Category: Cyber Attack
( 538 Alerts)Modbus – Slave Device Busy Exception Code Delay
This Snort rule is crafted to detect specific byte sequences in Modbus TCP traffic, indicating a potential protocol violation or attack scenario related to Modbus communication. If packets matching this pattern are detected in the specified threshold, an alert will be triggered.
Crypto Miner: [ 217.182.66.25 ]
This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.
Crypto Miner: [ 219.153.73.218 ]
This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.
Crypto Miner: [ 213.32.29.168 ]
This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.
Crypto Miner: [ 213.32.74.219 ]
This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.
Crypto Miner: [ 213.32.74.230 ]
This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.
Crypto Miner: [ 212.109.216.231 ]
This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.
Crypto Miner: [ 212.175.35.221 ]
This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.
Crypto Miner: [ 213.32.29.150 ]
This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.
Crypto Miner: [ 202.168.151.80 ]
This alert is triggered when a device in the monitored network is involved in cryptocurrency mining communication with the specific IP address.