ET CINS Active Threat Intelligence Poor Reputation IP group 12
alert ip [8.216.17.90,8.216.17.97,8.216.18.14,8.216.18.144,8.216.2.104,8.216.2.109,8.216.2.110,8.216.2.147,8.216.2.17,8.216.2.191,8.216.2.25,8.216.2.27,8.216.2.28,8.216.2.69,8.216.2.81,8.216.2.9,8.216.3.1,8.216.3.102,8.216.3.138,8.216.3.153,8.216.3.19,8.216.3.2,8.216.3.203,8.216.3.204,8.216.3.212,8.216.3.215,8.216.3.29,8.216.3.51,8.216.3.60,8.216.3.62,8.216.3.84,8.216.4.100,8.216.4.113,8.216.4.13,8.216.4.132,8.216.4.143,8.216.4.147,8.216.4.162,8.216.4.187,8.216.4.19,8.216.4.212,8.216.4.24,8.216.4.241,8.216.4.247,8.216.4.250,8.216.4.35,8.216.4.60,8.216.4.64,8.216.4.67,8.216.4.78] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 12"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403311; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!