home.social

#blueteam — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.

  1. 2026-09-05 RDP #Honeypot IOCs - 2556 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 2409
    103.178.235.50 - 27
    217.160.240.135 - 27

    Top ASNs:
    Unknown - 2409
    AS396982 - 48
    AS140810 - 27

    Top Accounts:
    hello - 2469
    Administr - 12
    0siivpyz - 12

    Top ISPs:
    Private Customer - 2409
    Google LLC - 48
    VPSTTT - 27

    Top Clients:
    Unknown - 2556

    Top Software:
    Unknown - 2556

    Top Keyboards:
    Unknown - 2556

    Top IP Classification:
    proxy - 2409
    hosting - 99
    hosting & proxy - 39

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  2. 2026-09-05 RDP #Honeypot IOCs - 2556 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 2409
    103.178.235.50 - 27
    217.160.240.135 - 27

    Top ASNs:
    Unknown - 2409
    AS396982 - 48
    AS140810 - 27

    Top Accounts:
    hello - 2469
    Administr - 12
    0siivpyz - 12

    Top ISPs:
    Private Customer - 2409
    Google LLC - 48
    VPSTTT - 27

    Top Clients:
    Unknown - 2556

    Top Software:
    Unknown - 2556

    Top Keyboards:
    Unknown - 2556

    Top IP Classification:
    proxy - 2409
    hosting - 99
    hosting & proxy - 39

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  3. 2026-09-05 RDP #Honeypot IOCs - 2556 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 2409
    103.178.235.50 - 27
    217.160.240.135 - 27

    Top ASNs:
    Unknown - 2409
    AS396982 - 48
    AS140810 - 27

    Top Accounts:
    hello - 2469
    Administr - 12
    0siivpyz - 12

    Top ISPs:
    Private Customer - 2409
    Google LLC - 48
    VPSTTT - 27

    Top Clients:
    Unknown - 2556

    Top Software:
    Unknown - 2556

    Top Keyboards:
    Unknown - 2556

    Top IP Classification:
    proxy - 2409
    hosting - 99
    hosting & proxy - 39

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  4. 2026-09-05 RDP #Honeypot IOCs - 2556 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 2409
    103.178.235.50 - 27
    217.160.240.135 - 27

    Top ASNs:
    Unknown - 2409
    AS396982 - 48
    AS140810 - 27

    Top Accounts:
    hello - 2469
    Administr - 12
    0siivpyz - 12

    Top ISPs:
    Private Customer - 2409
    Google LLC - 48
    VPSTTT - 27

    Top Clients:
    Unknown - 2556

    Top Software:
    Unknown - 2556

    Top Keyboards:
    Unknown - 2556

    Top IP Classification:
    proxy - 2409
    hosting - 99
    hosting & proxy - 39

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  5. 2026-09-05 RDP #Honeypot IOCs - 1704 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 1606
    103.178.235.50 - 18
    217.160.240.135 - 18

    Top ASNs:
    Unknown - 1606
    AS396982 - 32
    AS140810 - 18

    Top Accounts:
    hello - 1646
    Administr - 8
    0siivpyz - 8

    Top ISPs:
    Private Customer - 1606
    Google LLC - 32
    VPSTTT - 18

    Top Clients:
    Unknown - 1704

    Top Software:
    Unknown - 1704

    Top Keyboards:
    Unknown - 1704

    Top IP Classification:
    proxy - 1606
    hosting - 66
    hosting & proxy - 26

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  6. 2026-09-05 RDP #Honeypot IOCs - 1704 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 1606
    103.178.235.50 - 18
    217.160.240.135 - 18

    Top ASNs:
    Unknown - 1606
    AS396982 - 32
    AS140810 - 18

    Top Accounts:
    hello - 1646
    Administr - 8
    0siivpyz - 8

    Top ISPs:
    Private Customer - 1606
    Google LLC - 32
    VPSTTT - 18

    Top Clients:
    Unknown - 1704

    Top Software:
    Unknown - 1704

    Top Keyboards:
    Unknown - 1704

    Top IP Classification:
    proxy - 1606
    hosting - 66
    hosting & proxy - 26

