Alert queue
Connecting…
| Severity | Category | Source IP | Sensor | Reasoning | Received |
|---|---|---|---|---|---|
| S4 | successful_intrusion | 2.57.122.209 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/111111. Per rubric, any successful login constitutes a foothold and maps to severity 4 and c | |
| S4 | successful_intrusion | 142.93.47.35 | hp-use-01 | The session shows a confirmed successful SSH login using credential pair arnav/Arnav@123. Per rubric, any successful login is at least a foothold and maps to su | |
| S4 | successful_intrusion | 142.93.47.35 | hp-use-01 | The session shows a successful SSH login using credential pair arjun/Arjun@123. Per the rubric, any successful login constitutes a foothold and maps to severity | |
| S4 | successful_intrusion | 121.239.173.34 | hp-use-01 | The session shows a confirmed successful SSH login using username test1, which establishes a foothold on the honeypot. Per rubric, any successful login is at le | |
| S4 | successful_intrusion | 121.239.173.34 | hp-use-01 | The session shows a successful SSH login using username 'test1' with password 'guest'. Per rubric, any successful login constitutes a foothold and maps to sever | |
| S4 | successful_intrusion | 34.62.208.98 | hp-use-01 | A successful SSH login occurred using default-looking credentials admin/admin, which establishes a foothold on the honeypot. Per rubric, any successful login is | |
| S4 | successful_intrusion | 119.97.184.93 | hp-use-01 | The session shows a successful SSH login using root/ubuntu, which constitutes a foothold on the honeypot. Per the rubric, any successful login is severity 4 eve | |
| S4 | successful_intrusion | 39.164.126.118 | hp-use-01 | The session shows a successful SSH login using root/ubuntu, which establishes a foothold and meets the severity-4 threshold. Retrieved session commands show no | |
| S4 | successful_intrusion | 2.57.122.150 | hp-use-01 | The session shows a successful SSH login to the honeypot using weak credentials (root/1234). Per rubric, any successful login constitutes a foothold and maps to | |
| S4 | successful_intrusion | 2.57.122.150 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/123123, which establishes a foothold and meets severity 4 by rubric. Retrieved session comma | |
| S4 | successful_intrusion | 2.57.122.150 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/111111, which establishes a foothold and meets the severity-4 threshold. Per tool output, no | |
| S4 | successful_intrusion | 66.116.205.1 | hp-use-01 | The session shows a successful SSH login using root/ubuntu, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least severity | |
| S4 | successful_intrusion | 34.62.164.188 | hp-use-01 | A successful SSH login occurred using admin/admin, which establishes a foothold on the honeypot and meets the severity-4 rubric. Retrieved session commands show | |
| S4 | successful_intrusion | 109.63.177.113 | hp-use-01 | A successful SSH login occurred for user root using password authentication, which constitutes a foothold on the honeypot. Per the rubric, any successful login | |
| S4 | successful_intrusion | 109.63.177.113 | hp-use-01 | A successful SSH login occurred using root/admin, which establishes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and fall | |
| S4 | successful_intrusion | 57.131.27.43 | hp-use-01 | A successful SSH login occurred using root/ubuntu, which establishes a foothold on the honeypot. Retrieved session commands show no post-login commands, downloa | |
| S4 | successful_intrusion | 92.118.39.77 | hp-use-01 | The session shows a successful SSH login using weak/default-style credentials (root/1234). Per rubric, any successful login constitutes a foothold and maps to s | |
| S4 | successful_intrusion | 92.118.39.77 | hp-use-01 | A successful SSH login occurred using root/123, which establishes a foothold and meets the severity-4 threshold. Tool output confirms no post-login commands or | |
| S4 | successful_intrusion | 92.118.39.77 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/12. Per rubric, any successful login constitutes a foothold and maps to severity 4 with cate | |
| S4 | successful_intrusion | 92.118.39.77 | hp-use-01 | The session shows a successful SSH login to the honeypot using root:1. Per rubric, any successful login constitutes a foothold and maps to successful_intrusion | |
| S4 | successful_intrusion | 195.178.110.227 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/123321. Per rubric, any successful login constitutes a foothold and maps to successful_intru | |
| S4 | successful_intrusion | 195.178.110.227 | hp-use-01 | A successful SSH login occurred using root/123123, which establishes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and fal | |
| S4 | successful_intrusion | 195.178.110.227 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/111111. Per the rubric, any successful login constitutes a foothold and maps to severity 4 w | |
| S4 | successful_intrusion | 195.178.110.227 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/!root. Per rubric, any successful login constitutes a foothold and maps to successful_intrus | |
| S4 | successful_intrusion | 34.34.184.149 | hp-use-01 | The session shows a successful SSH login using admin/admin, which by rubric is a foothold and maps to severity 4. Retrieved session commands show no post-login |