ET CINS Active Threat Intelligence Poor Reputation IP group 167
alert ip [125.75.84.18,125.76.71.210,125.78.32.238,125.80.197.165,125.92.253.74,125.99.184.235,128.1.34.69,128.1.44.38,128.1.46.183,128.14.225.253,128.14.227.52,128.14.229.76,128.14.233.253,128.14.236.128,128.14.236.30,128.14.236.41,128.14.237.120,128.14.237.130,128.14.239.217,128.14.239.38,128.199.227.245,128.199.255.180,128.201.0.221,128.201.117.246,128.201.156.66,128.201.158.225,128.201.160.37,128.201.198.23,128.201.35.209,128.201.78.18,129.150.35.139,129.213.151.234,129.222.107.170,129.222.1.205,129.222.201.185,129.222.201.195,129.222.247.134,129.222.96.13,129.222.96.50,130.131.161.245,130.131.162.1,130.215.174.139,130.49.185.171,131.0.188.115,131.0.190.3,131.0.205.116,131.0.31.95,131.0.51.237,131.0.64.222,131.0.66.7] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 167"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403466; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!