ET CINS Active Threat Intelligence Poor Reputation IP group 159
alert ip [115.214.201.101,115.215.9.152,115.217.188.198,115.222.234.223,115.231.10.226,115.231.206.90,115.231.78.10,115.231.78.11,115.231.78.3,115.236.88.242,115.239.70.246,115.244.25.226,115.28.198.131,115.29.34.90,115.36.149.107,115.59.7.95,115.70.99.0,115.74.26.91,115.96.241.140,115.96.243.198,115.97.255.48,116.1.148.95,116.1.61.1,116.112.3.74,116.114.222.55,116.114.28.190,116.114.8.42,116.116.85.31,116.118.9.41,116.131.154.154,116.147.109.190,116.167.92.144,116.168.104.85,116.176.119.167,116.176.120.174,116.176.123.156,116.176.32.67,116.20.160.144,116.211.233.6,116.22.48.55,116.231.241.142,116.232.95.238,116.233.133.228,116.233.149.254,116.235.165.94,116.235.51.189,116.237.229.60,116.237.230.145,116.237.7.173,116.237.72.190] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 159"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403458; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!