ET CINS Active Threat Intelligence Poor Reputation IP group 296
alert ip [221.11.51.26,221.11.5.50,221.11.5.52,221.11.5.60,221.11.5.62,221.11.60.148,221.130.29.85,221.131.139.70,221.131.2.2,221.131.2.5,221.131.2.7,221.132.29.17,221.133.9.25,221.14.17.239,221.146.16.46,221.15.231.105,221.180.218.82,221.180.47.59,221.182.55.143,221.193.18.32,221.195.124.50,221.195.222.18,221.199.14.242,221.199.14.243,221.199.42.158,221.2.40.78,221.203.115.242,221.203.13.138,221.203.38.3,221.206.132.69,221.210.48.10,221.212.58.242,221.215.198.42,221.224.39.154,221.224.92.218,221.226.177.66,221.226.7.130,221.227.145.41,221.227.37.33,221.228.183.30,221.229.123.26,221.230.78.236,221.235.137.18,221.236.21.55,221.238.104.67,221.3.56.38,221.6.245.103,221.6.34.34,221.7.174.120,221.8.112.126] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 296"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403595; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!