HoneyMire Hub

Attack #859106 telnet

Captured 2026-09-30 02:21:16Z by Ka on honeypot LU1 C3 🟡 C3 SuperMini · firmware 1.1.0.

Session recording

Transcript

Server output and attacker input as captured, line-grain. Malware URLs are obscured until sign-in.

Welcome to HiLinux (NVR Box)

hilinux-nvrbox login: admin

Password: 

Credentials

Username: admin

Password:

1 login attempt(s) before disconnect.

Geolocation hub-resolved

🇨🇳China · Henan · Zhengzhou

CNC Group CHINA169 Henan Province Network · AS4837 CHINA UNICOM China169 Backbone · 34.75,113.63

Network: isp · China Unicom · NSP · peeringdb · medium confidence

Behavioral classification

🔭 75% confidence

Reconnaissance only — connects, fingerprints, disconnects without dropping a payload.

Reported to threat intel

none