ET CINS Active Threat Intelligence Poor Reputation IP group 167
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedSeptember 1, 2026
Classificationmisc-attack
alert ip [138.185.159.103,138.185.186.43,138.185.23.103,138.186.175.18,138.186.240.164,138.186.31.44,138.197.137.57,138.197.139.135,138.197.143.176,138.197.146.59,138.197.15.182,138.197.155.203,138.197.16.14,138.197.164.151,138.197.17.19,138.197.173.137,138.197.174.71,138.197.196.239,138.197.206.208,138.197.211.94,138.197.218.217,138.197.221.54,138.197.222.233,138.197.24.249,138.197.28.52,138.2.102.66,138.2.111.195,138.2.225.106,138.2.229.45,138.204.211.3,138.204.211.66,138.204.24.116,138.204.46.157,138.204.82.94,138.219.112.68,138.219.54.1,138.226.239.10,138.226.239.11,138.226.239.12,138.246.253.137,138.246.253.7,138.252.31.30,138.255.122.43,138.255.186.122,138.255.26.106,138.36.133.100,138.36.241.211,138.36.35.25,138.36.57.205,138.36.57.240] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 167"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403466; rev:111413; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_09_01;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_09_01
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!