ET CINS Active Threat Intelligence Poor Reputation IP group 25
alert ip [20.163.56.242,20.163.57.12,20.163.57.252,20.163.58.130,20.163.58.219,20.163.58.248,20.163.59.12,20.163.59.2,20.163.59.21,20.163.59.28,20.163.59.59,20.163.59.80,20.163.59.88,20.163.9.212,20.168.10.169,20.168.10.186,20.168.10.200,20.168.10.236,20.168.10.241,20.168.10.246,20.168.10.73,20.168.11.102,20.168.11.106,20.168.11.116,20.168.11.133,20.168.11.140,20.168.112.88,20.168.113.187,20.168.11.35,20.168.115.240,20.168.115.244,20.168.115.255,20.168.11.58,20.168.116.119,20.168.116.127,20.168.116.148,20.168.116.228,20.168.116.231,20.168.116.242,20.168.116.248,20.168.116.252,20.168.116.28,20.168.116.9,20.168.117.0,20.168.117.19,20.168.117.20,20.168.117.5,20.168.117.53,20.168.11.76,20.168.117.71] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 25"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403324; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!