ET CINS Active Threat Intelligence Poor Reputation IP group 139
alert ip [103.158.11.135,103.159.199.10,103.159.51.70,103.161.207.6,103.163.230.134,103.165.118.219,103.165.119.2,103.165.163.44,103.166.231.239,103.179.248.75,103.182.45.75,103.187.91.2,103.19.109.28,103.192.157.50,103.200.23.192,103.20.223.41,103.203.57.13,103.203.57.17,103.203.57.22,103.203.57.24,103.203.57.27,103.203.57.28,103.203.57.4,103.203.58.1,103.203.58.3,103.204.209.129,103.208.104.9,103.214.5.133,103.215.187.128,103.217.191.237,103.221.140.22,103.233.252.166,103.234.62.108,103.234.62.109,103.234.62.112,103.234.62.12,103.234.62.123,103.234.62.20,103.234.62.27,103.234.62.3,103.234.62.31,103.234.62.32,103.234.62.36,103.234.62.40,103.234.62.47,103.234.62.55,103.234.62.57,103.234.62.58,103.234.62.6,103.234.62.68] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 139"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403438; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!