ET CINS Active Threat Intelligence Poor Reputation IP group 172
alert ip [137.184.95.216,137.184.99.239,138.0.1.152,138.0.64.174,138.117.119.145,138.117.84.28,138.118.41.121,138.121.252.23,138.121.253.141,138.121.41.167,138.121.93.131,138.122.150.107,138.122.221.50,138.185.131.228,138.185.155.57,138.185.185.148,138.185.185.235,138.185.203.3,138.185.23.103,138.186.175.18,138.197.137.57,138.197.143.176,138.197.154.61,138.197.155.203,138.197.16.14,138.197.173.138,138.197.174.62,138.197.174.71,138.197.196.239,138.197.200.125,138.197.206.208,138.197.218.217,138.197.221.54,138.197.222.233,138.197.28.52,138.197.38.228,138.197.97.65,138.2.102.66,138.2.111.195,138.2.117.3,138.204.211.159,138.204.25.30,138.204.26.10,138.219.112.68,138.219.115.122,138.219.49.184,138.219.54.185,138.219.54.195,138.219.9.37,138.226.239.10] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 172"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403471; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!