home.social

#blueteam — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.

  1. 2026-09-05 RDP #Honeypot IOCs - 2556 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 2409
    103.178.235.50 - 27
    217.160.240.135 - 27

    Top ASNs:
    Unknown - 2409
    AS396982 - 48
    AS140810 - 27

    Top Accounts:
    hello - 2469
    Administr - 12
    0siivpyz - 12

    Top ISPs:
    Private Customer - 2409
    Google LLC - 48
    VPSTTT - 27

    Top Clients:
    Unknown - 2556

    Top Software:
    Unknown - 2556

    Top Keyboards:
    Unknown - 2556

    Top IP Classification:
    proxy - 2409
    hosting - 99
    hosting & proxy - 39

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  2. 2026-09-05 RDP #Honeypot IOCs - 2556 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 2409
    103.178.235.50 - 27
    217.160.240.135 - 27

    Top ASNs:
    Unknown - 2409
    AS396982 - 48
    AS140810 - 27

    Top Accounts:
    hello - 2469
    Administr - 12
    0siivpyz - 12

    Top ISPs:
    Private Customer - 2409
    Google LLC - 48
    VPSTTT - 27

    Top Clients:
    Unknown - 2556

    Top Software:
    Unknown - 2556

    Top Keyboards:
    Unknown - 2556

    Top IP Classification:
    proxy - 2409
    hosting - 99
    hosting & proxy - 39

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  3. 2026-09-05 RDP #Honeypot IOCs - 2556 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 2409
    103.178.235.50 - 27
    217.160.240.135 - 27

    Top ASNs:
    Unknown - 2409
    AS396982 - 48
    AS140810 - 27

    Top Accounts:
    hello - 2469
    Administr - 12
    0siivpyz - 12

    Top ISPs:
    Private Customer - 2409
    Google LLC - 48
    VPSTTT - 27

    Top Clients:
    Unknown - 2556

    Top Software:
    Unknown - 2556

    Top Keyboards:
    Unknown - 2556

    Top IP Classification:
    proxy - 2409
    hosting - 99
    hosting & proxy - 39

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  4. 2026-09-05 RDP #Honeypot IOCs - 2556 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 2409
    103.178.235.50 - 27
    217.160.240.135 - 27

    Top ASNs:
    Unknown - 2409
    AS396982 - 48
    AS140810 - 27

    Top Accounts:
    hello - 2469
    Administr - 12
    0siivpyz - 12

    Top ISPs:
    Private Customer - 2409
    Google LLC - 48
    VPSTTT - 27

    Top Clients:
    Unknown - 2556

    Top Software:
    Unknown - 2556

    Top Keyboards:
    Unknown - 2556

    Top IP Classification:
    proxy - 2409
    hosting - 99
    hosting & proxy - 39

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  5. 2026-09-05 RDP #Honeypot IOCs - 1704 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 1606
    103.178.235.50 - 18
    217.160.240.135 - 18

    Top ASNs:
    Unknown - 1606
    AS396982 - 32
    AS140810 - 18

    Top Accounts:
    hello - 1646
    Administr - 8
    0siivpyz - 8

    Top ISPs:
    Private Customer - 1606
    Google LLC - 32
    VPSTTT - 18

    Top Clients:
    Unknown - 1704

    Top Software:
    Unknown - 1704

    Top Keyboards:
    Unknown - 1704

    Top IP Classification:
    proxy - 1606
    hosting - 66
    hosting & proxy - 26

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  6. 2026-09-05 RDP #Honeypot IOCs - 1704 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 1606
    103.178.235.50 - 18
    217.160.240.135 - 18

    Top ASNs:
    Unknown - 1606
    AS396982 - 32
    AS140810 - 18

    Top Accounts:
    hello - 1646
    Administr - 8
    0siivpyz - 8

    Top ISPs:
    Private Customer - 1606
    Google LLC - 32
    VPSTTT - 18

    Top Clients:
    Unknown - 1704

    Top Software:
    Unknown - 1704

    Top Keyboards:
    Unknown - 1704

    Top IP Classification:
    proxy - 1606
    hosting - 66
    hosting & proxy - 26

