icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons_061

Successful Shell Attack Detected - Unix SSH Initial Connetion Detection

High

Synopsis

A successful shell attack was detected.

Description

An SSH session was observed which may be an initial connection which may also be present in a command line shell of a successful buffer overflow.

Solution

The command activity observed is indicative of a possible compromise. Consider performing a full audit of the system to investigate further.