ET CINS Active Threat Intelligence Poor Reputation IP group 158
alert ip [118.26.104.78,118.26.105.116,118.26.109.7,118.26.111.94,118.26.37.105,118.27.151.78,118.42.83.185,118.69.8.135,118.71.46.53,118.79.254.156,118.81.197.87,118.81.204.188,118.81.204.212,118.81.204.36,118.81.206.255,119.0.38.107,119.1.156.42,119.112.11.217,119.112.124.9,119.125.102.163,119.152.228.188,119.160.215.115,119.164.138.131,119.17.198.72,119.17.222.95,119.180.173.28,119.18.147.188,119.181.111.210,119.203.187.190,119.234.190.143,119.248.75.76,119.251.139.89,119.36.235.228,119.39.7.46,119.45.248.246,119.54.44.186,119.59.105.57,119.59.114.187,119.60.3.238,119.6.5.146,119.76.182.85,119.96.23.18,119.96.96.211,119.97.188.131,120.15.110.102,120.15.6.178,120.192.27.51,120.193.171.215,120.195.54.54,120.196.104.27] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 158"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403457; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!