ET CINS Active Threat Intelligence Poor Reputation IP group 178
alert ip [138.68.143.68,138.68.15.6,138.68.174.90,138.68.226.103,138.68.237.131,138.68.245.142,138.68.247.166,138.68.247.43,138.68.255.12,138.68.3.196,138.68.46.111,138.68.53.28,138.68.60.114,138.68.60.217,138.68.63.214,138.68.67.252,138.84.34.34,138.84.54.120,138.84.63.230,138.88.246.212,138.94.107.151,138.94.138.93,138.94.165.218,138.94.168.30,138.94.39.239,138.94.7.68,138.97.119.187,138.97.147.33,138.97.228.149,138.97.235.83,138.99.189.221,138.99.189.238,138.99.189.76,138.99.240.34,138.99.56.235,138.99.57.141,139.144.235.132,139.144.239.185,139.144.239.72,139.144.239.74,139.144.239.78,139.144.239.98,139.162.113.212,139.162.116.22,139.162.117.40,139.162.120.104,139.162.130.100,139.162.154.211,139.162.167.193,139.162.191.192] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 178"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403477; rev:111317; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_08_28;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_08_28
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!