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  7. 2026-09-05 RDP #Honeypot IOCs - 1704 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 1606
    103.178.235.50 - 18
    217.160.240.135 - 18

    Top ASNs:
    Unknown - 1606
    AS396982 - 32
    AS140810 - 18

    Top Accounts:
    hello - 1646
    Administr - 8
    0siivpyz - 8

    Top ISPs:
    Private Customer - 1606
    Google LLC - 32
    VPSTTT - 18

    Top Clients:
    Unknown - 1704

    Top Software:
    Unknown - 1704

    Top Keyboards:
    Unknown - 1704

    Top IP Classification:
    proxy - 1606
    hosting - 66
    hosting & proxy - 26

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  8. 2026-09-05 RDP #Honeypot IOCs - 1704 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 1606
    103.178.235.50 - 18
    217.160.240.135 - 18

    Top ASNs:
    Unknown - 1606
    AS396982 - 32
    AS140810 - 18

    Top Accounts:
    hello - 1646
    Administr - 8
    0siivpyz - 8

    Top ISPs:
    Private Customer - 1606
    Google LLC - 32
    VPSTTT - 18

    Top Clients:
    Unknown - 1704

    Top Software:
    Unknown - 1704

    Top Keyboards:
    Unknown - 1704

    Top IP Classification:
    proxy - 1606
    hosting - 66
    hosting & proxy - 26

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  9. 2026-09-05 RDP #Honeypot IOCs - 852 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 803
    103.178.235.50 - 9
    217.160.240.135 - 9

    Top ASNs:
    Unknown - 803
    AS396982 - 16
    AS140810 - 9

    Top Accounts:
    hello - 823
    Administr - 4
    0siivpyz - 4

    Top ISPs:
    Private Customer - 803
    Google LLC - 16
    VPSTTT - 9

    Top Clients:
    Unknown - 852

    Top Software:
    Unknown - 852

    Top Keyboards:
    Unknown - 852

    Top IP Classification:
    proxy - 803
    hosting - 33
    hosting & proxy - 13

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  10. 2026-09-05 RDP #Honeypot IOCs - 852 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 803
    103.178.235.50 - 9
    217.160.240.135 - 9

    Top ASNs:
    Unknown - 803
    AS396982 - 16
    AS140810 - 9

    Top Accounts:
    hello - 823
    Administr - 4
    0siivpyz - 4

    Top ISPs:
    Private Customer - 803
    Google LLC - 16
    VPSTTT - 9

    Top Clients:
    Unknown - 852

    Top Software:
    Unknown - 852

    Top Keyboards:
    Unknown - 852

    Top IP Classification:
    proxy - 803
    hosting - 33
    hosting & proxy - 13

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  11. 2026-09-05 RDP #Honeypot IOCs - 852 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 803
    103.178.235.50 - 9
    217.160.240.135 - 9

    Top ASNs:
    Unknown - 803
    AS396982 - 16
    AS140810 - 9

    Top Accounts:
    hello - 823
    Administr - 4
    0siivpyz - 4

    Top ISPs:
    Private Customer - 803
    Google LLC - 16
    VPSTTT - 9

    Top Clients:
    Unknown - 852

    Top Software:
    Unknown - 852

    Top Keyboards:
    Unknown - 852

    Top IP Classification:
    proxy - 803
    hosting - 33
    hosting & proxy - 13

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  12. 2026-09-05 RDP #Honeypot IOCs - 852 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 803
    103.178.235.50 - 9
    217.160.240.135 - 9

    Top ASNs:
    Unknown - 803
    AS396982 - 16
    AS140810 - 9

    Top Accounts:
    hello - 823
    Administr - 4
    0siivpyz - 4

    Top ISPs:
    Private Customer - 803
    Google LLC - 16
    VPSTTT - 9

    Top Clients:
    Unknown - 852

    Top Software:
    Unknown - 852

    Top Keyboards:
    Unknown - 852

    Top IP Classification:
    proxy - 803
    hosting - 33
    hosting & proxy - 13

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  13. SOC-Analyst Lern- & Praxishandbuch

    Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  14. SOC-Analyst Lern- & Praxishandbuch

    Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  15. SOC-Analyst Lern- & Praxishandbuch

    Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  16. SOC-Analyst Lern- & Praxishandbuch

    Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  17. SOC-Analyst Lern- & Praxishandbuch

    Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  18. Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  19. Empty scoreboard.
    80 teams.
    14 days.

