#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
What started as a project out of vendor frustration and spite, became a plucky git repo to nerf cyber crime riding trusted services. I'm so happy when defenders tell me how BS Lists helped them in their $job.
Similar to LOLRMM, LOTT, and ClickGrab, it's a passion project maintained by a single individual.
[ xkcd.gif ]And this model puts these projects at-risk long-term.Because the author of BS Lists apparently can't be bothered to wear his helmet during rock and icefall danger, new lists will be published on IFIN, a 501(c)(3) cyber intel non-profit. Older lists will be migrated where appropriate.
With this announcement, there is a 2050 domain-strong RPC Node list to combat #Etherhiding I encourage defenders to check out.
https://lists.ifin.network/lists/rpc-nodes/
I also have 3 more lists in queue.
-
2026-09-12 RDP #Honeypot IOCs - 34326 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30099
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30099
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34233
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30099
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34326Top Software:
Unknown - 34326Top Keyboards:
Unknown - 34326Top IP Classification:
Unknown - 30114
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34326 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30099
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30099
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34233
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30099
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34326Top Software:
Unknown - 34326Top Keyboards:
Unknown - 34326Top IP Classification:
Unknown - 30114
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34326 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30099
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30099
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34233
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30099
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34326Top Software:
Unknown - 34326Top Keyboards:
Unknown - 34326Top IP Classification:
Unknown - 30114
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34326 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30099
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30099
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34233
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30099
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34326Top Software:
Unknown - 34326Top Keyboards:
Unknown - 34326Top IP Classification:
Unknown - 30114
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34324 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30097
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30097
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34231
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30097
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34324Top Software:
Unknown - 34324Top Keyboards:
Unknown - 34324Top IP Classification:
Unknown - 30112
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34324 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30097
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30097
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34231
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30097
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34324Top Software:
Unknown - 34324Top Keyboards:
Unknown - 34324Top IP Classification:
Unknown - 30112
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34324 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30097
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30097
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34231
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30097
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34324Top Software:
Unknown - 34324Top Keyboards:
Unknown - 34324Top IP Classification:
Unknown - 30112
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34324 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30097
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30097
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34231
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30097
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34324Top Software:
Unknown - 34324Top Keyboards:
Unknown - 34324Top IP Classification:
Unknown - 30112
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34322 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30095
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30095
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34229
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30095
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34322Top Software:
Unknown - 34322Top Keyboards:
Unknown - 34322Top IP Classification:
Unknown - 30110
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34322 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30095
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30095
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34229
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30095
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34322Top Software:
Unknown - 34322Top Keyboards:
Unknown - 34322Top IP Classification:
Unknown - 30110
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34322 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30095
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30095
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34229
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30095
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34322Top Software:
Unknown - 34322Top Keyboards:
Unknown - 34322Top IP Classification:
Unknown - 30110
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34322 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30095
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30095
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34229
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30095
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34322Top Software:
