#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
2026-09-18 RDP #Honeypot IOCs - 756 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 510
104.64.217.122 - 87
118.69.191.219 - 42Top ASNs:
AS14061 - 510
AS63949 - 90
AS18403 - 42Top Accounts:
hello - 642
Administr - 18
ident - 18Top ISPs:
DigitalOcean, LLC - 510
Akamai Technologies, Inc. - 90
Vietnam Internet Network Information Center - 42Top Clients:
Unknown - 756Top Software:
Unknown - 756Top Keyboards:
Unknown - 756Top IP Classification:
hosting - 684
Unknown - 48
proxy - 18Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-18 RDP #Honeypot IOCs - 756 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 510
104.64.217.122 - 87
118.69.191.219 - 42Top ASNs:
AS14061 - 510
AS63949 - 90
AS18403 - 42Top Accounts:
hello - 642
Administr - 18
ident - 18Top ISPs:
DigitalOcean, LLC - 510
Akamai Technologies, Inc. - 90
Vietnam Internet Network Information Center - 42Top Clients:
Unknown - 756Top Software:
Unknown - 756Top Keyboards:
Unknown - 756Top IP Classification:
hosting - 684
Unknown - 48
proxy - 18Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-18 RDP #Honeypot IOCs - 756 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 510
104.64.217.122 - 87
118.69.191.219 - 42Top ASNs:
AS14061 - 510
AS63949 - 90
AS18403 - 42Top Accounts:
hello - 642
Administr - 18
ident - 18Top ISPs:
DigitalOcean, LLC - 510
Akamai Technologies, Inc. - 90
Vietnam Internet Network Information Center - 42Top Clients:
Unknown - 756Top Software:
Unknown - 756Top Keyboards:
Unknown - 756Top IP Classification:
hosting - 684
Unknown - 48
proxy - 18Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-18 RDP #Honeypot IOCs - 756 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 510
104.64.217.122 - 87
118.69.191.219 - 42Top ASNs:
AS14061 - 510
AS63949 - 90
AS18403 - 42Top Accounts:
hello - 642
Administr - 18
ident - 18Top ISPs:
DigitalOcean, LLC - 510
Akamai Technologies, Inc. - 90
Vietnam Internet Network Information Center - 42Top Clients:
Unknown - 756Top Software:
Unknown - 756Top Keyboards:
Unknown - 756Top IP Classification:
hosting - 684
Unknown - 48
proxy - 18Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-18 RDP #Honeypot IOCs - 504 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 340
104.64.217.122 - 58
118.69.191.219 - 28Top ASNs:
AS14061 - 340
AS63949 - 60
AS18403 - 28Top Accounts:
hello - 428
Administr - 12
ident - 12Top ISPs:
DigitalOcean, LLC - 340
Akamai Technologies, Inc. - 60
Vietnam Internet Network Information Center - 28Top Clients:
Unknown - 504Top Software:
Unknown - 504Top Keyboards:
Unknown - 504Top IP Classification:
hosting - 456
Unknown - 32
proxy - 12Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-18 RDP #Honeypot IOCs - 504 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 340
104.64.217.122 - 58
118.69.191.219 - 28Top ASNs:
AS14061 - 340
AS63949 - 60
AS18403 - 28Top Accounts:
hello - 428
Administr - 12
ident - 12Top ISPs:
DigitalOcean, LLC - 340
Akamai Technologies, Inc. - 60
Vietnam Internet Network Information Center - 28Top Clients:
Unknown - 504Top Software:
Unknown - 504Top Keyboards:
Unknown - 504Top IP Classification:
hosting - 456
Unknown - 32
proxy - 12Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-18 RDP #Honeypot IOCs - 504 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 340
104.64.217.122 - 58
118.69.191.219 - 28Top ASNs:
AS14061 - 340
AS63949 - 60
AS18403 - 28Top Accounts:
hello - 428
Administr - 12
ident - 12Top ISPs:
DigitalOcean, LLC - 340
Akamai Technologies, Inc. - 60
Vietnam Internet Network Information Center - 28Top Clients:
Unknown - 504Top Software:
Unknown - 504Top Keyboards:
Unknown - 504Top IP Classification:
hosting - 456
Unknown - 32
