ET CINS Active Threat Intelligence Poor Reputation IP group 189
alert ip [138.68.237.0,138.68.237.222,138.68.243.18,138.68.248.32,138.68.41.10,138.68.41.152,138.68.47.236,138.68.56.181,138.68.70.132,138.68.7.90,138.68.84.81,138.68.9.158,138.68.93.37,138.68.9.82,138.84.45.204,138.91.105.36,138.91.107.7,138.94.179.252,138.94.30.194,138.94.45.149,138.97.230.76,138.97.35.15,138.97.6.96,138.99.81.6,139.135.192.35,139.144.235.132,139.144.239.72,139.144.239.98,139.155.205.24,139.162.108.64,139.162.113.212,139.162.116.22,139.162.117.40,139.162.120.104,139.162.148.85,139.162.154.211,139.162.156.169,139.162.156.52,139.162.167.193,139.162.195.202,139.162.35.13,139.162.70.53,139.162.78.6,139.162.88.198,139.170.72.150,139.170.72.251,139.170.72.30,139.170.72.38,139.170.72.88,139.170.73.124] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 189"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403488; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!