Unknown - 34322Top Keyboards:
Unknown - 34322Top IP Classification:
Unknown - 30110
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34320 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30093
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30093
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34227
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30093
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34320Top Software:
Unknown - 34320Top Keyboards:
Unknown - 34320Top IP Classification:
Unknown - 30108
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34320 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30093
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30093
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34227
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30093
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34320Top Software:
Unknown - 34320Top Keyboards:
Unknown - 34320Top IP Classification:
Unknown - 30108
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34320 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30093
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30093
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34227
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30093
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34320Top Software:
Unknown - 34320Top Keyboards:
Unknown - 34320Top IP Classification:
Unknown - 30108
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 22880 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 20062
147.182.250.28 - 2688
104.64.217.122 - 40Top ASNs:
AS135905 - 20062
AS14061 - 2700
AS63949 - 44Top Accounts:
hello - 22818
Administr - 22
anonymous - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 20062
DigitalOcean, LLC - 2700
Akamai Technologies, Inc. - 44Top Clients:
Unknown - 22880Top Software:
Unknown - 22880Top Keyboards:
Unknown - 22880Top IP Classification:
Unknown - 20072
hosting - 2808Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 22880 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 20062
147.182.250.28 - 2688
104.64.217.122 - 40Top ASNs:
AS135905 - 20062
AS14061 - 2700
AS63949 - 44Top Accounts:
hello - 22818
Administr - 22
anonymous - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 20062
DigitalOcean, LLC - 2700
Akamai Technologies, Inc. - 44Top Clients:
Unknown - 22880Top Software:
Unknown - 22880Top Keyboards:
Unknown - 22880Top IP Classification:
Unknown - 20072
hosting - 2808Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 22880 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 20062
147.182.250.28 - 2688
104.64.217.122 - 40Top ASNs:
AS135905 - 20062
AS14061 - 2700
AS63949 - 44Top Accounts:
hello - 22818
Administr - 22
anonymous - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 20062
DigitalOcean, LLC - 2700
Akamai Technologies, Inc. - 44Top Clients:
Unknown - 22880Top Software:
Unknown - 22880Top Keyboards:
Unknown - 22880Top IP Classification:
Unknown - 20072
hosting - 2808Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 11440 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 10031
147.182.250.28 - 1344
104.64.217.122 - 20Top ASNs:
AS135905 - 10031
AS14061 - 1350
AS63949 - 22Top Accounts:
hello - 11409
Administr - 11
anonymous - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 10031
DigitalOcean, LLC - 1350
Akamai Technologies, Inc. - 22Top Clients:
Unknown - 11440Top Software:
Unknown - 11440Top Keyboards:
Unknown - 11440Top IP Classification:
Unknown - 10036
hosting - 1404Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 11440 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 10031
147.182.250.28 - 1344
104.64.217.122 - 20Top ASNs:
AS135905 - 10031
AS14061 - 1350
AS63949 - 22Top Accounts:
hello - 11409
Administr - 11
anonymous - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 10031
DigitalOcean, LLC - 1350
Akamai Technologies, Inc. - 22Top Clients:
Unknown - 11440Top Software:
Unknown - 11440Top Keyboards:
Unknown - 11440Top IP Classification:
Unknown - 10036
hosting - 1404Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 11440 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 10031
147.182.250.28 - 1344
104.64.217.122 - 20Top ASNs:
AS135905 - 10031
AS14061 - 1350
AS63949 - 22Top Accounts:
hello - 11409
Administr - 11
anonymous - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 10031
DigitalOcean, LLC - 1350
Akamai Technologies, Inc. - 22Top Clients:
Unknown - 11440Top Software:
Unknown - 11440Top Keyboards:
Unknown - 11440Top IP Classification:
Unknown - 10036
hosting - 1404Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
CVE-2026-85681 (CRITICAL): WP Component plugin ≤2.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam
-
CVE-2026-85681 (CRITICAL): WP Component plugin ≤2.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam
-
CVE-2026-85681 (CRITICAL): WP Component plugin ≤2.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam
-
CVE-2026-85681 (CRITICAL): WP Component plugin ≤2.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam
-
CVE-2026-81000: Linux kernel TUN driver HIGH severity vulnerability fixed. Flaw in skb headroom calculation could trigger memory corruption. Update to patched kernel ASAP. 🐧 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-net-tun-bound-receive-headroom-683cedae073ef3c4 #OffSeq #Linux #Vulnerability #BlueTeam
-
CVE-2026-81000: Linux kernel TUN driver HIGH severity vulnerability fixed. Flaw in skb headroom calculation could trigger memory corruption. Update to patched kernel ASAP. 🐧 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-net-tun-bound-receive-headroom-683cedae073ef3c4 #OffSeq #Linux #Vulnerability #BlueTeam
-
CVE-2026-81000: Linux kernel TUN driver HIGH severity vulnerability fixed. Flaw in skb headroom calculation could trigger memory corruption. Update to patched kernel ASAP. 🐧 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-net-tun-bound-receive-headroom-683cedae073ef3c4 #OffSeq #Linux #Vulnerability #BlueTeam
-
Tickets for #BSidesAugusta0xA OPENS TODAY AT NOON EST. BSidesAugusta.org/tickets (Get Tickets). #cyber #csra #AugustaGA #cybersecurity #InfoSec #blueteam #redteam #purpleteam