ET CINS Active Threat Intelligence Poor Reputation IP group 296
alert ip [220.202.112.246,220.202.112.247,220.202.112.26,220.202.112.36,220.202.112.48,220.202.112.49,220.202.112.52,220.202.112.59,220.202.112.70,220.202.112.74,220.202.112.84,220.202.112.95,220.202.112.98,220.203.48.125,220.250.52.75,220.88.8.117,220.94.105.210,221.0.10.108,221.0.102.60,221.0.15.102,221.0.170.18,221.0.236.167,221.0.8.35,221.0.9.53,221.11.20.167,221.11.20.168,221.11.20.170,221.11.4.153,221.11.4.154,221.11.4.156,221.11.4.158,221.11.51.19,221.11.51.20,221.11.51.26,221.11.51.27,221.11.5.54,221.11.5.57,221.11.5.61,221.11.60.146,221.130.29.85,221.13.105.83,221.133.9.25,221.139.0.11,221.163.139.32,221.164.137.248,221.178.195.214,221.195.124.50,221.2.153.169,221.2.174.34,221.210.48.10] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 296"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403595; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!