ET CINS Active Threat Intelligence Poor Reputation IP group 27
alert ip [20.171.11.24,20.171.11.27,20.171.11.36,20.171.11.45,20.171.11.46,20.171.11.9,20.171.12.233,20.171.12.241,20.171.12.247,20.171.12.253,20.171.13.4,20.171.192.153,20.171.192.184,20.171.192.195,20.171.192.244,20.171.192.4,20.171.192.70,20.171.193.76,20.171.194.140,20.171.194.245,20.172.64.45,20.172.66.255,20.172.66.55,20.172.66.86,20.172.67.13,20.172.67.146,20.172.67.158,20.172.67.160,20.172.67.162,20.172.67.166,20.172.67.171,20.172.67.176,20.172.67.179,20.172.67.190,20.172.67.197,20.172.67.199,20.172.67.202,20.172.67.210,20.172.67.216,20.172.67.223,20.172.67.229,20.172.67.241,20.172.67.248,20.172.67.253,20.172.67.58,20.172.68.0,20.172.68.7,20.215.241.34,20.219.0.244,20.221.57.151] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 27"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403326; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!