ET CINS Active Threat Intelligence Poor Reputation IP group 289
alert ip [216.180.246.136,216.180.246.137,216.180.246.139,216.180.246.142,216.180.246.144,216.180.246.146,216.180.246.147,216.180.246.154,216.180.246.157,216.180.246.159,216.180.246.16,216.180.246.161,216.180.246.164,216.180.246.166,216.180.246.167,216.180.246.168,216.180.246.173,216.180.246.176,216.180.246.185,216.180.246.189,216.180.246.193,216.180.246.197,216.180.246.200,216.180.246.202,216.180.246.204,216.180.246.210,216.180.246.219,216.180.246.224,216.180.246.225,216.180.246.232,216.180.246.233,216.180.246.238,216.180.246.24,216.180.246.247,216.180.246.27,216.180.246.3,216.180.246.34,216.180.246.35,216.180.246.36,216.180.246.4,216.180.246.40,216.180.246.44,216.180.246.45,216.180.246.46,216.180.246.48,216.180.246.51,216.180.246.52,216.180.246.60,216.180.246.61,216.180.246.68] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 289"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403588; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!