ET CINS Active Threat Intelligence Poor Reputation IP group 156
alert ip [112.171.30.220,112.185.130.37,112.19.183.76,112.2.202.96,112.22.50.239,112.226.216.114,112.226.216.9,112.230.101.166,112.231.49.212,112.232.128.77,112.232.136.155,112.233.240.9,112.236.95.212,112.237.14.123,112.243.4.43,112.244.59.115,112.245.189.242,112.251.41.161,112.26.117.218,112.26.117.220,112.26.5.68,112.27.173.108,112.27.230.171,112.28.104.177,112.29.109.164,112.29.82.65,112.30.72.99,112.30.85.23,112.32.220.53,112.36.140.41,112.37.158.253,112.50.160.171,112.50.168.37,112.5.132.163,112.5.1.36,112.5.95.229,112.51.100.141,112.51.27.81,112.52.49.22,112.6.212.233,112.6.75.202,112.72.226.212,112.81.90.243,112.85.183.236,112.86.165.105,112.9.183.24,112.94.252.104,112.94.252.127,112.94.252.149,112.94.252.180] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 156"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403455; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!