64898b2c79
Some checks failed
Code scanning / CodeQL (push) Failing after 15s
Zulip production suite / Ubuntu 22.04 production build (push) Failing after 26s
Zulip production suite / Debian 12 production install with custom db name and user (push) Has been skipped
Zulip production suite / Ubuntu 22.04 production install and PostgreSQL upgrade with pgroonga (push) Has been skipped
Zulip production suite / Ubuntu 24.04 production install (push) Has been skipped
Zulip production suite / Ubuntu 26.04 production install (push) Has been skipped
Zulip production suite / Debian 13 production install (push) Has been skipped
Zulip production suite / 7.0 Version Upgrade (push) Has been skipped
Zulip production suite / 8.0 Version Upgrade (push) Has been skipped
Zulip production suite / 6.0 Version Upgrade (push) Has been skipped
Zulip production suite / 10.0 Version Upgrade (push) Has been skipped
Zulip production suite / 9.0 Version Upgrade (push) Has been skipped
Zulip production suite / 12.0 Version Upgrade (push) Has been skipped
Zulip production suite / 11.0 Version Upgrade (push) Has been skipped
GitHub Actions Security Analysis with zizmor / zizmor (push) Failing after 3s
Zulip CI / Debian 12 (Python 3.11, backend + documentation) (push) Failing after 26s
Zulip CI / Ubuntu 22.04 (Python 3.10, backend + frontend) (push) Failing after 3s
Zulip CI / Ubuntu 24.04 (Python 3.12, backend) (push) Failing after 25s
Zulip CI / Ubuntu 26.04 (Python 3.14, backend) (push) Failing after 25s
Zulip CI / Debian 13 (Python 3.13, backend) (push) Failing after 28s
Zulip production suite / Required jobs (push) Has been cancelled
Zulip CI / Required jobs (push) Has been cancelled
API Documentation Update Check / check-feature-level-updated (push) Has been cancelled
API Documentation Update Check / notify-if-api-docs-changed (push) Has been cancelled
29 lines
686 B
JSON
29 lines
686 B
JSON
{
|
|
"ReverseDNS": "attacker.local",
|
|
"CanaryName": "foo-bar",
|
|
"Description": "SSH Login Attempt",
|
|
"CanaryPort": 22,
|
|
"Timestamp": "2020-07-20 16:26:22 (UTC)",
|
|
"CanaryIP": "1.1.1.1",
|
|
"AlertType": "CanaryIncident",
|
|
"Intro": "SSH Login Attempt has been detected against one of your Canaries (foo-bar) at 1.1.1.1.",
|
|
"IncidentHash": "4ef51a936d05e0a6b4846378c8c38d2c",
|
|
"CanaryLocation": "dining room",
|
|
"SourceIP": "1.1.1.1",
|
|
"AdditionalDetails": [
|
|
[
|
|
"Username",
|
|
"foo"
|
|
],
|
|
[
|
|
"Key",
|
|
"*******"
|
|
],
|
|
[
|
|
"Background Context",
|
|
"You have had 9 incidents from 1.1.1.1 previously."
|
|
]
|
|
],
|
|
"CanaryID": "00024808d6c2f7e5"
|
|
}
|