#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
2026-09-05 RDP #Honeypot IOCs - 2556 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 2409
103.178.235.50 - 27
217.160.240.135 - 27Top ASNs:
Unknown - 2409
AS396982 - 48
AS140810 - 27Top Accounts:
hello - 2469
Administr - 12
0siivpyz - 12Top ISPs:
Private Customer - 2409
Google LLC - 48
VPSTTT - 27Top Clients:
Unknown - 2556Top Software:
Unknown - 2556Top Keyboards:
Unknown - 2556Top IP Classification:
proxy - 2409
hosting - 99
hosting & proxy - 39Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 2556 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 2409
103.178.235.50 - 27
217.160.240.135 - 27Top ASNs:
Unknown - 2409
AS396982 - 48
AS140810 - 27Top Accounts:
hello - 2469
Administr - 12
0siivpyz - 12Top ISPs:
Private Customer - 2409
Google LLC - 48
VPSTTT - 27Top Clients:
Unknown - 2556Top Software:
Unknown - 2556Top Keyboards:
Unknown - 2556Top IP Classification:
proxy - 2409
hosting - 99
hosting & proxy - 39Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 2556 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 2409
103.178.235.50 - 27
217.160.240.135 - 27Top ASNs:
Unknown - 2409
AS396982 - 48
AS140810 - 27Top Accounts:
hello - 2469
Administr - 12
0siivpyz - 12Top ISPs:
Private Customer - 2409
Google LLC - 48
VPSTTT - 27Top Clients:
Unknown - 2556Top Software:
Unknown - 2556Top Keyboards:
Unknown - 2556Top IP Classification:
proxy - 2409
hosting - 99
hosting & proxy - 39Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 2556 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 2409
103.178.235.50 - 27
217.160.240.135 - 27Top ASNs:
Unknown - 2409
AS396982 - 48
AS140810 - 27Top Accounts:
hello - 2469
Administr - 12
0siivpyz - 12Top ISPs:
Private Customer - 2409
Google LLC - 48
VPSTTT - 27Top Clients:
Unknown - 2556Top Software:
Unknown - 2556Top Keyboards:
Unknown - 2556Top IP Classification:
proxy - 2409
hosting - 99
hosting & proxy - 39Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 1704 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 1606
103.178.235.50 - 18
217.160.240.135 - 18Top ASNs:
Unknown - 1606
AS396982 - 32
AS140810 - 18Top Accounts:
hello - 1646
Administr - 8
0siivpyz - 8Top ISPs:
Private Customer - 1606
Google LLC - 32
VPSTTT - 18Top Clients:
Unknown - 1704Top Software:
Unknown - 1704Top Keyboards:
Unknown - 1704Top IP Classification:
proxy - 1606
hosting - 66
hosting & proxy - 26Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 1704 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 1606
103.178.235.50 - 18
217.160.240.135 - 18Top ASNs:
Unknown - 1606
AS396982 - 32
AS140810 - 18Top Accounts:
hello - 1646
Administr - 8
0siivpyz - 8Top ISPs:
Private Customer - 1606
Google LLC - 32
VPSTTT - 18Top Clients:
Unknown - 1704Top Software:
Unknown - 1704Top Keyboards:
Unknown - 1704Top IP Classification:
proxy - 1606
hosting - 66
hosting & proxy - 26Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 1704 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 1606
103.178.235.50 - 18
217.160.240.135 - 18Top ASNs:
Unknown - 1606
AS396982 - 32
AS140810 - 18Top Accounts:
hello - 1646
Administr - 8
0siivpyz - 8Top ISPs:
Private Customer - 1606
Google LLC - 32
VPSTTT - 18Top Clients:
Unknown - 1704Top Software:
Unknown - 1704Top Keyboards:
Unknown - 1704Top IP Classification:
proxy - 1606
hosting - 66
hosting & proxy - 26Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 1704 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 1606
103.178.235.50 - 18
217.160.240.135 - 18Top ASNs:
Unknown - 1606
AS396982 - 32
AS140810 - 18Top Accounts:
hello - 1646
Administr - 8
0siivpyz - 8Top ISPs:
Private Customer - 1606
Google LLC - 32
VPSTTT - 18Top Clients:
Unknown - 1704Top Software:
Unknown - 1704Top Keyboards:
Unknown - 1704Top IP Classification:
proxy - 1606
hosting - 66
hosting & proxy - 26Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 852 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 803
103.178.235.50 - 9
217.160.240.135 - 9Top ASNs:
Unknown - 803
AS396982 - 16
AS140810 - 9Top Accounts:
hello - 823
Administr - 4
0siivpyz - 4Top ISPs:
Private Customer - 803
Google LLC - 16
VPSTTT - 9Top Clients:
Unknown - 852Top Software:
Unknown - 852Top Keyboards:
Unknown - 852Top IP Classification:
proxy - 803
hosting - 33
hosting & proxy - 13Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 852 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 803
103.178.235.50 - 9
217.160.240.135 - 9Top ASNs:
Unknown - 803
AS396982 - 16
AS140810 - 9Top Accounts:
hello - 823
Administr - 4
0siivpyz - 4Top ISPs:
Private Customer - 803
Google LLC - 16
VPSTTT - 9Top Clients:
Unknown - 852Top Software:
Unknown - 852Top Keyboards:
Unknown - 852Top IP Classification:
proxy - 803
hosting - 33
hosting & proxy - 13Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 852 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 803
103.178.235.50 - 9
217.160.240.135 - 9Top ASNs:
Unknown - 803
AS396982 - 16
AS140810 - 9Top Accounts:
hello - 823
Administr - 4
0siivpyz - 4Top ISPs:
Private Customer - 803
Google LLC - 16
VPSTTT - 9Top Clients:
Unknown - 852Top Software:
Unknown - 852Top Keyboards:
Unknown - 852Top IP Classification:
proxy - 803
hosting - 33
hosting & proxy - 13Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 852 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 803
103.178.235.50 - 9
217.160.240.135 - 9Top ASNs:
Unknown - 803
AS396982 - 16
AS140810 - 9Top Accounts:
hello - 823
Administr - 4
0siivpyz - 4Top ISPs:
Private Customer - 803
Google LLC - 16
VPSTTT - 9Top Clients:
Unknown - 852Top Software:
Unknown - 852Top Keyboards:
Unknown - 852Top IP Classification:
proxy - 803
hosting - 33
hosting & proxy - 13Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
CW: blogging about Formbook's sysmon evasion
New blog post: Abstracting Evasion: How a Fileless Formbook Variant Blinds Kernel Telemetry https://amethyst.systems/blog/posts/abstracting-evasion-how-a-fileless-formbook-variant-blinds-kernel-telemetry/ #malwareanalysis #threatintelligence #blueteam
-
Microsoft’s new notetaker block in Teams will drive AI notetakers more invisible, known as bot free. Many of them already support this.
