ET CINS Active Threat Intelligence Poor Reputation IP group 258
alert ip [185.9.186.238,185.94.111.1,186.124.115.249,186.13.113.217,186.13.96.123,186.148.203.137,186.149.199.90,186.155.99.3,186.180.175.234,186.18.76.176,186.18.98.47,186.189.88.18,186.189.89.239,186.192.36.99,186.193.109.94,186.193.14.183,186.193.158.146,186.193.158.188,186.193.29.108,186.194.152.140,186.194.170.241,186.194.96.72,186.194.96.73,186.194.96.77,186.195.234.96,186.203.133.151,186.205.144.136,186.205.18.30,186.205.20.149,186.205.20.30,186.205.27.240,186.205.5.62,186.207.138.67,186.207.158.63,186.208.103.32,186.208.241.110,186.209.100.131,186.209.100.159,186.209.100.176,186.209.100.238,186.209.197.115,186.210.59.216,186.216.11.205,186.216.157.29,186.216.2.130,186.216.7.108,186.219.137.239,186.219.138.9,186.219.142.247,186.219.48.197] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 258"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403557; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!