Alert queue
Connecting…
| Severity | Category | Source IP | Sensor | Reasoning | Received |
|---|---|---|---|---|---|
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A login succeeded with weak/default-style credentials (user1/123456), which meets the threshold for a foothold on the honeypot. Per tool output, no post-login c | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred for user root, which constitutes a foothold on the honeypot and meets severity 4 by rubric. Retrieved session commands show no p | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using root/124, which establishes a foothold and meets severity 4 by rubric. Tool output confirms no post-login commands or payl | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login to the Cowrie honeypot using root/19860710. Per the rubric, any successful login constitutes a foothold and maps to sev | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a confirmed successful SSH login using credential pair testuser/1q2w3e4r!. Per rubric, any successful login constitutes a foothold and maps to | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login using credential pair admin/root, which establishes a foothold on the honeypot. Per the rubric, any successful login is | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using the credential bitrix/master, which establishes a foothold and meets the severity-4 rubric. Per tool output, there were no | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using username 'zahra' with password '12345678'. Per rubric, any successful login constitutes a foothold and maps to successful_ | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using root with password 159159159, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at lea | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login using credential pair reza/reza. Per rubric, any successful login constitutes a foothold even if no post-login commands | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using weak credentials (developer/123), which constitutes a foothold on the honeypot. Per tool output, no post-login commands, d | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using username 'sam' with password '1234', which establishes a foothold on the honeypot. Per rubric, any successful login is at | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using username 'test' with password 'abc123', which establishes a foothold on the honeypot. Per rubric, any successful login is | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login using the credential pair media/media. Per rubric, any successful login constitutes a foothold and maps to successful_i | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | A successful SSH login occurred using credential deploy/user, which establishes a foothold and meets the threshold for successful_intrusion. Tooled command retr | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login using username 'claude' with password '123', which establishes a foothold on the honeypot. Per rubric, any successful l | |
| S4 | successful_intrusion | 109.160.32.78 | hp-use-01 | The session shows a successful SSH login to the Cowrie honeypot using root credentials. Per the rubric, any successful login constitutes a foothold and maps to | |
| S4 | successful_intrusion | 92.118.39.71 | hp-use-01 | A successful SSH login occurred using root/123, which establishes a foothold and meets severity 4 by rubric. Retrieved session commands show no post-login comma | |
| S4 | successful_intrusion | 195.178.110.228 | hp-use-01 | The session shows a successful SSH login using root/123123, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at least sever | |
| S4 | successful_intrusion | 195.178.110.228 | hp-use-01 | The session shows a successful SSH login using weak credentials (root/123), which constitutes a foothold on the honeypot. Per tool output, no post-login command | |
| S4 | successful_intrusion | 195.178.110.228 | hp-use-01 | A successful SSH login occurred using root/111111, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and fal | |
| S4 | successful_intrusion | 172.210.53.192 | hp-use-01 | A successful SSH login occurred using root/admin123, which constitutes a foothold on the honeypot. Retrieved session commands show no post-login commands, downl | |
| S4 | successful_intrusion | 115.190.212.50 | hp-use-01 | A successful SSH login occurred using root/ubuntu, which establishes a foothold and meets the severity-4 rubric. Session command retrieval shows no post-login c | |
| S4 | successful_intrusion | 106.12.120.171 | hp-use-01 | The session shows a successful SSH login using root/debian, which constitutes a foothold on the honeypot and maps directly to severity 4. Post-login evidence sh | |
| S4 | successful_intrusion | 112.54.142.215 | hp-use-01 | The session shows a successful SSH login using root/ubuntu, which constitutes a foothold on the honeypot and maps directly to successful_intrusion. Per the requ |