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  7. 2026-09-05 RDP #Honeypot IOCs - 1704 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 1606
    103.178.235.50 - 18
    217.160.240.135 - 18

    Top ASNs:
    Unknown - 1606
    AS396982 - 32
    AS140810 - 18

    Top Accounts:
    hello - 1646
    Administr - 8
    0siivpyz - 8

    Top ISPs:
    Private Customer - 1606
    Google LLC - 32
    VPSTTT - 18

    Top Clients:
    Unknown - 1704

    Top Software:
    Unknown - 1704

    Top Keyboards:
    Unknown - 1704

    Top IP Classification:
    proxy - 1606
    hosting - 66
    hosting & proxy - 26

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  8. 2026-09-05 RDP #Honeypot IOCs - 1704 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 1606
    103.178.235.50 - 18
    217.160.240.135 - 18

    Top ASNs:
    Unknown - 1606
    AS396982 - 32
    AS140810 - 18

    Top Accounts:
    hello - 1646
    Administr - 8
    0siivpyz - 8

    Top ISPs:
    Private Customer - 1606
    Google LLC - 32
    VPSTTT - 18

    Top Clients:
    Unknown - 1704

    Top Software:
    Unknown - 1704

    Top Keyboards:
    Unknown - 1704

    Top IP Classification:
    proxy - 1606
    hosting - 66
    hosting & proxy - 26

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  9. 2026-09-05 RDP #Honeypot IOCs - 852 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 803
    103.178.235.50 - 9
    217.160.240.135 - 9

    Top ASNs:
    Unknown - 803
    AS396982 - 16
    AS140810 - 9

    Top Accounts:
    hello - 823
    Administr - 4
    0siivpyz - 4

    Top ISPs:
    Private Customer - 803
    Google LLC - 16
    VPSTTT - 9

    Top Clients:
    Unknown - 852

    Top Software:
    Unknown - 852

    Top Keyboards:
    Unknown - 852

    Top IP Classification:
    proxy - 803
    hosting - 33
    hosting & proxy - 13

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  10. 2026-09-05 RDP #Honeypot IOCs - 852 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 803
    103.178.235.50 - 9
    217.160.240.135 - 9

    Top ASNs:
    Unknown - 803
    AS396982 - 16
    AS140810 - 9

    Top Accounts:
    hello - 823
    Administr - 4
    0siivpyz - 4

    Top ISPs:
    Private Customer - 803
    Google LLC - 16
    VPSTTT - 9

    Top Clients:
    Unknown - 852

    Top Software:
    Unknown - 852

    Top Keyboards:
    Unknown - 852

    Top IP Classification:
    proxy - 803
    hosting - 33
    hosting & proxy - 13

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  11. 2026-09-05 RDP #Honeypot IOCs - 852 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 803
    103.178.235.50 - 9
    217.160.240.135 - 9

    Top ASNs:
    Unknown - 803
    AS396982 - 16
    AS140810 - 9

    Top Accounts:
    hello - 823
    Administr - 4
    0siivpyz - 4

    Top ISPs:
    Private Customer - 803
    Google LLC - 16
    VPSTTT - 9

    Top Clients:
    Unknown - 852

    Top Software:
    Unknown - 852

    Top Keyboards:
    Unknown - 852

    Top IP Classification:
    proxy - 803
    hosting - 33
    hosting & proxy - 13

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  12. 2026-09-05 RDP #Honeypot IOCs - 852 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    141.11.96.210 - 803
    103.178.235.50 - 9
    217.160.240.135 - 9

    Top ASNs:
    Unknown - 803
    AS396982 - 16
    AS140810 - 9

    Top Accounts:
    hello - 823
    Administr - 4
    0siivpyz - 4

    Top ISPs:
    Private Customer - 803
    Google LLC - 16
    VPSTTT - 9

    Top Clients:
    Unknown - 852

    Top Software:
    Unknown - 852

    Top Keyboards:
    Unknown - 852

    Top IP Classification:
    proxy - 803
    hosting - 33
    hosting & proxy - 13

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  13. SOC-Analyst Lern- & Praxishandbuch

    Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  14. SOC-Analyst Lern- & Praxishandbuch

    Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  15. SOC-Analyst Lern- & Praxishandbuch

    Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  16. SOC-Analyst Lern- & Praxishandbuch

    Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  17. SOC-Analyst Lern- & Praxishandbuch

    Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  18. Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.

    Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.

    Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.

    Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.

    Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:

    🔗 app.filen.io/#/d/7b65fb81-b0fc

    :boost_ok:

    #CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity

  19. Empty scoreboard.
    80 teams.
    14 days.

    Someone's name goes first.

    WATCHLIST is a free 24-hour CTF built around one investigation.

    24 challenges - memory forensics,
    disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.

    All connected to the same case.

    First blood on each challenge gets logged permanently
    by The Machine.

    Sep 19 03:30 UTC. Free entry. Teams 1-6.
    Prizes: $750 / $500 / $250

    ctf.xposedornot.com
    CTFtime: ctftime.org/event/3326

    #CTF #DFIR #forensics #infosec #blueteam

  20. Empty scoreboard.
    80 teams.
    14 days.

    Someone's name goes first.

    WATCHLIST is a free 24-hour CTF built around one investigation.

    24 challenges - memory forensics,
    disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.

    All connected to the same case.

    First blood on each challenge gets logged permanently
    by The Machine.

    Sep 19 03:30 UTC. Free entry. Teams 1-6.
    Prizes: $750 / $500 / $250

    ctf.xposedornot.com
    CTFtime: ctftime.org/event/3326

    #CTF #DFIR #forensics #infosec #blueteam

  21. Empty scoreboard.
    80 teams.
    14 days.

    Someone's name goes first.

    WATCHLIST is a free 24-hour CTF built around one investigation.

    24 challenges - memory forensics,
    disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.

    All connected to the same case.

    First blood on each challenge gets logged permanently
    by The Machine.

    Sep 19 03:30 UTC. Free entry. Teams 1-6.
    Prizes: $750 / $500 / $250

    ctf.xposedornot.com
    CTFtime: ctftime.org/event/3326

    #CTF #DFIR #forensics #infosec #blueteam

  22. Empty scoreboard.
    80 teams.
    14 days.

    Someone's name goes first.

    WATCHLIST is a free 24-hour CTF built around one investigation.

    24 challenges - memory forensics,
    disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.

    All connected to the same case.

    First blood on each challenge gets logged permanently
    by The Machine.

    Sep 19 03:30 UTC. Free entry. Teams 1-6.
    Prizes: $750 / $500 / $250

    ctf.xposedornot.com
    CTFtime: ctftime.org/event/3326

    #CTF #DFIR #forensics #infosec #blueteam

  23. Empty scoreboard.
    80 teams.
    14 days.

    Someone's name goes first.

    WATCHLIST is a free 24-hour CTF built around one investigation.

    24 challenges - memory forensics,
    disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.

    All connected to the same case.

    First blood on each challenge gets logged permanently
    by The Machine.

    Sep 19 03:30 UTC. Free entry. Teams 1-6.
    Prizes: $750 / $500 / $250

    ctf.xposedornot.com
    CTFtime: ctftime.org/event/3326

    #CTF #DFIR #forensics #infosec #blueteam

  24. 2026-09-04 RDP #Honeypot IOCs - 633 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 510
    79.137.100.124 - 27
    45.156.128.61 - 18

    Top ASNs:
    AS14061 - 510
    AS396982 - 27
    AS16276 - 27

    Top Accounts:
    hello - 549
    Administr - 21
    root - 18

    Top ISPs:
    DigitalOcean, LLC - 510
    Google LLC - 27
    OVH SAS - 27

    Top Clients:
    Unknown - 633

    Top Software:
    Unknown - 633

    Top Keyboards:
    Unknown - 633

    Top IP Classification:
    hosting - 603
    Unknown - 24
    hosting & proxy - 6

