HoneyMire Hub

Attack #292121 ssh

Captured 2026-06-29 19:50:01Z by Ka on honeypot FR1 ⬜ docker-edge · firmware 0.1.0.

Source110.14.190.221:53240
Target port22
Authenticatedyes
Commands1
Duration1.6s

Session recording

Loading session…

Transcript

Server output and attacker input as captured, line-grain. Malware URLs are obscured until sign-in.

uname -a
Linux ubuntu-server 5.15.0-91-generic #101-Ubuntu SMP Tue Nov 14 13:30:08 UTC 2023 x86_64 GNU/Linux

Credentials

Username: root

Password: Myka2024!

1 login attempt(s) before disconnect.

Geolocation hub-resolved

🇰🇷South Korea · Gyeonggi-do · Seongnam-si

broadNnet · AS9318 SK Broadband Co Ltd · 37.43,127.14

Network: residential · SK Broadband · Cable/DSL/ISP · peeringdb · medium confidence

Behavioral classification

🤖 55% confidence

Automated tool, unknown family — uniform timing but no matched signature.

Command summary

uname -a

Reported to threat intel

none

HoneyMire Hub · open feed: / · API: /api · docs: /docs · blocklists: /blocklists · about: /about · firmware: github.com/HoneyMire/HoneyMire