Forum Discussion
Bronze IIThreat Hunting: Cowrie Honeypot - Question on Panama
Has anyone completed the Threat Hunting: Cowrie Honeypot lab? Question 5 asks:
Using the Location Overview dashboard provided by the Tango Honeypot Intelligence app, how many successful logins occurred in Panama?
However, there are no logs with the src or destination IP at all for Panama. As this lab looks quite old I am suspecting that the GeoLocation for the IP has changed somewhat, but was wondering if anyone managed to complete this and/or has the answer the to question as it's the one stopping me from completing the Threat Hunting module.
seanmatthews225 👋 Thanks for your question! I've had a look at this lab, and you are right, the geolocation in the logs is not matching what we were expecting. I've updated question 5 to ask for the number of login attempts from Cyprus rather than Panama, as I can see that data from Cyprus is populating the Location Overview dashboard. I'm hoping this means you'll be able to complete the lab, and the Threat Hunting collection.
If you have any other problems, please let me know! 😁
4 Replies
- NyePrior
Immerser
seanmatthews225 👋 Thanks for your question! I've had a look at this lab, and you are right, the geolocation in the logs is not matching what we were expecting. I've updated question 5 to ask for the number of login attempts from Cyprus rather than Panama, as I can see that data from Cyprus is populating the Location Overview dashboard. I'm hoping this means you'll be able to complete the lab, and the Threat Hunting collection.
If you have any other problems, please let me know! 😁
seanmatthews225Thank you for fixing the lab, all good now :)
- netcat
Silver III
It didn't stop me. Starting with 0, 1, 2...it didn't take long to find the answer.
- KieranRowley
Community Manager
Be aware, we record accuracy for every answer. Brute forcing answers will ruin your average accuracy.
