ET CINS Active Threat Intelligence Poor Reputation IP group 61
alert ip [40.80.203.123,40.80.203.124,40.80.203.148,40.80.203.168,40.80.203.201,40.80.203.218,40.80.203.224,40.80.203.4,40.80.203.60,40.80.203.75,40.80.203.87,40.80.203.98,40.80.204.149,40.80.204.175,40.80.206.136,40.80.206.215,40.80.207.25,40.84.128.138,40.90.228.34,40.90.253.210,40.90.253.56,41.135.211.230,41.142.250.82,41.162.56.37,41.184.176.185,41.193.154.57,41.198.151.121,41.198.154.76,41.198.155.34,41.198.158.231,41.208.129.84,41.208.136.235,41.214.24.161,41.214.49.100,41.222.202.170,41.226.15.209,41.242.161.75,41.25.40.194,41.25.43.89,41.38.72.211,41.63.63.211,41.64.172.51,41.65.68.75,41.65.74.21,41.73.123.152,41.77.4.1,41.83.2.120,41.90.137.153,41.96.57.133,42.236.73.172] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 61"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403360; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!