ET CINS Active Threat Intelligence Poor Reputation IP group 182

7.0.35.0SID: 2403481Rev: 110288EnabledDerived8 views
History
Sourceet/open
Fileciarmy.rules
CreatedOctober 8, 2013
UpdatedJuly 16, 2026
Classificationmisc-attack
alert ip [138.68.27.98,138.68.41.10,138.68.41.152,138.68.42.188,138.68.47.236,138.68.56.181,138.68.60.89,138.68.70.132,138.68.7.90,138.68.9.158,138.84.41.175,138.84.41.245,138.84.53.162,138.91.107.7,138.91.109.125,138.94.138.91,138.94.164.72,138.94.165.219,138.94.171.67,138.94.179.252,138.94.58.182,138.97.124.97,138.97.189.124,138.97.27.146,138.97.35.24,138.97.68.154,138.99.207.170,138.99.51.119,139.144.235.132,139.144.239.72,139.144.239.98,139.155.205.24,139.162.113.212,139.162.116.22,139.162.120.104,139.162.141.152,139.162.195.202,139.162.41.27,139.162.70.53,139.162.79.141,139.162.88.198,139.170.72.145,139.170.72.164,139.170.72.206,139.170.72.215,139.170.72.246,139.170.72.70,139.170.72.88,139.170.72.90,139.170.73.110] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 182"; reference:url,www.cinsscore.com; threshold:type limit, track by_src, seconds 3600, count 1; classtype:misc-attack; sid:2403481; rev:110288; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_16;)

References

Metadata

affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!