HoneyMire

HoneyMire credential leaderboard - today 1. system:shell - 1525 tries 2. shell:sh - 426 tries 3. support:support - 322 tries 4. admin:admin - 217 tries 5. solana:solana - 194 tries Factory defaults age badly. #CyberSecurity #Honeypot #IoT

HoneyMire pulse / 24h 13146 attempts 1047 unique sources Top port: 23 Most tried login: system:shell Low effort. High volume. Very internet. #ThreatIntel #Honeypot #CyberSecurity

New signal source observed HoneyMire saw activity from Nepal for the first time in 30 days. Target: SSH / 22 Behavior: scripted Confidence: 60% One more ripple in the mire. #ThreatIntel #Honeypot #CyberSecurity

New signal source observed HoneyMire saw activity from Nepal for the first time in 30 days. Target: TELNET / 23 Behavior: creds-only Confidence: 70% One more ripple in the mire. #ThreatIntel #Honeypot #CyberSecurity

New signal source observed HoneyMire saw activity from Cyprus for the first time in 30 days. Target: SSH / 22 Behavior: creds-only Confidence: 70% One more ripple in the mire. #ThreatIntel #Honeypot #CyberSecurity

Today, Luxembourg was the loudest HoneyMire sensor. 11981 attempts from 746 unique sources. Top behavior: mirai Different country. Same bad passwords. #ThreatIntel #Honeypot #BlueTeam

Bot signal A HoneyMire sensor saw 11981 attempts from United States, targeting TELNET / 23. Credential: system:shell Pattern: mirai Confidence: 95% Small signal, useful noise. #Honeypot #ThreatIntel #BlueTeam

HoneyMire credential leaderboard - today 1. system:shell - 1707 tries 2. support:support - 313 tries 3. solana:solana - 194 tries 4. 0:0 - 168 tries 5. root:xc3511 - 165 tries Factory defaults age badly. #CyberSecurity #Honeypot #IoT

HoneyMire pulse / 24h 11981 attempts 746 unique sources Top port: 23 Most tried login: system:shell Low effort. High volume. Very internet. #ThreatIntel #Honeypot #CyberSecurity

New signal source observed HoneyMire saw activity from Zambia for the first time in 30 days. Target: TELNET / 23 Behavior: creds-probe Confidence: 60% One more ripple in the mire. #ThreatIntel #Honeypot #CyberSecurity

New signal source observed HoneyMire saw activity from Mongolia for the first time in 30 days. Target: TELNET / 23 Behavior: creds-only Confidence: 70% One more ripple in the mire. #ThreatIntel #Honeypot #CyberSecurity

Today, Luxembourg was the loudest HoneyMire sensor. 11344 attempts from 1002 unique sources. Top behavior: scripted Different country. Same bad passwords. #ThreatIntel #Honeypot #BlueTeam

Bot signal A HoneyMire sensor saw 11344 attempts from The Netherlands, targeting TELNET / 23. Credential: system:shell Pattern: scripted Confidence: 60% Small signal, useful noise. #Honeypot #ThreatIntel #BlueTeam

HoneyMire credential leaderboard - today 1. system:shell - 1535 tries 2. support:support - 302 tries 3. solana:solana - 193 tries 4. 0:0 - 189 tries 5. root:Zte521 - 160 tries Factory defaults age badly. #CyberSecurity #Honeypot #IoT

HoneyMire pulse / 24h 11343 attempts 1002 unique sources Top port: 23 Most tried login: system:shell Low effort. High volume. Very internet. #ThreatIntel #Honeypot #CyberSecurity

New signal source observed HoneyMire saw activity from Cameroon for the first time in 30 days. Target: SSH / 22 Behavior: scripted Confidence: 60% One more ripple in the mire. #ThreatIntel #Honeypot #CyberSecurity

New signal source observed HoneyMire saw activity from Nicaragua for the first time in 30 days. Target: TELNET / 23 Behavior: creds-only Confidence: 70% One more ripple in the mire. #ThreatIntel #Honeypot #CyberSecurity

Strange command spotted by HoneyMire A bot authenticated and immediately tried: "echo "===HOSTNAME==="; hostname 2/dev/null || echo EMPTY; echo "===UNAME==="; un" Pattern: scripted Raw payload redacted. Signal preserved. #ThreatIntel #Honeypot #Malware

New signal source observed HoneyMire saw activity from Macao for the first time in 30 days. Target: SSH / 22 Behavior: scripted Confidence: 60% One more ripple in the mire. #ThreatIntel #Honeypot #CyberSecurity

New signal source observed HoneyMire saw activity from Guatemala for the first time in 30 days. Target: TELNET / 23 Behavior: creds-only Confidence: 70% One more ripple in the mire. #ThreatIntel #Honeypot #CyberSecurity