Alert queue
Connecting…
| Severity | Category | Source IP | Sensor | Reasoning | Received |
|---|---|---|---|---|---|
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username/password Asalem/Asalem, which constitutes a foothold on the honeypot. Per the rubric, any successful log | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using weak credentials (admin1/1234), which constitutes a foothold on the honeypot. Per tool output, no post-login comm | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using root/root@1234, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at least se | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username 'oracle' with password 'passw0rd', which constitutes a foothold on the honeypot. Per rubric, any success | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | A successful SSH login occurred using root/777777, which establishes a foothold and meets severity 4 by rubric. Tool output confirms there were no post-login co | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username 'app' with password 'root', which constitutes a foothold on the honeypot. Per the rubric, any successful | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login to the honeypot using root:vpn123. Per the rubric, any successful login constitutes a foothold and maps to severity 4 a | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using weak default-style credentials (ftp/123456). Per rubric, any successful login constitutes a foothold and maps to | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/19891228. Per the rubric, any successful login constitutes a foothold and maps to successful | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login to the honeypot using root:pornporn. Per rubric, any successful login constitutes a foothold and maps to severity 4 and | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username 'fastuser' with password '1234567890'. Per rubric, any successful login constitutes a foothold and maps | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username 'cloud' with weak credential '1234', which constitutes a foothold. Per tool output, no post-login comman | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using default-style credentials (vagrant/vagrant), which constitutes a foothold on the honeypot. Per rubric, any succes | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a confirmed successful SSH login to the honeypot using root/aA123456. Per the rubric, any successful login constitutes a foothold and maps to | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/Ab123456. Per the rubric, any successful login constitutes a foothold and maps to successful | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a confirmed successful SSH login using credentials trader/trader123. Per rubric, any successful login constitutes a foothold and maps to succe | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username/password newuser:newuser, which constitutes a foothold on the honeypot. Per the rubric, any successful l | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/qq123456. Per the rubric, any successful login constitutes a foothold and maps to severity 4 | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/ch123456. Per rubric, any successful login constitutes a foothold and maps to successful_int | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using the credential pair student/student. Per rubric, any successful login constitutes a foothold and maps to successf | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using credentials test/test1234, which establishes a foothold and meets the severity-4 threshold. Per command retrieval | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a confirmed successful SSH login using root with password authentication. Per rubric, any successful login constitutes a foothold and maps to | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session achieved a successful SSH login using username 'rdpuser' with weak credentials ('123'). Per rubric, any successful login constitutes a foothold and | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a successful SSH login using username 'rocky' with password '1234'. Per rubric, any successful login constitutes a foothold and maps to severi | |
| S4 | successful_intrusion | 77.239.124.157 | hp-use-01 | The session shows a confirmed successful SSH login using credential pair web/web123. Per rubric, any successful login constitutes a foothold and maps to success |