| Mining Pool Communication | Contacts with addresses on threat-intelligence lists (contacts) | 1 in 10 min | 10 in 1 h | 100 in 1 h |
| Blockchain Node Scanning | Distinct targets on the service's ports (targets) | 100 in 5 min | 1,000 in 10 min | 5,000 in 30 min |
| Cryptocurrency Service Scanning | Distinct targets on the service's ports (targets) | 100 in 5 min | 1,000 in 10 min | 5,000 in 30 min |
| Wallet Service Scanning | Distinct targets on the service's ports (targets) | 100 in 5 min | 1,000 in 10 min | 5,000 in 30 min |
| Mining Pool Activity | Contacts with addresses on threat-intelligence lists (contacts) | 1 in 10 min | 10 in 1 h | 100 in 1 h |
| Crypto Botnet Activity | Contacts with addresses on threat-intelligence lists (contacts) | 1 in 10 min | 10 in 1 h | 100 in 1 h |
| Crypto Infrastructure Communication | Contacts with addresses on threat-intelligence lists (contacts) | 1 in 10 min | 10 in 1 h | 100 in 1 h |