154.180,199.45.154.182,199.45.154.183,199.45.154.185,199.45.154.187,199.45.154.188,199.45.154.190] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 278"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403577; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!