ET CINS Active Threat Intelligence Poor Reputation IP group 173
alert ip [138.226.239.11,138.226.239.12,138.255.114.171,138.255.122.43,138.255.177.6,138.255.26.106,138.3.212.204,138.36.133.127,138.36.35.25,138.36.56.222,138.36.56.24,138.36.57.151,138.36.57.240,138.59.121.120,138.59.131.133,138.59.136.233,138.59.143.84,138.59.202.147,138.59.217.9,138.59.218.20,138.59.222.105,138.59.44.125,138.68.10.54,138.68.10.96,138.68.13.58,138.68.15.6,138.68.169.20,138.68.175.227,138.68.226.103,138.68.231.203,138.68.237.131,138.68.240.166,138.68.245.142,138.68.247.166,138.68.247.43,138.68.255.12,138.68.3.196,138.68.53.28,138.68.60.217,138.68.63.214,138.68.67.252,138.68.72.215,138.68.75.43,138.84.195.220,138.84.34.76,138.84.35.151,138.84.35.158,138.84.35.209,138.84.37.155,138.84.41.32] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 173"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403472; rev:111389; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_31;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_31
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!