ET CINS Active Threat Intelligence Poor Reputation IP group 122
alert ip [85.173.165.172,85.196.184.183,85.198.90.129,85.217.140.1,85.217.140.10,85.217.140.11,85.217.140.12,85.217.140.13,85.217.140.15,85.217.140.16,85.217.140.18,85.217.140.19,85.217.140.2,85.217.140.20,85.217.140.22,85.217.140.23,85.217.140.24,85.217.140.25,85.217.140.26,85.217.140.27,85.217.140.28,85.217.140.29,85.217.140.3,85.217.140.30,85.217.140.31,85.217.140.32,85.217.140.33,85.217.140.34,85.217.140.35,85.217.140.36,85.217.140.37,85.217.140.39,85.217.140.4,85.217.140.40,85.217.140.41,85.217.140.42,85.217.140.43,85.217.140.44,85.217.140.45,85.217.140.46,85.217.140.47,85.217.140.48,85.217.140.49,85.217.140.5,85.217.140.50,85.217.140.51,85.217.140.52,85.217.140.53,85.217.140.54,85.217.140.6] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 122"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403421; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!