    Someone's name goes first.

    WATCHLIST is a free 24-hour CTF built around one investigation.

    24 challenges - memory forensics,
    disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.

    All connected to the same case.

    First blood on each challenge gets logged permanently
    by The Machine.

    Sep 19 03:30 UTC. Free entry. Teams 1-6.
    Prizes: $750 / $500 / $250

    ctf.xposedornot.com
    CTFtime: ctftime.org/event/3326

    #CTF #DFIR #forensics #infosec #blueteam

  20. Empty scoreboard.
    80 teams.
    14 days.

    Someone's name goes first.

    WATCHLIST is a free 24-hour CTF built around one investigation.

    24 challenges - memory forensics,
    disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.

    All connected to the same case.

    First blood on each challenge gets logged permanently
    by The Machine.

    Sep 19 03:30 UTC. Free entry. Teams 1-6.
    Prizes: $750 / $500 / $250

    ctf.xposedornot.com
    CTFtime: ctftime.org/event/3326

    #CTF #DFIR #forensics #infosec #blueteam

  21. Empty scoreboard.
    80 teams.
    14 days.

    Someone's name goes first.

    WATCHLIST is a free 24-hour CTF built around one investigation.

    24 challenges - memory forensics,
    disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.

    All connected to the same case.

    First blood on each challenge gets logged permanently
    by The Machine.

    Sep 19 03:30 UTC. Free entry. Teams 1-6.
    Prizes: $750 / $500 / $250

    ctf.xposedornot.com
    CTFtime: ctftime.org/event/3326

    #CTF #DFIR #forensics #infosec #blueteam

  22. Empty scoreboard.
    80 teams.
    14 days.

    Someone's name goes first.

    WATCHLIST is a free 24-hour CTF built around one investigation.

    24 challenges - memory forensics,
    disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.

    All connected to the same case.

    First blood on each challenge gets logged permanently
    by The Machine.

    Sep 19 03:30 UTC. Free entry. Teams 1-6.
    Prizes: $750 / $500 / $250

    ctf.xposedornot.com
    CTFtime: ctftime.org/event/3326

    #CTF #DFIR #forensics #infosec #blueteam

  23. Empty scoreboard.
    80 teams.
    14 days.

    Someone's name goes first.

    WATCHLIST is a free 24-hour CTF built around one investigation.

    24 challenges - memory forensics,
    disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.

    All connected to the same case.

    First blood on each challenge gets logged permanently
    by The Machine.

    Sep 19 03:30 UTC. Free entry. Teams 1-6.
    Prizes: $750 / $500 / $250

    ctf.xposedornot.com
    CTFtime: ctftime.org/event/3326

    #CTF #DFIR #forensics #infosec #blueteam

  24. 2026-09-04 RDP #Honeypot IOCs - 633 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 510
    79.137.100.124 - 27
    45.156.128.61 - 18

    Top ASNs:
    AS14061 - 510
    AS396982 - 27
    AS16276 - 27

    Top Accounts:
    hello - 549
    Administr - 21
    root - 18

    Top ISPs:
    DigitalOcean, LLC - 510
    Google LLC - 27
    OVH SAS - 27

    Top Clients:
    Unknown - 633

    Top Software:
    Unknown - 633

    Top Keyboards:
    Unknown - 633

    Top IP Classification:
    hosting - 603
    Unknown - 24
    hosting & proxy - 6

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  25. 2026-09-04 RDP #Honeypot IOCs - 633 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 510
    79.137.100.124 - 27
    45.156.128.61 - 18

