OpenCanary Telnet Login Attempt

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•19

This rule detects login attempts against the Telnet service running on an OpenCanary honeypot. OpenCanary is designed to attract and detect unauthorized access attempts, so any login attempt to its Telnet service indicates potential malicious activity or reconnaissance against the honeypot.