iSID Analyst Knowledge Base

Definitions, and additional context on iSID alerts along with helpful recommendations

Category: Cyber Attack

( 538 Alerts)

Crypto Miner: [ 192.95.30.210 ]

This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.

Crypto Miner: [ 139.99.8.158 ]

This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.

Crypto Miner: [ 139.99.8.222 ]

This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.

Crypto Miner: [ 120.25.135.174 ]

This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.

Crypto Miner: [ 149.56.26.221 ]

This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.

Crypto Miner: [ 158.69.246.183 ]

This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.

Crypto Miner: [ 60.205.128.115 ]

This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.

Crypto Miner: [ 217.182.138.167 ]

This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.

SERVER-WEBAPP Cisco IOS HTTP server denial of service attempt

detects attempts to exploit a denial-of-service (DoS) vulnerability in the Cisco IOS HTTP server. The rule looks for specific content patterns in the HTTP URI that may indicate a DoS attack against the server.

FILE-MULTIMEDIA RealNetworks RealPlayer mpeg width integer memory underflow attempt

detects attempts to exploit a memory underflow vulnerability in RealNetworks RealPlayer when processing MPEG video files. The rule looks for specific content patterns in the TCP payload that may indicate an attempt to exploit the vulnerability.