03:14:22 UTC
Brute force detected from 192.168.1.105 (47 attempts)
03:18:47 UTC
Privilege escalation attempt - sudo exploit CVE-2023-22809
03:22:15 UTC
Port scan from 10.0.0.88 - 1024 ports in 12s
03:25:01 UTC
Firewall rule updated - blocked 192.168.1.105
03:31:33 UTC
Suspicious outbound to 45.33.32.156:4444 (reverse shell?)
03:35:00 UTC
Automated containment triggered - host isolated