home.social

#blueteam — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.

  1. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  2. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  3. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  4. PaperCut NG/MF hit by CRITICAL zero-days (CVE-2026-82078, CVE-2026-81578) exploited in AI-driven attacks. Remote code exec, credential theft, & domain admin escalation seen on 440+ deployments. Patch ASAP. Details: radar.offseq.com/threat/paperc #OffSeq #PaperCut #ZeroDay #BlueTeam

  5. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  6. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  7. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  8. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  9. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  10. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  11. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  12. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  13. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  14. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  15. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  16. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  17. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  18. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  19. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  20. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  21. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  22. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  23. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  24. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  25. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  26. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  27. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  28. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  29. Palo: "Almost Half of Malware Samples Communicate Direct to IP"

    Also Palo: "We don't understand why you want to Block-by-ASN."

    unit42.paloaltonetworks.com/ma

    #blueteam #asn #paloaltonetworks #unit42

  30. Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)

    In this article, I break down how the vulnerability works, affected configurations, exploitation scenarios, and the mitigation steps organizations should take to protect their remote access infrastructure.

    denizhalil.com/2026/06/02/cve-

    #CyberSecurity #PaloAlto #GlobalProtect #PANOS #CVE20260257 #VulnerabilityManagement #ThreatDetection #NetworkSecurity #BlueTeam #RedTeam #InfoSec #DenizHalil

  31. Responder Tool for Network Credential Capture in Active Directory

    In this article, I cover how Responder works, common credential capture techniques, and practical mitigation strategies for defending Active Directory environments.

    denizhalil.com/2026/05/18/resp

    #CyberSecurity #ActiveDirectory #Responder #LLMNR #NTLM #CredentialCapture #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #EthicalHacking #DenizHalil

  32. UDP Network Monitoring with C++: A Comprehensive Guide

    In this guide, I demonstrate how to build a UDP packet sniffer in C++ using raw sockets, parse packet headers, and extract key data like source/destination IPs and ports.
    denizhalil.com/2025/07/14/udp-

    #CyberSecurity #NetworkMonitoring #PacketSniffer #UDP #Cpp #NetworkSecurity #InfoSec #BlueTeam #RedTeam #InfoSec #securityengineering #denizhalil

  33. What is DCSync Attack and Mimikatz Usage in Active Directory

    One of the most critical attacks in Active Directory environments, DCSync, allows attackers to impersonate a Domain Controller and extract password hashes through replication abuse.

    #CyberSecurity #ActiveDirectory #DCSync #RedTeam #BlueTeam #InfoSec #Pentesting #SOC #ThreatDetection #WindowsSecurity #EthicalHacking #ITSecurity #NetworkSecurity #SecurityOperations #DenizHalil

    denizhalil.com/2026/03/27/dcsy

  34. #GammaGroup clients use

    🔎 UDP port 123 🔍

    as default #RedTeam data #exfiltration ports

    #gammagroup #finfsher #finspy #infosec #memes
    #BlueTeam
    #statesponsoredmalware ☣️🤳🐐☣️

    Update: Add logging before implementing BLOCKING the #exfil shim, obviously. ☣️🤳🔎🐐☣️🔍🧐

  35. Good day everyone! This Thursday's #miniCTF is brought to you by the Lookout professionals Kristina Balaam and Justin Albrecht. In their latest threat intel they provide details of the #WyrmSpy and #DragonEgg Android surveillanceware that is attributed to APT41, a group that is based out of the People's Republic of China. These malware masquerade as legitimate apps on the Google play store to trick their victims to downloading and installing them. Enjoy and Happy Hunting!

    Link in the comments

    ***Let's step this up a notch! I am going to give you just the Tactic, can you fill in the techniques and sub-techniques? Good luck!***

    Notable MITRE ATT&CK TTPs:
    Mobile Matrix
    TA0035 - Collection

    TA0027 - Initial Access

    #CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting #readoftheday

    Lookout Attributes Advanced Android Surveillanceware to Chinese Espionage Group APT41
    lookout.com/threat-intelligenc