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  25. 2026-09-04 RDP #Honeypot IOCs - 633 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 510
    79.137.100.124 - 27
    45.156.128.61 - 18

    Top ASNs:
    AS14061 - 510
    AS396982 - 27
    AS16276 - 27

    Top Accounts:
    hello - 549
    Administr - 21
    root - 18

    Top ISPs:
    DigitalOcean, LLC - 510
    Google LLC - 27
    OVH SAS - 27

    Top Clients:
    Unknown - 633

    Top Software:
    Unknown - 633

    Top Keyboards:
    Unknown - 633

    Top IP Classification:
    hosting - 603
    Unknown - 24
    hosting & proxy - 6

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  26. 2026-09-04 RDP #Honeypot IOCs - 633 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 510
    79.137.100.124 - 27
    45.156.128.61 - 18

    Top ASNs:
    AS14061 - 510
    AS396982 - 27
    AS16276 - 27

    Top Accounts:
    hello - 549
    Administr - 21
    root - 18

    Top ISPs:
    DigitalOcean, LLC - 510
    Google LLC - 27
    OVH SAS - 27

    Top Clients:
    Unknown - 633

    Top Software:
    Unknown - 633

    Top Keyboards:
    Unknown - 633

    Top IP Classification:
    hosting - 603
    Unknown - 24
    hosting & proxy - 6

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  27. 2026-09-04 RDP #Honeypot IOCs - 633 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 510
    79.137.100.124 - 27
    45.156.128.61 - 18

    Top ASNs:
    AS14061 - 510
    AS396982 - 27
    AS16276 - 27

    Top Accounts:
    hello - 549
    Administr - 21
    root - 18

    Top ISPs:
    DigitalOcean, LLC - 510
    Google LLC - 27
    OVH SAS - 27

    Top Clients:
    Unknown - 633

    Top Software:
    Unknown - 633

    Top Keyboards:
    Unknown - 633

    Top IP Classification:
    hosting - 603
    Unknown - 24
    hosting & proxy - 6

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  28. 2026-09-04 RDP #Honeypot IOCs - 422 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 340
    79.137.100.124 - 18
    45.156.128.61 - 12

    Top ASNs:
    AS14061 - 340
    AS396982 - 18
    AS16276 - 18

    Top Accounts:
    hello - 366
    Administr - 14
    root - 12

    Top ISPs:
    DigitalOcean, LLC - 340
    Google LLC - 18
    OVH SAS - 18

    Top Clients:
    Unknown - 422

    Top Software:
    Unknown - 422

    Top Keyboards:
    Unknown - 422

    Top IP Classification:
    hosting - 402
    Unknown - 16
    hosting & proxy - 4

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  29. 2026-09-04 RDP #Honeypot IOCs - 422 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 340
    79.137.100.124 - 18
    45.156.128.61 - 12

    Top ASNs:
    AS14061 - 340
    AS396982 - 18
    AS16276 - 18

    Top Accounts:
    hello - 366
    Administr - 14
    root - 12

    Top ISPs:
    DigitalOcean, LLC - 340
    Google LLC - 18
    OVH SAS - 18

    Top Clients:
    Unknown - 422

    Top Software:
    Unknown - 422

    Top Keyboards:
    Unknown - 422

    Top IP Classification:
    hosting - 402
    Unknown - 16
    hosting & proxy - 4

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  30. 2026-09-04 RDP #Honeypot IOCs - 422 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 340
    79.137.100.124 - 18
    45.156.128.61 - 12

    Top ASNs:
    AS14061 - 340
    AS396982 - 18
    AS16276 - 18

    Top Accounts:
    hello - 366
    Administr - 14
    root - 12

    Top ISPs:
    DigitalOcean, LLC - 340
    Google LLC - 18
    OVH SAS - 18

    Top Clients:
    Unknown - 422

    Top Software:
    Unknown - 422

    Top Keyboards:
    Unknown - 422

    Top IP Classification:
    hosting - 402
    Unknown - 16
    hosting & proxy - 4

