ET CINS Active Threat Intelligence Poor Reputation IP group 131
alert ip [85.217.140.53,85.217.140.54,85.217.140.6,85.217.140.7,85.217.140.8,85.217.140.9,85.217.149.25,85.217.149.26,85.217.149.38,85.217.149.39,85.217.149.40,85.217.149.41,85.217.149.42,85.217.149.43,85.217.149.44,85.217.149.45,85.217.149.46,85.217.149.47,85.217.149.48,85.217.149.49,85.217.149.50,85.217.149.51,85.217.149.52,85.217.149.53,85.217.149.54,85.217.149.55,85.217.149.56,85.217.149.57,85.217.149.58,85.217.149.59,85.217.149.60,85.217.149.61,85.217.149.62,85.217.149.63,85.217.149.64,85.217.149.65,85.217.149.66,85.217.149.67,85.217.149.68,85.217.149.69,85.217.149.70,85.217.149.71,85.217.149.72,85.217.149.73,85.217.149.74,85.239.151.34,85.50.194.51,85.96.242.57,86.1.248.183,86.111.85.226] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 131"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403430; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!