ET CINS Active Threat Intelligence Poor Reputation IP group 137
alert ip [91.231.89.224,91.231.89.225,91.231.89.226,91.231.89.227,91.231.89.228,91.231.89.229,91.231.89.230,91.231.89.231,91.231.89.232,91.231.89.233,91.231.89.234,91.231.89.235,91.231.89.236,91.231.89.238,91.231.89.239,91.231.89.24,91.231.89.248,91.231.89.249,91.231.89.25,91.231.89.250,91.231.89.251,91.231.89.252,91.231.89.253,91.231.89.254,91.231.89.255,91.231.89.26,91.231.89.27,91.231.89.28,91.231.89.29,91.231.89.3,91.231.89.30,91.231.89.31,91.231.89.4,91.231.89.40,91.231.89.41,91.231.89.42,91.231.89.43,91.231.89.44,91.231.89.46,91.231.89.47,91.231.89.5,91.231.89.50,91.231.89.51,91.231.89.53,91.231.89.54,91.231.89.55,91.231.89.56,91.231.89.57,91.231.89.58,91.231.89.59] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 137"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403436; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!