All MIBs › FE-FIREEYE-MIB › alertCncHost
alertCncHost
Module: FE-FIREEYE-MIB
OID (symbolic): FE-FIREEYE-MIB::alertCncHost
OID (numeric): 1.3.6.1.4.1.25597.1.1.2.1.23
Node type: OBJECT-TYPE
Type: OCTET STRING
Access: accessible-for-notify
Description: Alert CNC host name
What is alertCncHost?
Reports the command-and-control (CnC) hostname the alert's malicious traffic was communicating with, e.g. a botnet callback domain. This is a key indicator of compromise an admin would block or investigate.
OID Breakdown
Upper-level ancestors (6 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.25597 | fireeye | FE-FIREEYE-MIB |
| 1.3.6.1.4.1.25597.1 | variables | FE-FIREEYE-MIB |
| 1.3.6.1.4.1.25597.1.1 | lms | FE-FIREEYE-MIB |
| 1.3.6.1.4.1.25597.1.1.2 | eventTable | FE-FIREEYE-MIB |
| 1.3.6.1.4.1.25597.1.1.2.1 | eventEntry | FE-FIREEYE-MIB |
| 1.3.6.1.4.1.25597.1.1.2.1.23 | alertCncHost | FE-FIREEYE-MIB |