ET CINS Active Threat Intelligence Poor Reputation IP group 128
alert ip [81.19.219.194,81.19.219.197,81.19.219.203,81.19.219.204,81.19.219.205,81.19.219.207,81.19.219.210,81.19.219.212,81.19.219.213,81.19.219.214,81.19.219.215,81.19.219.216,81.19.219.217,81.19.219.220,81.19.219.222,81.19.219.224,81.19.219.225,81.19.219.226,81.19.219.227,81.19.219.228,81.19.219.230,81.19.219.231,81.19.219.234,81.19.219.235,81.19.219.236,81.19.219.237,81.19.219.239,81.19.219.240,81.19.219.241,81.19.219.242,81.19.219.250,81.19.219.251,81.19.219.252,81.19.219.254,81.191.204.27,81.192.53.131,81.215.2.169,81.230.148.181,81.232.168.220,81.36.21.30,81.51.135.225,81.51.209.178,81.51.232.23,81.65.67.153,81.65.71.38,81.68.179.56,81.69.43.221,81.70.194.80,81.70.2.239,81.70.42.154] any -> $HOME_NET any (msg:"ET CINS Active Threat Intelligence Poor Reputation IP group 128"; reference:url,www.cinsscore.com ; threshold:type limit, track by_src, seconds 3600, count 1 ; classtype:misc-attack; sid:2403427; rev:110264; metadata:affected_product Any, attack_target Any, deployment Perimeter, tag CINS, signature_severity Major, created_at 2013_10_08, updated_at 2026_07_15;)
References
Metadata
affected productAny
attack targetAny
deploymentPerimeter
tagCINS
signature severityMajor
created at2013_10_08
updated at2026_07_15
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!