Forum Discussion

seanmatthews225's avatar
seanmatthews225
Icon for Bronze I rankBronze I
17 days ago

Threat Hunting: Cowrie Honeypot - Question on Panama

Has anyone completed the Threat Hunting: Cowrie Honeypot lab? Question 5 asks:

Using the Location Overview dashboard provided by the Tango Honeypot Intelligence app, how many successful logins occurred in Panama?

However, there are no logs with the src or destination IP at all for Panama. As this lab looks quite old I am suspecting that the GeoLocation for the IP has changed somewhat, but was wondering if anyone managed to complete this and/or has the answer the to question as it's the one stopping me from completing the Threat Hunting module.

help & support
  • NyePrior's avatar
    NyePrior
    Icon for Immerser rankImmerser
    16 days ago

    seanmatthews225 👋 Thanks for your question! I've had a look at this lab, and you are right, the geolocation in the logs is not matching what we were expecting. I've updated question 5 to ask for the number of login attempts from Cyprus rather than Panama, as I can see that data from Cyprus is populating the Location Overview dashboard. I'm hoping this means you'll be able to complete the lab, and the Threat Hunting collection. 

    If you have any other problems, please let me know! 😁

  • netcat's avatar
    netcat
    Icon for Bronze III rankBronze III
    16 days ago

    It didn't stop me. Starting with 0, 1, 2...it didn't take long to find the answer.

    • KieranRowley's avatar
      KieranRowley
      Icon for Community Manager rankCommunity Manager
      9 days ago

      Be aware, we record accuracy for every answer. Brute forcing answers will ruin your average accuracy.