ET CINS Active Threat Intelligence Poor Reputation IP group 23
alert ip [20.168.10.200,20.168.10.241,20.168.10.246,20.168.10.73,20.168.11.102,20.168.11.106,20.168.11.116,20.168.11.133,20.168.11.140,20.168.112.88,20.168.113.187,20.168.11.35,20.168.115.240,20.168.115.244,20.168.115.255,20.168.11.58,20.168.116.119,20.168.116.127,20.168.116.148,20.168.116.228,20.168.116.231,20.168.116.242,20.168.116.248,20.168.116.252,20.168.116.28,20.168.116.9,20.168.117.0,20.168.117.19,20.168.117.20,20.168.117.53,20.168.11.76,20.168.117.71,20.168.117.73,20.168.117.89,20.168.11.83,20.168.120.124,20.168.120.154,20.168.121.228,20.168.122.55,20.168.123.121,20.168.123.228,20.168.123.252,20.168.124.105,20.168.124.107,20.168.124.240,20.168.124.252,20.168.124.5,20.168.125.167,20.168.125.171,20.168.125.175] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 23"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403322; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!