ET CINS Active Threat Intelligence Poor Reputation IP group 5
alert ip [4.148.240.211,4.148.2.6,4.148.8.240,4.148.9.100,4.148.9.22,4.148.9.28,4.148.9.63,4.148.9.66,4.148.9.74,4.148.9.80,4.150.186.72,4.150.189.129,4.150.189.16,4.150.191.40,4.150.191.65,4.150.192.58,4.150.193.1,4.150.194.112,4.150.200.157,4.150.201.114,4.150.202.145,4.150.202.179,4.150.202.90,4.193.110.174,4.210.177.129,4.227.154.187,4.227.177.119,4.227.180.232,4.227.181.13,4.227.181.72,4.236.163.160,4.236.164.253,4.246.229.67,4.249.16.120,4.249.16.164,4.249.16.167,4.249.16.233,4.249.17.100,4.249.17.106,4.249.17.158,4.249.17.167,4.249.17.182,4.249.17.190,4.249.17.214,4.249.17.74,4.249.17.9,5.101.64.6,5.101.78.146,5.104.176.168,5.130.19.23] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 5"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403304; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!