SentinelBrief

Alert queue

Connecting…

Clear
Alert queue, sorted by severity then recency
SeverityCategorySource IPSensorReasoningReceived
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/timberland. Per rubric, any successful login constitutes a foothold and maps to successful_i
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred with credential root/tito, which constitutes a foothold on the honeypot. Retrieved session commands show no post-login commands
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root/topolino, which constitutes a foothold on the honeypot. Retrieved session commands show no post-login commands, downl
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using root/tototiti, which constitutes a foothold on the honeypot. Per rubric, any successful login is severity 4 and c
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login to the Cowrie honeypot using root:totti10. Per rubric, any successful login constitutes a foothold and maps t
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using username root, which constitutes a foothold. Per rubric, any successful login is at least severit
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using root/typhon. Per rubric, any successful login constitutes a foothold and maps to successful_intrusion u
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using root/ulisse, which establishes a foothold on the honeypot. Per the rubric, any successful login is at least sever
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login to the honeypot using root/victorhugo. Per rubric, any successful login is at least a foothold (severity 4) a
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using credential pair root/viking1. Per rubric, any successful login constitutes a foothold and maps to
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using credential root/vikings. Per rubric, any successful login constitutes a foothold even if no post-login
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root:vitesse, which constitutes a foothold on the honeypot. Retrieved session commands show no post-login commands, downlo
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/voisin, which constitutes a foothold. Per rubric, any successful login is at least severity
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using credential root/vonvon. Per rubric, any successful login constitutes a foothold and maps to successful_intrusion
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed SSH login success using root/voyoux, which establishes a foothold on the honeypot. Per rubric, any successful login is at least se
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root:wallas, which establishes a foothold and meets the severity-4 threshold. Per tool output, no
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/wistiti. Per rubric, any successful login constitutes a foothold and maps to successful_intr
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login to the honeypot using root:wombat. Per rubric, any successful login constitutes a foothold and maps to severi
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root:wqazsx. Per rubric, any successful login constitutes a foothold and maps to severity 4 with
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root with password "wxcvbn,". Per rubric, any successful login constitutes a foothold even if no post-login commands, down
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root/y, which establishes a foothold on the honeypot and meets the severity-4 rubric. Retrieved session commands show no p
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using root with password authentication, which constitutes a foothold on the honeypot. Per rubric, any successful login
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using credential root/zephir, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least severit
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using credentials root/zeus. Per rubric, any successful login constitutes a foothold and maps to successful_i
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root:01. Per rubric, any successful login constitutes a foothold and maps to severity 4 with cate