HoneyMire Hub

Attack #170810 ssh

Captured 2026-06-16 03:27:54Z by Ka on honeypot LU2 - SERVERS ⬜ docker-edge · firmware 0.1.0.

Source80.94.92.187:41162
Target port22
Authenticatedyes
Commands1
Duration2.5s

Session recording

Loading session…

Transcript

Server output and attacker input as captured, line-grain. Malware URLs are obscured until sign-in.

/bin/./uname -s -v -n -r -m
Linux #101-Ubuntu SMP Tue Nov 14 13:30:08 UTC 2023 ubuntu-server 5.15.0-91-generic x86_64

Credentials

Username: ubuntu

Password: ubuntu123

1 login attempt(s) before disconnect.

Geolocation hub-resolved

🇳🇱The Netherlands · North Holland · Amsterdam

Unmanaged LTD · AS47890 UNMANAGED LTD · 52.37,4.90

Network: unknown · Unmanaged LTD · geoip · low confidence

Behavioral classification

🤖 55% confidence

Automated tool, unknown family — uniform timing but no matched signature.

Command summary

/bin/./uname -s -v -n -r -m

Reported to threat intel

none

HoneyMire Hub · open feed: / · API: /api · docs: /docs · blocklists: /blocklists · about: /about · firmware: github.com/HoneyMire/HoneyMire