Alert queue
Connecting…
| Severity | Category | Source IP | Sensor | Reasoning | Received |
|---|---|---|---|---|---|
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/toor, which constitutes a foothold. Per rubric, any successful login is at least severity 4 | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/root1234, which constitutes a foothold. Per rubric, any successful login is severity 4 and f | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/root12345. Per rubric, any successful login constitutes a foothold and maps to successful_in | |
| S4 | successful_intrusion | 45.198.224.184 | hp-use-01 | The session shows a successful SSH login using credentials root/root123. Per rubric, any successful login constitutes a foothold and maps to severity 4 with cat | |
| S4 | successful_intrusion | 101.96.212.62 | hp-use-01 | A successful SSH login occurred using root/ubuntu, which constitutes a foothold on the honeypot. Retrieved session commands show no post-login commands, downloa | |
| S4 | successful_intrusion | 117.89.254.46 | hp-use-01 | The session shows a successful SSH login using root/centos, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at least sever | |
| S4 | successful_intrusion | 36.138.78.195 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/nginx. Per rubric, any successful login constitutes a foothold and maps to successful_intrus | |
| S4 | successful_intrusion | 106.13.120.65 | hp-use-01 | A successful SSH login occurred using root/debian, which establishes a foothold and meets severity 4 by rubric. Post-login evidence shows no commands executed a | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using username 'pi' with password '123456', which constitutes a foothold on the honeypot even though no post-login commands, dow | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login using username/password parsa/parsa, which constitutes a foothold on the honeypot. Per rubric, any successful login is | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login to the Cowrie honeypot using root credentials. Per the rubric, any successful login constitutes a foothold and maps to | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login to the Cowrie honeypot using root/changemeNOW. Per rubric, any successful login constitutes a foothold and maps to succ | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using root/P@ssw0rd, which constitutes a foothold on the honeypot and meets severity 4 by rubric. Session telemetry and command | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using credential root/qaz123123, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least seve | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using the credential file:file, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least sever | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using root credentials, which by rubric is a foothold and maps to successful_intrusion. Retrieved session commands show no post- | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using root/P@55word, which establishes a foothold on the honeypot. Per the rubric, any successful login is at least severity 4 a | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login using root with password authentication, which constitutes a foothold on the honeypot. Per rubric, any successful login | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using username/password odoo16/odoo16, which constitutes a foothold on the honeypot. Per rubric, any successful login is at leas | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using the credential garcia/garcia, which establishes a foothold and meets the severity-4 threshold. Session command retrieval s | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using the credential master/master, which establishes a foothold and meets the severity-4 threshold. Post-login command retrieva | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login using credential pair oot/4545, which constitutes a foothold on the honeypot. Per rubric, any successful login is sever | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using credential pair user1/user123, which establishes a foothold on the honeypot. Per rubric, any successful login is at least | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login using credential pair core/P@ssw0rd, which constitutes a foothold on the honeypot. Per rubric, any successful login is | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using weak/default-style credentials (hadoop/123), which constitutes a foothold on the honeypot and meets severity 4 by rubric. |