ET CINS Active Threat Intelligence Poor Reputation IP group 126
alert ip [85.217.149.54,85.217.149.55,85.217.149.56,85.217.149.57,85.217.149.58,85.217.149.59,85.217.149.60,85.217.149.61,85.217.149.63,85.217.149.64,85.217.149.66,85.217.149.67,85.217.149.70,85.217.149.71,85.217.149.72,85.217.149.73,85.239.149.76,85.239.151.10,85.239.245.161,85.29.137.56,85.50.237.145,86.122.30.62,86.134.255.90,86.149.146.18,86.153.84.25,86.174.240.140,86.185.124.72,86.201.41.21,86.202.7.53,86.205.184.177,86.210.80.9,86.216.209.115,86.219.211.85,86.223.236.191,86.242.146.166,86.247.171.126,86.247.50.106,86.248.89.33,86.45.8.181,86.46.69.95,86.54.31.32,86.54.31.36,86.54.31.38,86.54.31.40,86.54.31.44,86.83.69.19,86.93.196.42,87.106.134.4,87.120.104.29,87.120.104.79] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 126"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403425; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!