User Tools

Site Tools


pfsense:suricata:alerts:et_cins_active_threat_intelligence_poor_reputation_ip

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
pfsense:suricata:alerts:et_cins_active_threat_intelligence_poor_reputation_ip [2020/03/01 18:04] – removed peterpfsense:suricata:alerts:et_cins_active_threat_intelligence_poor_reputation_ip [2021/01/15 00:36] (current) – created peter
Line 1: Line 1:
 +====== PFSense - Suricata - Alerts - ET CINS Active Threat Intelligence Poor Reputation IP ======
 +
 +**CINS** (Collective Intelligence Network Security), can identify several classes of **bad** IP addresses.
 +
 +CINS is a network of **sentinel** hosts running around the internet that allow a company to monitor attacks leveraged against them and score them appropriately.
 +
 +Rulesets:
 +
 +  * emerging-botcc.portgrouped.rules
 +  * emerging-botcc.rules emerging-ciarmy.rules
 +  * emerging-exploit.rules emerging-malware.rules
 +  * emerging-mobile_malware.rules
 +  * emerging-shellcode.rules
 +  * emerging-trojan.rules
 +  * emerging-web_server.rules
 +  * emerging-web_specific_apps.rules
 +  * emerging-worm.rules
 +
 +
 +----
 +
 +===== References =====
 +
 +https://cinsarmy.com/active-threat-intelligence/
 +
 +
  
pfsense/suricata/alerts/et_cins_active_threat_intelligence_poor_reputation_ip.1583085847.txt.gz · Last modified: 2020/07/15 09:30 (external edit)

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki