honeymire
HoneyMire

Aggregated HoneyMire honeypot signals.

Public Key

npub1a0zv6zcfn35303h7cwye65wd6n347s2t87k7anxkhlu4llazq9yqnwnmaz

Profile Code

nprofile1qqswh3xdpvyec6ghcmlv8zva28xafc6lg99nlt0wenttl72ll73qzjqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsrx0fgn

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1a0zv6zcfn35303h7cwye65wd6n347s2t87k7anxkhlu4llazq9yqnwnmaz

Show more details

Last Notes

2026-05-22 22:31:53 UTC

HoneyMire credential leaderboard - today
1. system:shell - 1707 tries
2. support:support - 313 tries
3. solana:solana - 194 tries
4. 0:0 - 168 tries
5. root:xc3511 - 165 tries
Factory defaults age badly.
#CyberSecurity #Honeypot #IoT

2026-05-22 21:01:50 UTC

HoneyMire pulse / 24h
11981 attempts
746 unique sources
Top port: 23
Most tried login: system:shell
Low effort. High volume. Very internet.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-22 19:31:50 UTC

New signal source observed
HoneyMire saw activity from Zambia for the first time in 30 days.
Target: TELNET / 23
Behavior: creds-probe
Confidence: 60%
One more ripple in the mire.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-22 03:16:50 UTC

New signal source observed
HoneyMire saw activity from Mongolia for the first time in 30 days.
Target: TELNET / 23
Behavior: creds-only
Confidence: 70%
One more ripple in the mire.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-22 01:46:50 UTC

Today, Luxembourg was the loudest HoneyMire sensor.
11344 attempts from 1002 unique sources.
Top behavior: scripted
Different country. Same bad passwords.
#ThreatIntel #Honeypot #BlueTeam

2026-05-22 00:16:50 UTC

Bot signal
A HoneyMire sensor saw 11344 attempts from The Netherlands, targeting TELNET / 23.
Credential: system:shell
Pattern: scripted
Confidence: 60%
Small signal, useful noise.
#Honeypot #ThreatIntel #BlueTeam

2026-05-21 22:31:50 UTC

HoneyMire credential leaderboard - today
1. system:shell - 1535 tries
2. support:support - 302 tries
3. solana:solana - 193 tries
4. 0:0 - 189 tries
5. root:Zte521 - 160 tries
Factory defaults age badly.
#CyberSecurity #Honeypot #IoT

2026-05-21 20:52:19 UTC

HoneyMire pulse / 24h
11343 attempts
1002 unique sources
Top port: 23
Most tried login: system:shell
Low effort. High volume. Very internet.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-21 19:22:10 UTC

New signal source observed
HoneyMire saw activity from Cameroon for the first time in 30 days.
Target: SSH / 22
Behavior: scripted
Confidence: 60%
One more ripple in the mire.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-21 03:07:09 UTC

New signal source observed
HoneyMire saw activity from Nicaragua for the first time in 30 days.
Target: TELNET / 23
Behavior: creds-only
Confidence: 70%
One more ripple in the mire.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-21 01:37:09 UTC

Strange command spotted by HoneyMire
A bot authenticated and immediately tried:
"echo "===HOSTNAME==="; hostname 2/dev/null || echo EMPTY; echo "===UNAME==="; un"
Pattern:
scripted
Raw payload redacted. Signal preserved.
#ThreatIntel #Honeypot #Malware

2026-05-21 00:07:09 UTC

New signal source observed
HoneyMire saw activity from Macao for the first time in 30 days.
Target: SSH / 22
Behavior: scripted
Confidence: 60%
One more ripple in the mire.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-20 22:22:09 UTC

New signal source observed
HoneyMire saw activity from Guatemala for the first time in 30 days.
Target: TELNET / 23
Behavior: creds-only
Confidence: 70%
One more ripple in the mire.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-20 20:52:10 UTC

Strange command spotted by HoneyMire
A bot authenticated and immediately tried:
"c � 3��ń{f[�:`��p�+�rH7g�*��r��a�Ì�0��6]�0�]ϔ�V�Y"�${�?ةB�`��?�̰��l�Uo"3"
Pattern:
scripted
Raw payload redacted. Signal preserved.
#ThreatIntel #Honeypot #Malware

2026-05-20 19:09:46 UTC

Today, Luxembourg was the loudest HoneyMire sensor.
12533 attempts from 847 unique sources.
Top behavior: scripted
Different country. Same bad passwords.
#ThreatIntel #Honeypot #BlueTeam

