ET CINS Active Threat Intelligence Poor Reputation IP group 295
alert ip [220.197.85.129,220.197.85.141,220.197.85.148,220.197.85.151,220.197.85.155,220.197.85.156,220.197.85.166,220.197.85.170,220.197.85.173,220.197.85.186,220.197.85.194,220.197.85.219,220.197.85.220,220.197.85.221,220.197.85.224,220.197.85.226,220.197.85.24,220.197.85.246,220.197.85.249,220.197.85.250,220.197.85.31,220.197.85.39,220.197.85.6,220.197.85.67,220.197.85.68,220.197.85.8,220.197.85.80,220.200.231.111,220.202.112.106,220.202.112.120,220.202.112.125,220.202.112.138,220.202.112.142,220.202.112.147,220.202.112.161,220.202.112.163,220.202.112.166,220.202.112.176,220.202.112.182,220.202.112.188,220.202.112.190,220.202.112.192,220.202.112.194,220.202.112.198,220.202.112.199,220.202.112.20,220.202.112.204,220.202.112.213,220.202.112.225,220.202.112.234] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 295"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403594; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!