ET CINS Active Threat Intelligence Poor Reputation IP group 172
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedNovember 11, 2026
Classificationmisc-attack
alert ip [121.200.244.101,121.205.53.217,121.22.32.254,121.229.172.243,121.232.178.121,121.29.149.126,121.29.149.166,121.29.149.167,121.29.149.169,121.29.149.201,121.29.149.241,121.29.149.29,121.29.149.32,121.29.149.48,121.29.149.64,121.29.149.82,121.29.149.88,121.29.80.87,121.29.84.100,121.29.84.101,121.29.84.114,121.29.84.116,121.29.84.121,121.29.84.125,121.29.84.139,121.29.84.143,121.29.84.150,121.29.84.154,121.29.84.166,121.29.84.210,121.29.84.211,121.29.84.242,121.29.84.27,121.29.84.38,121.29.84.50,121.29.84.51,121.29.84.70,121.29.84.79,121.29.84.83,121.29.84.84,121.40.237.160,121.42.150.233,121.42.179.58,121.43.60.61,121.46.230.81,121.52.232.26,122.114.28.163,122.138.251.184,122.155.165.69,122.160.119.213] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 172"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403471; rev:113109; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_11_11;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_11_11
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!