Product
high
advisory
OpenCanary HTTPPROXY Login Attempt Detection
2 rules 1 TTPDetection of attempted HTTP proxy use on an OpenCanary node, indicating potential reconnaissance or lateral movement by an attacker attempting to proxy another page.
OpenCanary
honeypot
httpproxy
lateral-movement
2r
1t
high
advisory
OpenCanary SSH Connection Attempt
2 rules 1 TTPAn SSH connection attempt to an OpenCanary node indicates a potential adversary probing for vulnerable services or attempting unauthorized access within a network.
OpenCanary
honeypot
ssh
reconnaissance
2r
1t
high
advisory
OpenCanary SSH Login Attempt Detection
2 rules 1 TTPDetects instances where an SSH service on an OpenCanary node has had a login attempt, indicating potential reconnaissance, privilege escalation, or lateral movement.
OpenCanary
honeypot
ssh
initial-access
2r
1t