Scribd Logo
Upload

Welcome to Scribd!

  • May 17

    Uploaded by

    mybooks all
    7 views7 pages
    cvb

    Copyright

    © © All Rights Reserved

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    cvb

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    7 views7 pages

    May 17

    Uploaded by

    mybooks all
    cvb

    Copyright:

    © All Rights Reserved
    Download as PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 7

    Daily reports Postilion

    Alarms - A05W063 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05W063

    Alarms - A05L020 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05L020

    Alarms - A05W067 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05W067

    Alarms - A05W068 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05W068

    Alarms - A05W069 from: 2018-05-17 to: 2018-05-17

    Alarm Risk Source Destination


    Delivery & Attack - Bruteforce Authentication - Linux/Unix 3 A05W069 0.0.0.0
    (1371 events)
    Delivery & Attack - Bruteforce Authentication - SSH (1116 events) 2 A05W069 0.0.0.0
    Delivery & Attack - Bruteforce Authentication - SSH (2 events) 1 A05W069 b03l1702
    Delivery & Attack - Bruteforce Authentication - SSH (10 events) 1 A05W069 0.0.0.0
    Delivery & Attack - Bruteforce Authentication - Multiple 1 A05W069 0.0.0.0
    login failures - HIDS reported (1 events)

    Alarms - A05W070 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05W070

    Alarms - A05L015 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05L015

    Alarms - A05L016 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05L016

    Alarms - A05L017 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05L017

    User: admin / 2018-05-18 06:59:46 Page 1 / 7


    Daily reports Postilion

    Alarms - A05L019 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05L019

    Alarms - A05W065 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05W065

    Alarms - I05W002 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for I05W002

    Alarms - I05L001 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for I05L001

    Alarms - I05L002 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for I05L002

    Alarms - I05L000 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for I05L000

    Alarms - I05W003 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for I05W003

    Alarms - A01W031 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A01W031

    Alarms - A01W024 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A01W024

    Alarms - I05W001 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for I05W001

    User: admin / 2018-05-18 06:59:46 Page 2 / 7


    Daily reports Postilion

    Alarms - A05W060 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05W060

    Alarms - A05W061 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05W061

    Alarms - A05W062 from: 2018-05-17 to: 2018-05-17

    No Alarms Found for A05W062

    Alarm events - Alarm events. Last 25 Events: from: 2018-05-17 to: 2018-05-17

    Event Name Date GMT+2:00 Source Destination Risk


    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:59:54 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:59:19 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:59:06 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:58:50 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:58:38 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:58:34 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:58:32 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:58:21 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:58:13 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:57:51 A05W069 b03l0702
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:57:47 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:56:53 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:56:51 A05W069 b03l0702
    attempt (scan).

    User: admin / 2018-05-18 06:59:46 Page 3 / 7


    Daily reports Postilion

    AlienVault HIDS: SSH insecure connection


    2018-05-17 23:56:49 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:56:19 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:56:01 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:55:51 A05W069 0.0.0.0
    attempt (scan).
    directive_event: AV Bruteforce attack, SSH
    2018-05-17 23:55:27 A05W069 0.0.0.0
    authentication attack against 0.0.0.0
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:55:10 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:54:32 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:54:30 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:54:30 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:54:28 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:54:28 A05W069 0.0.0.0
    attempt (scan).
    AlienVault HIDS: SSH insecure connection
    2018-05-17 23:54:28 A05W069 b03l0702
    attempt (scan).

    Logins - Logins. Last 25 Events: from: 2018-05-17 to: 2018-05-17

    Date
    Event Name Device IP Username Source Dest.
    GMT+2:00
    AlienVault HIDS: Special
    2018-05-17
    privileges assigned to new 10.20.20.15 Tintswalo.Mtembu A05W067 A05W067
    23:59:59
    logon
    AlienVault HIDS: Special
    2018-05-17
    privileges assigned to new 10.20.20.15 Tintswalo.Mtembu A05W067 A05W067
    23:59:59
    logon
    AlienVault HIDS: Special
    2018-05-17
    privileges assigned to new 10.20.20.15 Tintswalo.Mtembu A05W067 A05W067
    23:59:59
    logon
    AlienVault HIDS:
    2018-05-17
    Windows Network Logon 10.20.20.15 Tintswalo.Mtembu A05W060:40860 A05W067
    23:59:59
    AlienVault HIDS:
    2018-05-17
    Windows Network Logon 10.20.20.15 Tintswalo.Mtembu A05W060:40859 A05W067
    23:59:59
    AlienVault HIDS:
    2018-05-17
    Windows Network Logon 10.20.20.15 A05W060$ A05W060:40858 A05W067
    23:59:59
    AlienVault HIDS:
    2018-05-17
    Windows Network Logon 10.20.20.15 Tintswalo.Mtembu A05W060:40857 A05W067
    23:59:59
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.130 Realtime.Service I05W001 I05W001
    23:59:56
    non-business hours.

    User: admin / 2018-05-18 06:59:46 Page 4 / 7


    Daily reports Postilion

    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.
    AlienVault HIDS:
    2018-05-17
    Successful login during 197.97.220.164 Realtime.Service A05W061 A05W061
    23:59:56
    non-business hours.

    Cleartext - Cleartext. Last 25 Events: from: 2018-05-17 to: 2018-05-17

    No data available

    FTP Failed Logons - FTP Failed Logons. Last 25 Events: from: 2018-05-17 to: 2018-05-17

    No data available

    PCI - Protect Stored Data - Database Succesful Logins. Last 25 Events: from: 2018-05-17 to: 2018-05-17

    User: admin / 2018-05-18 06:59:46 Page 5 / 7


    Daily reports Postilion

    Event Name Date GMT+2:00 Source Destination Risk


    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:58 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:58 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:58 A05W060 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:58 A05W060 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:58 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:58 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:52 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:52 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:52 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:52 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:52 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:52 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:32 A05W061 A05W061
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:26 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:26 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:26 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:26 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:26 A05W062 A05W062
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:24 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:24 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:24 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:24 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:24 I05W001 I05W001
    Success.

    User: admin / 2018-05-18 06:59:46 Page 6 / 7


    Daily reports Postilion

    AlienVault HIDS: MS SQL Server Logon


    2018-05-17 18:00:24 I05W001 I05W001
    Success.
    AlienVault HIDS: MS SQL Server Logon
    2018-05-17 18:00:22 A05W061 A05W061
    Success.

    Custom Security Events - Windows User Logons. Last 25 Events: from: 2018-05-17 to: 2018-05-17

    No data available

    User: admin / 2018-05-18 06:59:46 Page 7 / 7

    You might also like