ET CINS Active Threat Intelligence Poor Reputation IP group 249
alert ip [185.3.95.42,185.3.95.45,185.3.95.6,185.3.95.77,185.38.148.135,185.41.21.169,185.51.110.188,185.60.136.87,185.6.35.116,185.76.68.183,185.79.39.71,185.81.181.242,185.82.99.225,185.9.73.43,185.91.179.29,185.94.111.1,185.94.218.210,185.99.7.37,186.10.174.192,186.116.1.219,186.119.139.131,186.121.144.57,186.121.167.155,186.123.162.251,186.13.113.217,186.137.141.250,186.154.129.34,186.154.187.114,186.154.30.241,186.154.45.52,186.156.15.113,186.168.213.156,186.180.175.234,186.189.107.0,186.189.85.129,186.189.90.140,186.193.135.65,186.193.28.29,186.193.29.168,186.194.16.26,186.194.171.172,186.194.20.7,186.194.22.168,186.194.24.97,186.194.26.91,186.194.62.171,186.194.88.73,186.195.105.65,186.195.234.247,186.195.237.250] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 249"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403548; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!