Vendor
high
advisory
OpenCanary SSH Connection Attempt
2 rules 1 TTPAn SSH connection attempt to an OpenCanary node indicates a potential adversary probing for vulnerable services or attempting unauthorized access within a network.
OpenCanary
honeypot
ssh
reconnaissance
2r
1t
high
advisory
OpenCanary SSH Login Attempt Detection
2 rules 1 TTPDetects instances where an SSH service on an OpenCanary node has had a login attempt, indicating potential reconnaissance, privilege escalation, or lateral movement.
OpenCanary
honeypot
ssh
initial-access
2r
1t