ET CINS Active Threat Intelligence Poor Reputation IP group 5
alert ip [4.148.8.240,4.148.9.100,4.148.9.22,4.148.9.28,4.148.9.63,4.148.9.66,4.148.9.74,4.148.9.80,4.150.186.72,4.150.189.129,4.150.189.16,4.150.191.40,4.150.191.65,4.150.192.58,4.150.193.1,4.150.194.112,4.150.200.157,4.150.201.114,4.150.202.145,4.150.202.179,4.150.202.90,4.213.169.8,4.227.154.187,4.227.180.163,4.227.180.172,4.227.181.81,4.236.163.160,4.236.164.253,4.249.16.120,4.249.16.164,4.249.16.167,4.249.16.233,4.249.16.83,4.249.17.100,4.249.17.106,4.249.17.150,4.249.17.158,4.249.17.165,4.249.17.167,4.249.17.182,4.249.17.190,4.249.17.214,4.249.17.74,4.249.17.77,4.249.17.9,5.1.0.198,5.101.78.146,5.104.176.168,5.130.19.23,5.133.168.15] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 5"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403304; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!