ET CINS Active Threat Intelligence Poor Reputation IP group 164
alert ip [120.11.222.50,120.138.10.220,120.15.6.178,120.157.147.240,120.195.28.47,120.195.54.49,120.195.54.51,120.197.218.183,120.2.26.145,120.202.56.160,120.202.90.249,120.202.94.217,120.209.70.192,120.209.98.55,120.224.172.210,120.224.18.210,120.224.3.167,120.225.165.148,120.225.180.120,120.225.218.77,120.225.33.9,120.226.111.86,120.228.110.181,120.228.139.183,120.229.12.104,120.229.149.239,120.229.193.199,120.230.0.157,120.230.232.167,120.231.70.191,120.232.101.178,120.234.133.74,120.235.190.188,120.238.87.243,120.239.12.217,120.239.176.127,120.24.221.142,120.24.223.12,120.24.228.103,120.24.228.128,120.24.229.208,120.24.230.187,120.24.61.89,120.242.72.122,120.25.247.56,120.28.144.106,120.33.137.206,120.34.79.116,120.36.138.154,120.36.215.61] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 164"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403463; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!