Alert queue
Connecting…
| Severity | Category | Source IP | Sensor | Reasoning | Received |
|---|---|---|---|---|---|
| S4 | successful_intrusion | 2.57.122.168 | hp-use-01 | The session shows a successful SSH login using weak credentials (root/123), which constitutes a foothold on the honeypot. Per rubric, any successful login is at | |
| S4 | successful_intrusion | 120.48.0.142 | hp-use-01 | The session shows a successful SSH login using root/ubuntu, which constitutes a foothold on the honeypot and maps directly to successful_intrusion. Per tool out | |
| S4 | successful_intrusion | 193.32.162.84 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/111111, which constitutes a foothold. Per rubric, any successful login is at least severity | |
| S4 | successful_intrusion | 193.32.162.84 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/!root, which constitutes a foothold. Per rubric, any successful login is at least severity 4 | |
| S4 | successful_intrusion | 50.114.172.201 | hp-use-01 | A successful SSH login occurred using root/ubuntu, which establishes a foothold on the honeypot. Per the rubric, any successful login is at least severity 4 and | |
| S4 | successful_intrusion | 117.50.119.132 | hp-use-01 | The session shows a successful SSH login using root/ubuntu, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at least sever | |
| S4 | successful_intrusion | 149.233.152.179 | hp-use-01 | A successful SSH login occurred using default Raspberry Pi credentials (pi/raspberry), which establishes a foothold and meets severity 4 by rubric. Tool output | |
| S4 | successful_intrusion | 149.233.152.179 | hp-use-01 | A successful SSH login occurred using username 'pi', which establishes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and f | |
| S4 | successful_intrusion | 157.151.29.21 | hp-use-01 | The session shows a successful SSH login using root/ubuntu, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least severity | |
| S4 | successful_intrusion | 195.178.110.217 | hp-use-01 | A successful SSH login occurred using root:1234, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and falls | |
| S4 | successful_intrusion | 195.178.110.217 | hp-use-01 | The session shows a successful SSH login to the honeypot using root:123123, which establishes a foothold and meets the severity-4 rubric. Retrieved session comm | |
| S4 | successful_intrusion | 195.178.110.217 | hp-use-01 | A successful SSH login occurred using root/111111, which establishes a foothold and meets the severity-4 rubric. Per tool output, there were no post-login comma | |
| S4 | successful_intrusion | 195.178.110.217 | hp-use-01 | A successful SSH login occurred using root/!root, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and fall | |
| S4 | successful_intrusion | 2.57.122.74 | hp-use-01 | A successful SSH login occurred using root/password1, which establishes a foothold on the honeypot. Per the rubric, any successful login is severity 4 even if n | |
| S4 | successful_intrusion | 2.57.122.74 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/1234567890. Per rubric, any successful login constitutes a foothold and maps to successful_i | |
| S4 | successful_intrusion | 101.91.114.194 | hp-use-01 | The session shows a successful SSH login using root/ubuntu, which establishes a foothold and meets the severity-4 threshold. Tool output confirms there were no | |
| S4 | successful_intrusion | 120.48.52.177 | hp-use-01 | A successful SSH login occurred using root/ubuntu, which constitutes a foothold on the honeypot and meets severity 4 by rubric. Session command retrieval shows | |
| S4 | successful_intrusion | 193.32.162.84 | hp-use-01 | A successful SSH login occurred using root/123, which constitutes a foothold on the honeypot and meets severity 4 by rubric. Post-login evidence shows no comman | |
| S4 | successful_intrusion | 193.32.162.84 | hp-use-01 | A login succeeded with root/111111, which establishes a foothold on the honeypot and meets the severity-4 rubric. Retrieved session commands show no post-login | |
| S4 | successful_intrusion | 125.82.67.84 | hp-use-01 | The session shows a successful SSH login to the honeypot using root:10101984. Per rubric, any successful login constitutes a foothold and maps to successful_int | |
| S4 | successful_intrusion | 125.82.67.84 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/130287, which constitutes a foothold. Per rubric, any successful login is severity 4 and cat | |
| S4 | successful_intrusion | 125.82.67.84 | hp-use-01 | A successful SSH login occurred using root with password 141087, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least seve | |
| S4 | successful_intrusion | 125.82.67.84 | hp-use-01 | A successful SSH login occurred using root/150989, which establishes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and fal | |
| S4 | successful_intrusion | 125.82.67.84 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/181181. Per rubric, any successful login constitutes a foothold and maps to severity 4 and c | |
| S4 | successful_intrusion | 125.82.67.84 | hp-use-01 | The session shows a confirmed successful SSH login to the honeypot using root with password authentication. Per rubric, any successful login constitutes a footh |