proxy - 12Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-18 RDP #Honeypot IOCs - 504 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 340
104.64.217.122 - 58
118.69.191.219 - 28Top ASNs:
AS14061 - 340
AS63949 - 60
AS18403 - 28Top Accounts:
hello - 428
Administr - 12
ident - 12Top ISPs:
DigitalOcean, LLC - 340
Akamai Technologies, Inc. - 60
Vietnam Internet Network Information Center - 28Top Clients:
Unknown - 504Top Software:
Unknown - 504Top Keyboards:
Unknown - 504Top IP Classification:
hosting - 456
Unknown - 32
proxy - 12Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-18 RDP #Honeypot IOCs - 252 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 170
104.64.217.122 - 29
118.69.191.219 - 14Top ASNs:
AS14061 - 170
AS63949 - 30
AS18403 - 14Top Accounts:
hello - 214
Administr - 6
ident - 6Top ISPs:
DigitalOcean, LLC - 170
Akamai Technologies, Inc. - 30
Vietnam Internet Network Information Center - 14Top Clients:
Unknown - 252Top Software:
Unknown - 252Top Keyboards:
Unknown - 252Top IP Classification:
hosting - 228
Unknown - 16
proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-18 RDP #Honeypot IOCs - 252 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 170
104.64.217.122 - 29
118.69.191.219 - 14Top ASNs:
AS14061 - 170
AS63949 - 30
AS18403 - 14Top Accounts:
hello - 214
Administr - 6
ident - 6Top ISPs:
DigitalOcean, LLC - 170
Akamai Technologies, Inc. - 30
Vietnam Internet Network Information Center - 14Top Clients:
Unknown - 252Top Software:
Unknown - 252Top Keyboards:
Unknown - 252Top IP Classification:
hosting - 228
Unknown - 16
proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-18 RDP #Honeypot IOCs - 252 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 170
104.64.217.122 - 29
118.69.191.219 - 14Top ASNs:
AS14061 - 170
AS63949 - 30
AS18403 - 14Top Accounts:
hello - 214
Administr - 6
ident - 6Top ISPs:
DigitalOcean, LLC - 170
Akamai Technologies, Inc. - 30
Vietnam Internet Network Information Center - 14Top Clients:
Unknown - 252Top Software:
Unknown - 252Top Keyboards:
Unknown - 252Top IP Classification:
hosting - 228
Unknown - 16
proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-18 RDP #Honeypot IOCs - 252 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
134.209.180.117 - 170
104.64.217.122 - 29
118.69.191.219 - 14Top ASNs:
AS14061 - 170
AS63949 - 30
AS18403 - 14Top Accounts:
hello - 214
Administr - 6
ident - 6Top ISPs:
DigitalOcean, LLC - 170
Akamai Technologies, Inc. - 30
Vietnam Internet Network Information Center - 14Top Clients:
Unknown - 252Top Software:
Unknown - 252Top Keyboards:
Unknown - 252Top IP Classification:
hosting - 228
Unknown - 16
proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
🔥 CRITICAL: CVE-2025-10035 in GoAnywhere MFT (7.6.x–7.8.x) enables unauthenticated remote command injection—actively exploited for ransomware (Medusa). Restrict admin console access, patch now, and monitor for IOCs. Details: https://radar.offseq.com/threat/from-detection-to-patch-fortra-reveals-full-timeli-d569181c #OffSeq #vuln #GoAnywhere #BlueTeam
-
🔥 CRITICAL: CVE-2025-10035 in GoAnywhere MFT (7.6.x–7.8.x) enables unauthenticated remote command injection—actively exploited for ransomware (Medusa). Restrict admin console access, patch now, and monitor for IOCs. Details: https://radar.offseq.com/threat/from-detection-to-patch-fortra-reveals-full-timeli-d569181c #OffSeq #vuln #GoAnywhere #BlueTeam
-
🔥 CRITICAL: CVE-2025-10035 in GoAnywhere MFT (7.6.x–7.8.x) enables unauthenticated remote command injection—actively exploited for ransomware (Medusa). Restrict admin console access, patch now, and monitor for IOCs. Details: https://radar.offseq.com/threat/from-detection-to-patch-fortra-reveals-full-timeli-d569181c #OffSeq #vuln #GoAnywhere #BlueTeam