ET CINS Active Threat Intelligence Poor Reputation IP group 54
alert ip [40.124.168.156,40.124.168.253,40.124.169.38,40.124.171.173,40.124.171.82,40.124.172.100,40.124.172.146,40.124.172.38,40.124.173.157,40.124.173.16,40.124.173.160,40.124.173.185,40.124.173.2,40.124.173.206,40.124.173.234,40.124.173.235,40.124.173.251,40.124.173.31,40.124.173.6,40.124.173.7,40.124.173.90,40.124.174.133,40.124.174.148,40.124.174.155,40.124.174.167,40.124.174.187,40.124.174.199,40.124.174.207,40.124.174.209,40.124.174.247,40.124.174.73,40.124.175.131,40.124.175.16,40.124.175.166,40.124.175.174,40.124.175.184,40.124.175.188,40.124.175.197,40.124.175.201,40.124.175.225,40.124.175.226,40.124.175.233,40.124.175.234,40.124.175.251,40.124.175.26,40.124.175.29,40.124.175.30,40.124.175.39,40.124.175.5,40.124.175.52] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 54"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403353; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!