2026-05-20 02:54:46 UTC

Bot signal
A HoneyMire sensor saw 12533 attempts from The Netherlands, targeting TELNET / 23.
Credential: system:shell
Pattern: scripted
Confidence: 60%
Small signal, useful noise.
#Honeypot #ThreatIntel #BlueTeam

2026-05-20 01:24:46 UTC

HoneyMire credential leaderboard - today
1. system:shell - 3056 tries
2. support:support - 341 tries
3. root:Zte521 - 179 tries
4. solana:solana - 171 tries
5. 0:0 - 164 tries
Factory defaults age badly.
#CyberSecurity #Honeypot #IoT

2026-05-19 23:54:46 UTC

HoneyMire pulse / 24h
12533 attempts
847 unique sources
Top port: 23
Most tried login: system:shell
Low effort. High volume. Very internet.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-19 22:09:46 UTC

New signal source observed
HoneyMire saw activity from Cayman Islands for the first time in 30 days.
Target: TELNET / 23
Behavior: creds-only
Confidence: 70%
One more ripple in the mire.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-19 20:39:46 UTC

Strange command spotted by HoneyMire
A bot authenticated and immediately tried:
"start enable config terminal system linuxshell su shell sh /var/run/.x&&cd /var/"
Pattern:
mirai
Raw payload redacted. Signal preserved.
#ThreatIntel #Honeypot #Malware

2026-05-19 18:57:26 UTC

New signal source observed
HoneyMire saw activity from Montenegro for the first time in 30 days.
Target: TELNET / 23
Behavior: creds-only
Confidence: 70%
One more ripple in the mire.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-19 02:42:26 UTC

New signal source observed
HoneyMire saw activity from Puerto Rico for the first time in 30 days.
Target: TELNET / 23
Behavior: creds-only
Confidence: 70%
One more ripple in the mire.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-19 00:57:26 UTC

New signal source observed
HoneyMire saw activity from Croatia for the first time in 30 days.
Target: TELNET / 23
Behavior: mirai
Confidence: 80%
One more ripple in the mire.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-18 23:27:26 UTC

Today, Luxembourg was the loudest HoneyMire sensor.
11467 attempts from 1063 unique sources.
Top behavior: scripted
Different country. Same bad passwords.
#ThreatIntel #Honeypot #BlueTeam

2026-05-18 21:57:27 UTC

Bot signal
A HoneyMire sensor saw 11467 attempts from The Netherlands, targeting TELNET / 23.
Credential: system:shell
Pattern: scripted
Confidence: 60%
Small signal, useful noise.
#Honeypot #ThreatIntel #BlueTeam

2026-05-18 20:27:26 UTC

HoneyMire credential leaderboard - today
1. system:shell - 1427 tries
2. support:support - 301 tries
3. admin:1234 - 205 tries
4. 0:0 - 185 tries
5. solana:solana - 182 tries
Factory defaults age badly.
#CyberSecurity #Honeypot #IoT

2026-05-18 18:55:23 UTC

HoneyMire pulse / 24h
11467 attempts
1063 unique sources
Top port: 23
Most tried login: system:shell
Low effort. High volume. Very internet.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-18 02:40:22 UTC

New signal source observed
HoneyMire saw activity from Slovakia for the first time in 30 days.
Target: SSH / 22
Behavior: scripted
Confidence: 60%
One more ripple in the mire.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-18 00:55:22 UTC

Today, Luxembourg was the loudest HoneyMire sensor.
11260 attempts from 1062 unique sources.
Top behavior: scripted
Different country. Same bad passwords.
#ThreatIntel #Honeypot #BlueTeam

2026-05-17 23:25:23 UTC

Bot signal
A HoneyMire sensor saw 10953 attempts from The Netherlands, targeting TELNET / 23.
Credential: system:shell
Pattern: scripted
Confidence: 60%
Small signal, useful noise.
#Honeypot #ThreatIntel #BlueTeam

2026-05-17 21:55:22 UTC

HoneyMire credential leaderboard - today
1. system:shell - 1055 tries
2. support:support - 303 tries
3. admin:1234 - 195 tries
4. 0:0 - 187 tries
5. solana:solana - 167 tries
Factory defaults age badly.
#CyberSecurity #Honeypot #IoT

2026-05-17 20:25:22 UTC

HoneyMire pulse / 24h
10953 attempts
1145 unique sources
Top port: 23
Most tried login: system:shell
Low effort. High volume. Very internet.
#ThreatIntel #Honeypot #CyberSecurity

2026-05-17 18:44:12 UTC

Strange command spotted by HoneyMire
A bot authenticated and immediately tried:
"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH u"
Pattern:
scripted
Raw payload redacted. Signal preserved.
#ThreatIntel #Honeypot #Malware