ET CINS Active Threat Intelligence Poor Reputation IP group 118
alert ip [85.217.140.34,85.217.140.35,85.217.140.36,85.217.140.37,85.217.140.39,85.217.140.40,85.217.140.41,85.217.140.42,85.217.140.44,85.217.140.46,85.217.140.47,85.217.140.48,85.217.140.49,85.217.140.50,85.217.140.51,85.217.140.52,85.217.140.6,85.217.140.8,85.217.140.9,85.217.149.37,85.217.149.73,85.217.149.74,85.223.102.156,85.238.106.87,85.239.149.72,85.239.151.10,85.239.151.34,85.239.245.161,85.248.223.2,85.29.137.56,85.54.125.14,85.69.108.198,85.85.41.54,85.87.133.76,85.95.185.233,86.100.141.84,86.1.2.218,86.111.69.60,86.120.130.117,86.126.173.236,86.127.229.145,86.163.93.64,86.165.134.73,86.169.74.253,86.174.240.140,86.176.57.5,86.194.235.242,86.201.41.21,86.203.25.58,86.208.6.114] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 118"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403417; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!