ET CINS Active Threat Intelligence Poor Reputation IP group 24
alert ip [20.163.10.217,20.163.10.42,20.163.11.110,20.163.11.168,20.163.11.178,20.163.11.189,20.163.11.192,20.163.11.215,20.163.11.219,20.163.11.231,20.163.11.244,20.163.11.248,20.163.1.167,20.163.11.72,20.163.12.0,20.163.12.14,20.163.12.4,20.163.168.234,20.163.170.178,20.163.2.122,20.163.2.190,20.163.2.217,20.163.2.254,20.163.3.20,20.163.3.22,20.163.3.3,20.163.3.31,20.163.33.211,20.163.34.20,20.163.34.21,20.163.34.22,20.163.34.23,20.163.3.7,20.163.3.71,20.163.3.72,20.163.38.109,20.163.38.110,20.163.38.148,20.163.38.149,20.163.38.152,20.163.38.153,20.163.38.158,20.163.38.159,20.163.3.82,20.163.38.97,20.163.38.98,20.163.38.99,20.163.39.67,20.163.39.68,20.163.39.78] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 24"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403323; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!