ET CINS Active Threat Intelligence Poor Reputation IP group 24
alert ip [20.168.127.104,20.168.127.116,20.168.127.122,20.168.127.123,20.168.127.148,20.168.127.149,20.168.127.155,20.168.127.99,20.168.14.25,20.168.5.218,20.168.5.222,20.168.5.245,20.168.5.42,20.168.6.14,20.168.6.210,20.168.6.22,20.168.6.240,20.168.6.241,20.168.6.79,20.168.6.84,20.168.6.85,20.168.6.88,20.168.7.10,20.168.7.106,20.168.7.107,20.168.7.11,20.168.7.129,20.168.7.136,20.168.7.148,20.168.7.149,20.168.7.168,20.168.7.169,20.168.7.2,20.168.7.20,20.168.7.21,20.168.7.214,20.168.7.236,20.168.7.25,20.168.7.3,20.168.7.42,20.168.7.56,20.168.7.87,20.169.104.111,20.169.104.121,20.169.104.180,20.169.104.253,20.169.104.255,20.169.104.27,20.169.104.49,20.169.105.134] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 24"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403323; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!