ET CINS Active Threat Intelligence Poor Reputation IP group 27
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [20.29.58.11,20.29.59.15,20.29.59.58,20.29.74.198,20.38.34.132,20.38.34.153,20.38.35.115,20.38.35.126,20.38.35.148,20.38.35.165,20.38.35.171,20.38.35.175,20.38.35.178,20.38.35.186,20.38.35.88,20.40.213.118,20.40.214.159,20.40.218.159,20.40.220.110,20.40.220.198,20.40.220.48,20.40.233.112,20.40.233.165,20.40.233.168,20.40.233.173,20.40.251.169,20.40.251.228,20.40.251.254,20.40.252.132,20.40.252.29,20.42.110.118,20.42.116.42,20.42.57.189,20.46.228.204,20.46.228.216,20.46.228.245,20.46.235.237,20.46.235.243,20.46.236.0,20.46.242.228,20.46.243.18,20.46.243.5,20.46.248.3,20.46.254.118,20.46.254.238,20.46.254.53,20.46.254.79,20.46.255.49,20.46.255.57,20.51.187.246] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 27"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403326; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!