Alert queue
Connecting…
| Severity | Category | Source IP | Sensor | Reasoning | Received |
|---|---|---|---|---|---|
| S4 | successful_intrusion | 114.217.53.0 | hp-use-01 | The session shows a successful SSH login using credentials root/ubuntu, which establishes a foothold on the honeypot. Per rubric, any successful login is at lea | |
| S4 | successful_intrusion | 192.42.116.108 | hp-use-01 | The session shows a successful SSH login using root/admin after one failed attempt. Per rubric, any successful login constitutes a foothold and maps to successf | |
| S4 | successful_intrusion | 165.227.227.123 | hp-use-01 | The session shows a successful SSH login using credential pair orch/orch, which establishes a foothold on the honeypot. Per rubric, any successful login is at l | |
| S4 | successful_intrusion | 165.227.227.123 | hp-use-01 | The session shows a successful SSH login using the username/password pair kubernetes/kubernetes, which establishes a foothold and meets the threshold for succes | |
| S4 | successful_intrusion | 58.209.82.167 | hp-use-01 | The session shows a successful SSH login using root/ubuntu, which establishes a foothold and meets the severity-4 threshold. Per tool output, no post-login comm | |
| S4 | successful_intrusion | 36.136.66.44 | hp-use-01 | The session shows a successful SSH login using root/admin after one failed attempt, which constitutes a foothold on the honeypot. Per the rubric, any successful | |
| S4 | successful_intrusion | 85.211.244.194 | hp-use-01 | The session shows a successful SSH login using default credentials admin/admin. Per rubric, any successful login constitutes a foothold even if no post-login co | |
| S4 | successful_intrusion | 4.4.66.82 | hp-use-01 | A successful SSH login occurred using root/ubuntu, which constitutes a foothold on the honeypot and meets severity 4 by rubric. Retrieved session commands show | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/1234. Per rubric, any successful login constitutes a foothold and maps to successful_intrusi | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/12345, which constitutes a foothold. Per rubric, any successful login is at least severity 4 | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using credential pair admin/admin1234. Per rubric, any successful login constitutes a foothold and maps to successful_i | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using username 'admin' with password 'admin12345'. Per rubric, any successful login constitutes a foothold and maps to | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using weak default-style credentials (admin/123456). Per rubric, any successful login constitutes a foothold and maps t | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session achieved a successful SSH login using weak default-style credentials (admin/1234), which constitutes a foothold on the honeypot. Per tool output, no | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using weak/default-style credentials (admin/12345). Per rubric, any successful login constitutes a foothold and maps to | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using root/admin123. Per rubric, any successful login constitutes a foothold and maps to successful_intrusion unless th | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using credential test:test from a libssh client. Per rubric, any successful login constitutes a foothold and maps to su | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using the credential user/user. Per rubric, any successful login constitutes a foothold and maps to successful_intrusio | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using root/oelinux123 from a libssh client. Per rubric, any successful login constitutes a foothold even if no post-log | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login to the honeypot using root:ubnt, which constitutes a foothold. Per the rubric, any successful login is at least severit | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session achieved a successful SSH login using default credentials (ubnt/ubnt), which constitutes a foothold on the honeypot. Per rubric, any successful logi | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using credential pair admin/admin123. Per rubric, any successful login constitutes a foothold and maps to successful_in | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using root/admin credentials, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using credential pair admin/admin1234. Per rubric, any successful login constitutes a foothold and maps to successful_i | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using admin/admin, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at least sever |