Alert queue
Connecting…
| Severity | Category | Source IP | Sensor | Reasoning | Received |
|---|---|---|---|---|---|
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using credential worker/worker, which constitutes a foothold on the honeypot. Per the rubric, any successful login is a | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | A successful SSH login occurred using weak credentials (user/111111), which constitutes a foothold on the honeypot. Tool output confirms there were no post-logi | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a confirmed successful SSH login using username 'ubuntu' with password 'ubuntu@123'. Per the rubric, any successful login constitutes a footho | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/A123456a. Per rubric, any successful login constitutes a foothold and maps to successful_int | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | A successful SSH login occurred using the kubernetes/kubernetes credential, which establishes a foothold and meets severity 4 by rubric. Tool output shows no po | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username 'zyh' with password '123456'. Per the rubric, any successful login constitutes a foothold and maps to se | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using weak/default-style credentials (admin/111111), which constitutes a foothold on the honeypot. Per rubric, any succ | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username/password odoo14/odoo14, which constitutes a foothold on the honeypot. Per the rubric, any successful log | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using credential pair customer:redhat. Per rubric, any successful login constitutes a foothold and maps to successful_i | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using credentials doris/doris, which establishes a foothold on the honeypot. Per the rubric, any successful login is at | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using credential pair web/!QAZ2wsx, which constitutes a foothold on the honeypot. Per the rubric, any successful login | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | A successful SSH login occurred using username 'azureuser' with password '123123123', which constitutes a foothold on the honeypot. Per rubric, any successful l | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using default Raspberry Pi credentials (pi/raspberry), which constitutes a foothold on the honeypot. Per the rubric, an | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login to the honeypot using root credentials, which constitutes a foothold. Per rubric, any successful login is at least seve | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using credential pair deploy:user. Per rubric, any successful login constitutes a foothold and maps to successful_intru | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username 'ubuntu' with password '1234qwer', which constitutes a foothold on the honeypot. Per rubric, any success | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username/password dani:dani. Per rubric, any successful login constitutes a foothold and maps to successful_intru | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username 'runner' with password '1', which constitutes a foothold on the honeypot. Per rubric, any successful log | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | A successful SSH login occurred using username 'developer' with weak password '123456', which constitutes a foothold on the honeypot. Retrieved session commands | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | A successful SSH login occurred using username 'steam' with password 'steam123', which establishes a foothold on the honeypot. Per rubric, any successful login | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using credential pair Admin/Admin123. Per rubric, any successful login constitutes a foothold and maps to successful_in | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using weak/default-style credentials (sonar/123456), which constitutes a foothold. Per the rubric, any successful login | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using the username/password pair ec2-user/ec2-user, which constitutes a foothold on the honeypot. Per the rubric, any s | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using credential pair angel/angel, which establishes a foothold on the honeypot. Per the rubric, any successful login i | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using credential pair njupt080/njupt080123456. Per rubric, any successful login constitutes a foothold and maps to seve |