Alert queue
Connecting…
| Severity | Category | Source IP | Sensor | Reasoning | Received |
|---|---|---|---|---|---|
| S4 | successful_intrusion | 208.104.31.154 | hp-use-01 | A successful SSH login occurred using root with password 'v02-probe'. Per rubric, any successful login constitutes a foothold and maps to successful_intrusion u | |
| S4 | successful_intrusion | 115.191.33.55 | hp-use-01 | The session shows a successful SSH login using root:ubuntu, which establishes a foothold and meets the threshold for successful_intrusion. Per command retrieval | |
| S4 | successful_intrusion | 195.178.110.217 | hp-use-01 | The session achieved a successful SSH login using root/123123, which constitutes a foothold on the honeypot. Per the rubric, any successful login is severity 4 | |
| S4 | successful_intrusion | 195.178.110.217 | hp-use-01 | A successful SSH login occurred using weak default-style credentials (root/123), which constitutes a foothold on the honeypot. Tool output confirms there were n | |
| S4 | successful_intrusion | 195.178.110.217 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/111111. Per rubric, any successful login constitutes a foothold and maps to successful_intru | |
| S4 | successful_intrusion | 27.155.92.28 | hp-use-01 | The session shows a successful SSH login using root:ubuntu, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at least sever | |
| S4 | successful_intrusion | 117.89.254.46 | hp-use-01 | The session shows a successful SSH login using root/centos, which establishes a foothold and meets severity 4 by rubric. Per command retrieval, no post-login co | |
| S4 | successful_intrusion | 92.118.39.77 | hp-use-01 | The session shows a successful SSH login to the honeypot using root:123, which constitutes a foothold. Per rubric, any successful login is at least severity 4 a | |
| S4 | successful_intrusion | 92.118.39.77 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/111111, which constitutes a foothold. Per rubric, any successful login is at least severity | |
| S4 | successful_intrusion | 92.118.39.77 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/000000, which constitutes a foothold. Per rubric, any successful login is at least severity | |
| S4 | successful_intrusion | 120.203.161.202 | hp-use-01 | A successful SSH login occurred using credentials root/ubuntu, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at least se | |
| S4 | successful_intrusion | 83.188.236.89 | hp-use-01 | The session includes a successful SSH login using root/admin after one failed attempt, which establishes a foothold on the honeypot. Per rubric, any successful | |
| S4 | successful_intrusion | 2.57.122.168 | hp-use-01 | A successful SSH login occurred using root/111111, which establishes a foothold on the honeypot and meets the rubric for severity 4. Retrieved session commands | |
| S4 | successful_intrusion | 2.57.122.168 | hp-use-01 | A successful SSH login occurred using root/000000, which establishes a foothold and meets severity 4. Per tool output, no post-login commands, downloads, or upl | |
| S4 | successful_intrusion | 182.43.19.187 | hp-use-01 | A successful SSH login occurred using root/debian, which establishes a foothold on the honeypot and meets severity 4. Retrieved session commands show no post-lo | |
| S4 | successful_intrusion | 92.118.39.77 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/111111. Per the rubric, any successful login constitutes a foothold and maps to successful_i | |
| S4 | successful_intrusion | 92.118.39.77 | hp-use-01 | A successful SSH login occurred using root/!root, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and fall | |
| S4 | successful_intrusion | 92.118.39.71 | hp-use-01 | A successful SSH login occurred using root/000000, which constitutes a foothold on the honeypot. Tool output confirms there were no post-login commands or paylo | |
| S4 | successful_intrusion | 208.104.31.154 | hp-use-01 | The session shows a successful SSH login to the Cowrie honeypot using root with password soak-t48. Per rubric, any successful login constitutes a foothold and m | |
| S4 | successful_intrusion | 193.32.162.84 | hp-use-01 | The session shows a successful SSH login to the honeypot using root:1, which constitutes a foothold. Per the rubric, any successful login is at least severity 4 | |
| S4 | successful_intrusion | 14.255.187.76 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/password, which constitutes a foothold. Per the rubric, any successful login is at least sev | |
| S4 | successful_intrusion | 14.255.187.76 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/password, which constitutes a foothold. Per rubric, any successful login is at least severit | |
| S4 | successful_intrusion | 192.42.116.50 | hp-use-01 | The session achieved a successful SSH login using root/admin after one failed attempt, which constitutes a foothold on the honeypot. Per the rubric, any success | |
| S4 | successful_intrusion | 77.239.124.213 | hp-use-01 | A successful SSH login occurred with credential pair root/ankurkudintzi, which constitutes a foothold on the honeypot. Per rubric, any successful login is sever | |
| S4 | successful_intrusion | 160.250.128.93 | hp-use-01 | The session includes a successful SSH login using root/password after one failed attempt, which constitutes a foothold on the honeypot. Per rubric, any successf |