ET CINS Active Threat Intelligence Poor Reputation IP group 172
alert ip [125.74.55.217,125.76.71.210,125.78.172.242,125.78.32.238,125.78.76.147,125.80.163.203,125.84.167.57,125.85.154.254,125.85.41.79,125.85.79.165,125.92.134.205,125.93.83.107,125.99.254.155,126.209.12.165,128.1.32.99,128.1.46.183,128.106.221.38,128.136.131.84,128.14.225.253,128.14.226.125,128.14.227.37,128.14.233.253,128.14.237.120,128.14.239.217,128.14.239.38,128.199.123.37,128.199.158.135,128.199.227.245,128.201.0.205,128.201.0.221,128.201.148.253,128.201.65.36,128.201.77.12,128.201.77.14,129.121.128.70,129.146.202.228,129.204.60.235,129.213.151.234,129.213.92.202,129.227.85.23,129.80.76.43,130.131.161.148,130.131.161.245,130.131.161.76,130.131.162.1,130.49.181.91,131.0.112.85,131.0.188.115,131.0.205.116,131.0.31.95] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 172"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403471; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!