Alert queue
Connecting…
| Severity | Category | Source IP | Sensor | Reasoning | Received |
|---|---|---|---|---|---|
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'root' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 45.198.224.184 | hp-use-01 | The attacker attempted to log in using the username 'root' but failed. This indicates a generic credential spraying attempt without success. | |
| S2 | brute_force | 45.198.224.184 | hp-use-01 | The attacker attempted to log in using the username 'root' but failed. This indicates a generic credential spraying attempt without success. | |
| S2 | brute_force | 135.232.201.85 | hp-use-01 | The attacker attempted to log in using the username 'root' but failed. This indicates a generic credential spraying attempt without any successful logins. | |
| S2 | brute_force | 52.190.221.86 | hp-use-01 | The attacker attempted to log in using the username 'root' but failed. This indicates a generic credential spraying attempt without success. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in using the username 'admin' but failed. This indicates a generic credential spraying attempt without any successful logins. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'admin' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S2 | brute_force | 139.19.117.130 | hp-use-01 | The attacker attempted to log in with the username 'admin' but failed twice without any successful login. This indicates a generic credential spraying attempt. | |
| S1 | scanning | 103.121.226.54 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating it was likely background noise or a probe without malicious intent. | |
| S1 | scanning | 103.121.226.28 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating it was likely background noise or a probe without malicious intent. | |
| S1 | scanning | 205.210.31.73 | hp-use-01 | The session involved no login attempts and no commands were executed, indicating it was likely background noise from a scanning tool (ZGrab). | |
| S1 | scanning | 186.60.143.199 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating background noise typical of scanning activity. | |
| S1 | scanning | 186.60.143.199 | hp-use-01 | The session did not include any login attempts or commands, indicating background noise typical of scanning activity. | |
| S1 | scanning | 93.158.90.71 | hp-use-01 | The session shows no login attempts or commands executed, indicating it is likely background noise or a probe without any malicious intent. | |
| S1 | scanning | 93.158.90.56 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating it was likely background noise or a probe without malicious intent. | |
| S1 | scanning | 93.158.90.69 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating it was likely background noise or a probe without malicious intent. | |
| S1 | scanning | 85.108.197.206 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating it was likely background noise or a probe without malicious intent. | |
| S1 | scanning | 64.89.160.135 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating background noise typical of scanning activity. | |
| S1 | scanning | 196.170.45.207 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating it was likely background noise or a probe without malicious intent. | |
| S1 | scanning | 195.96.139.143 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating it was likely background noise or a probe without malicious intent. | |
| S1 | scanning | 195.96.139.143 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating background noise typical of scanning activity. | |
| S1 | scanning | 37.52.152.125 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating background noise typical of scanning activity. | |
| S1 | scanning | 37.52.152.125 | hp-use-01 | The session did not include any login attempts or commands, indicating it was likely background noise or a scanning attempt without engagement. | |
| S1 | scanning | 187.131.168.14 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating background noise typical of scanning activity. | |
| S1 | scanning | 187.131.168.14 | hp-use-01 | The session did not involve any login attempts or commands executed, indicating it was likely background noise or a probe without malicious intent. |