ET CINS Active Threat Intelligence Poor Reputation IP group 166
alert ip [120.36.138.154,120.37.99.90,120.38.13.104,120.48.100.73,120.48.20.147,120.48.22.219,120.55.59.135,120.7.166.34,120.77.210.41,120.77.238.126,120.78.78.20,120.79.178.220,120.79.196.142,120.8.146.204,120.8.166.251,120.84.224.27,120.92.120.15,121.11.239.251,121.121.121.43,121.121.60.201,121.122.86.115,121.137.110.87,121.140.78.173,121.14.17.55,121.144.235.164,121.16.53.162,121.164.144.172,121.168.60.5,121.170.200.240,121.17.207.180,121.177.203.140,121.190.30.216,121.196.27.240,121.197.14.82,121.199.34.107,121.204.208.117,121.205.3.175,121.207.148.116,121.207.165.170,121.22.32.254,121.230.39.184,121.231.54.190,121.235.249.94,121.236.104.24,121.236.53.238,121.237.245.145,121.25.213.162,121.254.113.5,121.27.243.100,121.29.149.10] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 166"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403465; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!