ET CINS Active Threat Intelligence Poor Reputation IP group 138
alert ip [91.231.89.60,91.231.89.63,91.231.89.64,91.231.89.65,91.231.89.67,91.231.89.68,91.231.89.69,91.231.89.7,91.231.89.70,91.231.89.71,91.231.89.72,91.231.89.73,91.231.89.74,91.231.89.75,91.231.89.76,91.231.89.77,91.231.89.78,91.231.89.79,91.231.89.8,91.231.89.80,91.231.89.81,91.231.89.82,91.231.89.83,91.231.89.84,91.231.89.85,91.231.89.86,91.231.89.87,91.231.89.88,91.231.89.89,91.231.89.9,91.231.89.90,91.231.89.91,91.231.89.93,91.231.89.94,91.231.89.95,91.232.29.206,91.236.127.15,91.238.181.10,91.238.181.92,91.238.181.94,91.92.42.242,91.92.47.252,91.92.47.58,92.115.3.217,92.115.5.137,92.119.165.164,92.130.150.55,92.132.116.90,92.132.1.215,92.140.165.30] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 138"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403437; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!