ET CINS Active Threat Intelligence Poor Reputation IP group 12
alert ip [8.216.1.79,8.216.17.90,8.216.17.97,8.216.18.107,8.216.18.144,8.216.2.109,8.216.2.110,8.216.2.147,8.216.2.17,8.216.2.191,8.216.2.28,8.216.27.202,8.216.3.138,8.216.3.150,8.216.3.153,8.216.3.165,8.216.3.19,8.216.3.2,8.216.3.201,8.216.3.204,8.216.32.107,8.216.3.212,8.216.3.215,8.216.3.3,8.216.3.36,8.216.3.37,8.216.3.51,8.216.3.62,8.216.3.63,8.216.3.84,8.216.3.87,8.216.4.104,8.216.4.105,8.216.4.124,8.216.4.127,8.216.4.132,8.216.4.147,8.216.4.162,8.216.4.187,8.216.4.19,8.216.4.212,8.216.4.247,8.216.4.250,8.216.4.251,8.216.4.60,8.216.4.64,8.216.4.67,8.216.4.72,8.216.4.75,8.216.4.78] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 12"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403311; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!