They install to the user folder. Some are Chrome extensions. And a few gleefully tout how invisible they are.
Hunt in the windows registry
\ConsentStore\microphone\NonPackageto see what could be hijacking the mic and recording meetings.Expanded block list forthcoming. Then maybe a Windows & Mac sensor. What a ridiculous blight.
-
We’re excited to announce that BC Security is teaching at the first-ever Black Hat India! 🇮🇳
Join us on Oct. 27–30 in Bengaluru for the inaugural event and our brand-new course: Attacking and Defending AI Agents.
🔥 Early Bird pricing is live, but seats are moving fast! Reserve your seat before it fills up:
https://www.blackhat-india.com/training-schedule#attacking-and-defending-ai-agents-49915#BlackHatIndia #AIAgents #MITREATLAS #RedTeam #BlueTeam #AppSec #CloudSecurity #BCSecurity
-
I looked at reasons why Palo Alto Cortex uses this very old piece of public domain software in their EDR agent, and what can we learn from it.
https://death.sk/posts/clips_detection_engine/
#blueteam #dfir #xdr #edr -
who else is going to @BlueTeamCon :D
-
New by me: CybersecKyle Security How-To Series: Light Offensive to Think Defensively, Part 4 - From Findings to Fixes with a Short Report
#Cybersecurity #InfoSec #RiskManagement #BlueTeam #CybersecKyleHowTo
-
I spent the last few months building a CTF.
WATCHLIST: 24 challenges, one investigation, 24 hours.
DNS forensics. Memory analysis. A live honeypot. Disk images. OSINT.
Sep 19. Teams 1-6. $750 first place.
If you have been meaning to try CTFs but thought they were too technical, this one has entry points built for you.
ctf.xposedornot.com
-
Added
telegra.phto my PasteBin block list as it's been observed by GenDigital for C2 dead drops:https://github.com/BadSamuraiDev/bs-lists/blob/main/pastebins.txt
-
New by me: CybersecKyle Security How-To Series: Light Offensive to Think Defensively, Part 1 - Build a Safe Lab with Snapshots
-
We've uploaded 75+ production-ready scripts for #Security, #DevOps, and automation to save you hours of writing boilerplate code. Best part? We are dropping new tutorials and tools every single day!
Find your next time-saver here: https://www.valtersit.com/python #CVE #infosec #SysAdmin #cybersecurity #Linux #devops #developer #git #github #gitlab #blueteam #python #hackers #ubuntu #debian #ukraine #spain #ireland #uk #canada #finland #lithuania #ireland #hungary #denmark #norway -
We have updated https://www.valtersit.com/methodology/ with the actual information #CVE #Dokploy #infosec #SysAdmin #cybersecurity #Linux #infosec #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #ethicalhacking #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #ukraine #spain #ireland #unitedkingdom #canada #finland #estonia #lithuania #ireland #hungary #denmark #norway #malta
-
Three attacks this week didn't break the network trust signals a SOC leans on. They just hid inside them.
A 633-server proxy network (CanOworms) so a state actor and a card fraudster leave through the same clean IP. Midnight Blizzard on hotel Wi-Fi captive portals serving a fake M365 login. And a PoC running code on Cloudflare's own edge.
The address tells you where traffic sits, not who's driving it.
-
RE: https://infosec.exchange/@BleepingComputer/117079181932676633
Assuming you don’t need access to the Polygon blockchain from your business network, protect your systems by block the named public RPC endpoints using DNS, NGFW or web security proxy:
polygon-bor-rpc.publicnode[.]com
polygon.drpc[.]org
polygon-pokt.nodies[.]app
polygon-rpc[.]com
1rpc[.]io
polygon.meowrpc[.]com -
🛡️ HAVOC C2 — DEFENDER CHEAT SHEET
Havoc is a powerful Command & Control framework used in authorized red-team operations. 🔴⚡ Understanding how C2 infrastructure, agents and communications behave can also help defenders recognize suspicious activity and improve detection. 🔍
Learn the framework. Hunt the signals. Strengthen your defenses. 🔐
💬 Comment “HAVOC” if you want more cybersecurity cheat sheets.
-