ET CINS Active Threat Intelligence Poor Reputation IP group 167
alert ip [121.29.149.105,121.29.149.12,121.29.149.134,121.29.149.147,121.29.149.156,121.29.149.181,121.29.149.201,121.29.149.228,121.29.149.229,121.29.149.230,121.29.149.24,121.29.149.248,121.29.149.252,121.29.149.3,121.29.149.4,121.29.149.61,121.29.149.73,121.29.80.240,121.29.84.112,121.29.84.139,121.29.84.149,121.29.84.161,121.29.84.18,121.29.84.202,121.29.84.34,121.29.84.67,121.29.85.145,121.29.85.245,121.31.69.42,121.31.98.85,121.33.232.133,121.40.102.12,121.40.126.115,121.40.20.65,121.40.237.160,121.40.50.132,121.42.150.233,121.43.109.168,121.43.178.245,121.56.181.47,121.56.58.160,121.57.157.10,121.66.32.26,121.78.158.71,122.117.107.83,122.117.208.31,122.140.245.106,122.14.154.237,122.141.174.11,122.156.214.54] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 167"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403466; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!