    Top ASNs:
    AS14061 - 510
    AS396982 - 27
    AS16276 - 27

    Top Accounts:
    hello - 549
    Administr - 21
    root - 18

    Top ISPs:
    DigitalOcean, LLC - 510
    Google LLC - 27
    OVH SAS - 27

    Top Clients:
    Unknown - 633

    Top Software:
    Unknown - 633

    Top Keyboards:
    Unknown - 633

    Top IP Classification:
    hosting - 603
    Unknown - 24
    hosting & proxy - 6

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  26. 2026-09-04 RDP #Honeypot IOCs - 633 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 510
    79.137.100.124 - 27
    45.156.128.61 - 18

    Top ASNs:
    AS14061 - 510
    AS396982 - 27
    AS16276 - 27

    Top Accounts:
    hello - 549
    Administr - 21
    root - 18

    Top ISPs:
    DigitalOcean, LLC - 510
    Google LLC - 27
    OVH SAS - 27

    Top Clients:
    Unknown - 633

    Top Software:
    Unknown - 633

    Top Keyboards:
    Unknown - 633

    Top IP Classification:
    hosting - 603
    Unknown - 24
    hosting & proxy - 6

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  27. 2026-09-04 RDP #Honeypot IOCs - 633 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 510
    79.137.100.124 - 27
    45.156.128.61 - 18

    Top ASNs:
    AS14061 - 510
    AS396982 - 27
    AS16276 - 27

    Top Accounts:
    hello - 549
    Administr - 21
    root - 18

    Top ISPs:
    DigitalOcean, LLC - 510
    Google LLC - 27
    OVH SAS - 27

    Top Clients:
    Unknown - 633

    Top Software:
    Unknown - 633

    Top Keyboards:
    Unknown - 633

    Top IP Classification:
    hosting - 603
    Unknown - 24
    hosting & proxy - 6

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  28. 2026-09-04 RDP #Honeypot IOCs - 422 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 340
    79.137.100.124 - 18
    45.156.128.61 - 12

    Top ASNs:
    AS14061 - 340
    AS396982 - 18
    AS16276 - 18

    Top Accounts:
    hello - 366
    Administr - 14
    root - 12

    Top ISPs:
    DigitalOcean, LLC - 340
    Google LLC - 18
    OVH SAS - 18

    Top Clients:
    Unknown - 422

    Top Software:
    Unknown - 422

    Top Keyboards:
    Unknown - 422

    Top IP Classification:
    hosting - 402
    Unknown - 16
    hosting & proxy - 4

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  29. 2026-09-04 RDP #Honeypot IOCs - 422 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 340
    79.137.100.124 - 18
    45.156.128.61 - 12

    Top ASNs:
    AS14061 - 340
    AS396982 - 18
    AS16276 - 18

    Top Accounts:
    hello - 366
    Administr - 14
    root - 12

    Top ISPs:
    DigitalOcean, LLC - 340
    Google LLC - 18
    OVH SAS - 18

    Top Clients:
    Unknown - 422

    Top Software:
    Unknown - 422

    Top Keyboards:
    Unknown - 422

    Top IP Classification:
    hosting - 402
    Unknown - 16
    hosting & proxy - 4

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  30. 2026-09-04 RDP #Honeypot IOCs - 422 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 340
    79.137.100.124 - 18
    45.156.128.61 - 12

    Top ASNs:
    AS14061 - 340
    AS396982 - 18
    AS16276 - 18

    Top Accounts:
    hello - 366
    Administr - 14
    root - 12

    Top ISPs:
    DigitalOcean, LLC - 340
    Google LLC - 18
    OVH SAS - 18

    Top Clients:
    Unknown - 422

    Top Software:
    Unknown - 422

    Top Keyboards:
    Unknown - 422

    Top IP Classification:
    hosting - 402
    Unknown - 16
    hosting & proxy - 4

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  31. 2026-09-04 RDP #Honeypot IOCs - 422 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 340
    79.137.100.124 - 18
    45.156.128.61 - 12

    Top ASNs:
    AS14061 - 340
    AS396982 - 18
    AS16276 - 18

    Top Accounts:
    hello - 366
    Administr - 14
    root - 12

    Top ISPs:
    DigitalOcean, LLC - 340
    Google LLC - 18
    OVH SAS - 18

    Top Clients:
    Unknown - 422

    Top Software:
    Unknown - 422

    Top Keyboards:
    Unknown - 422

    Top IP Classification:
    hosting - 402
    Unknown - 16
    hosting & proxy - 4

