ET CINS Active Threat Intelligence Poor Reputation IP group 287
alert ip [211.106.155.52,211.115.128.56,211.119.22.141,211.136.186.130,211.137.127.182,211.137.202.194,211.137.77.21,211.138.170.67,211.138.6.45,211.139.7.7,211.143.37.67,211.145.38.60,211.145.71.32,211.149.226.212,211.157.179.157,211.194.151.207,211.217.108.4,211.217.29.199,211.23.246.94,211.24.78.174,211.40.167.121,211.90.188.185,211.91.59.238,212.100.67.239,212.104.183.242,212.108.143.220,212.115.113.249,212.129.34.236,212.132.194.74,212.152.181.201,212.16.87.195,212.175.61.34,212.18.108.190,212.217.118.139,212.227.7.185,212.252.73.26,212.34.145.13,212.58.120.42,212.73.148.4,212.83.165.60,212.83.176.122,212.90.61.52,212.91.161.162,212.92.240.13,213.109.201.59,213.154.71.107,213.166.84.34,213.166.84.35,213.166.84.36,213.166.84.38] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 287"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403586; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!