Alert queue
Connecting…
| Severity | Category | Source IP | Sensor | Reasoning | Received |
|---|---|---|---|---|---|
| S4 | successful_intrusion | 92.118.39.71 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/1234. Per rubric, any successful login constitutes a foothold and maps to severity 4 with ca | |
| S4 | successful_intrusion | 92.118.39.71 | hp-use-01 | The session achieved a successful SSH login using root/123123, which constitutes a foothold on the honeypot. Per rubric, any successful login is severity 4 unle | |
| S4 | successful_intrusion | 92.118.39.71 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/111111, which constitutes a foothold and maps directly to severity 4. Per tool output, no po | |
| S4 | successful_intrusion | 76.90.193.3 | hp-use-01 | The session includes a successful SSH login using root/admin after one failed attempt, which constitutes a foothold on the honeypot. Per the rubric, any success | |
| S4 | successful_intrusion | 208.104.31.154 | hp-use-01 | The session shows a successful SSH login to the honeypot using root/password123. Per rubric, any successful login is at least a foothold and maps to successful_ | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'root' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 44.222.93.29 | hp-use-01 | The attacker attempted to log in using the username 'root' but failed. This indicates a generic credential spraying attempt without success. | |
| S2 | brute_force | 151.243.18.193 | hp-use-01 | The attacker attempted to log in using the username 'root' but failed. This indicates a generic credential spraying attempt without success. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'admin' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'admin' but failed twice without any successful login or further commands executed. This indicates a generic | |
| S2 | brute_force | 125.82.67.84 | hp-use-01 | The attacker attempted to log in using the username 'root' but failed. This indicates a generic credential spraying attempt without success. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in using the username 'root' but failed. This indicates a generic credential spraying attempt without success. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'root' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'root' but failed twice without any successful login or further commands executed. This indicates untargeted | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'root' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'root' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in using the username 'admin' but failed. This indicates a generic credential spraying attempt without any successful logins. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'admin' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'admin' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'admin' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'admin' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'admin' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'admin' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'admin' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'root' but failed twice without any successful login. This indicates a generic credential spraying attempt. |