ET CINS Active Threat Intelligence Poor Reputation IP group 159
alert ip [116.115.50.119,116.116.82.70,116.128.205.130,116.131.147.90,116.142.83.90,116.148.12.133,116.148.57.223,116.148.76.222,116.162.53.80,116.167.200.181,116.168.104.85,116.171.248.51,116.176.119.167,116.176.31.147,116.176.37.27,116.193.132.3,116.208.113.40,116.228.58.100,116.23.161.47,116.233.133.228,116.233.3.108,116.237.207.172,116.246.41.195,116.252.80.130,116.254.101.102,116.254.119.202,116.3.38.114,116.4.26.66,116.52.28.165,116.54.67.234,116.55.229.234,116.62.167.172,116.62.231.151,116.62.242.59,116.62.246.33,116.62.7.162,116.72.180.3,116.74.156.119,116.74.88.15,116.8.47.17,116.91.213.150,116.92.214.150,116.99.114.62,117.102.109.34,117.102.211.7,117.104.10.130,117.108.77.231,117.11.88.10,117.12.202.188,117.128.36.203] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 159"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403458; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!