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  32. 2026-09-04 RDP #Honeypot IOCs - 211 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 170
    79.137.100.124 - 9
    45.156.128.61 - 6

    Top ASNs:
    AS14061 - 170
    AS396982 - 9
    AS16276 - 9

    Top Accounts:
    hello - 183
    Administr - 7
    root - 6

    Top ISPs:
    DigitalOcean, LLC - 170
    Google LLC - 9
    OVH SAS - 9

    Top Clients:
    Unknown - 211

    Top Software:
    Unknown - 211

    Top Keyboards:
    Unknown - 211

    Top IP Classification:
    hosting - 201
    Unknown - 8
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  33. 2026-09-04 RDP #Honeypot IOCs - 211 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 170
    79.137.100.124 - 9
    45.156.128.61 - 6

    Top ASNs:
    AS14061 - 170
    AS396982 - 9
    AS16276 - 9

    Top Accounts:
    hello - 183
    Administr - 7
    root - 6

    Top ISPs:
    DigitalOcean, LLC - 170
    Google LLC - 9
    OVH SAS - 9

    Top Clients:
    Unknown - 211

    Top Software:
    Unknown - 211

    Top Keyboards:
    Unknown - 211

    Top IP Classification:
    hosting - 201
    Unknown - 8
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  34. 2026-09-04 RDP #Honeypot IOCs - 211 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 170
    79.137.100.124 - 9
    45.156.128.61 - 6

    Top ASNs:
    AS14061 - 170
    AS396982 - 9
    AS16276 - 9

    Top Accounts:
    hello - 183
    Administr - 7
    root - 6

    Top ISPs:
    DigitalOcean, LLC - 170
    Google LLC - 9
    OVH SAS - 9

    Top Clients:
    Unknown - 211

    Top Software:
    Unknown - 211

    Top Keyboards:
    Unknown - 211

    Top IP Classification:
    hosting - 201
    Unknown - 8
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  35. 2026-09-04 RDP #Honeypot IOCs - 211 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 170
    79.137.100.124 - 9
    45.156.128.61 - 6

    Top ASNs:
    AS14061 - 170
    AS396982 - 9
    AS16276 - 9

    Top Accounts:
    hello - 183
    Administr - 7
    root - 6

    Top ISPs:
    DigitalOcean, LLC - 170
    Google LLC - 9
    OVH SAS - 9

    Top Clients:
    Unknown - 211

    Top Software:
    Unknown - 211

    Top Keyboards:
    Unknown - 211

    Top IP Classification:
    hosting - 201
    Unknown - 8
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  36. Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)

    In this article, I break down how the vulnerability works, affected configurations, exploitation scenarios, and the mitigation steps organizations should take to protect their remote access infrastructure.

    denizhalil.com/2026/06/02/cve-

    #CyberSecurity #PaloAlto #GlobalProtect #PANOS #CVE20260257 #VulnerabilityManagement #ThreatDetection #NetworkSecurity #BlueTeam #RedTeam #InfoSec #DenizHalil

  37. Responder Tool for Network Credential Capture in Active Directory

    In this article, I cover how Responder works, common credential capture techniques, and practical mitigation strategies for defending Active Directory environments.

    denizhalil.com/2026/05/18/resp

    #CyberSecurity #ActiveDirectory #Responder #LLMNR #NTLM #CredentialCapture #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #EthicalHacking #DenizHalil

  38. UDP Network Monitoring with C++: A Comprehensive Guide

    In this guide, I demonstrate how to build a UDP packet sniffer in C++ using raw sockets, parse packet headers, and extract key data like source/destination IPs and ports.
    denizhalil.com/2025/07/14/udp-

    #CyberSecurity #NetworkMonitoring #PacketSniffer #UDP #Cpp #NetworkSecurity #InfoSec #BlueTeam #RedTeam #InfoSec #securityengineering #denizhalil