ET CINS Active Threat Intelligence Poor Reputation IP group 261
alert ip [189.6.11.175,189.6.149.58,189.6.15.117,189.6.19.166,189.6.210.35,189.6.211.59,189.6.214.121,189.6.215.41,189.6.241.52,189.6.244.211,189.6.247.254,189.6.248.55,189.6.249.196,189.6.251.185,189.6.253.19,189.6.254.121,189.6.254.99,189.6.6.145,189.6.6.150,189.6.6.222,189.62.148.231,189.62.45.254,189.63.124.146,189.63.160.125,189.63.194.133,189.63.224.102,189.63.227.15,189.63.5.220,189.63.5.49,189.69.69.151,189.7.125.127,189.7.173.53,189.7.183.161,189.7.183.170,189.7.87.211,189.72.52.147,189.76.131.32,189.76.187.139,189.78.110.104,189.78.29.31,189.80.189.96,189.80.193.120,189.80.198.29,189.80.2.177,189.80.254.35,189.85.154.227,189.85.44.78,189.89.215.32,189.89.57.17,189.89.58.46] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 261"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403560; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!