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  31. 2026-09-04 RDP #Honeypot IOCs - 422 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 340
    79.137.100.124 - 18
    45.156.128.61 - 12

    Top ASNs:
    AS14061 - 340
    AS396982 - 18
    AS16276 - 18

    Top Accounts:
    hello - 366
    Administr - 14
    root - 12

    Top ISPs:
    DigitalOcean, LLC - 340
    Google LLC - 18
    OVH SAS - 18

    Top Clients:
    Unknown - 422

    Top Software:
    Unknown - 422

    Top Keyboards:
    Unknown - 422

    Top IP Classification:
    hosting - 402
    Unknown - 16
    hosting & proxy - 4

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  32. 2026-09-04 RDP #Honeypot IOCs - 211 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 170
    79.137.100.124 - 9
    45.156.128.61 - 6

    Top ASNs:
    AS14061 - 170
    AS396982 - 9
    AS16276 - 9

    Top Accounts:
    hello - 183
    Administr - 7
    root - 6

    Top ISPs:
    DigitalOcean, LLC - 170
    Google LLC - 9
    OVH SAS - 9

    Top Clients:
    Unknown - 211

    Top Software:
    Unknown - 211

    Top Keyboards:
    Unknown - 211

    Top IP Classification:
    hosting - 201
    Unknown - 8
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  33. 2026-09-04 RDP #Honeypot IOCs - 211 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 170
    79.137.100.124 - 9
    45.156.128.61 - 6

    Top ASNs:
    AS14061 - 170
    AS396982 - 9
    AS16276 - 9

    Top Accounts:
    hello - 183
    Administr - 7
    root - 6

    Top ISPs:
    DigitalOcean, LLC - 170
    Google LLC - 9
    OVH SAS - 9

    Top Clients:
    Unknown - 211

    Top Software:
    Unknown - 211

    Top Keyboards:
    Unknown - 211

    Top IP Classification:
    hosting - 201
    Unknown - 8
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  34. 2026-09-04 RDP #Honeypot IOCs - 211 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 170
    79.137.100.124 - 9
    45.156.128.61 - 6

    Top ASNs:
    AS14061 - 170
    AS396982 - 9
    AS16276 - 9

    Top Accounts:
    hello - 183
    Administr - 7
    root - 6

    Top ISPs:
    DigitalOcean, LLC - 170
    Google LLC - 9
    OVH SAS - 9

    Top Clients:
    Unknown - 211

    Top Software:
    Unknown - 211

    Top Keyboards:
    Unknown - 211

    Top IP Classification:
    hosting - 201
    Unknown - 8
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  35. 2026-09-04 RDP #Honeypot IOCs - 211 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    209.38.73.59 - 170
    79.137.100.124 - 9
    45.156.128.61 - 6

    Top ASNs:
    AS14061 - 170
    AS396982 - 9
    AS16276 - 9

    Top Accounts:
    hello - 183
    Administr - 7
    root - 6

    Top ISPs:
    DigitalOcean, LLC - 170
    Google LLC - 9
    OVH SAS - 9

    Top Clients:
    Unknown - 211

    Top Software:
    Unknown - 211

    Top Keyboards:
    Unknown - 211

    Top IP Classification:
    hosting - 201
    Unknown - 8
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  36. DEF CON Training Las Vegas 2026 Course Lineup is now live!

    We’re thrilled to share the full slate of courses for DEF CON Training in Las Vegas! Join us in August for hands-on courses led by top practitioners from across the community.

    For the first time ever, we will offer 1-day, 2-day, and 4-day classes! Whatever your needs, whether you’re sharpening fundamentals or diving deep into advanced techniques, there’s something here for you!

    Explore the full lineup and course details here: training.defcon.org/

    Explore our offerings, grab your seat, and get ready to learn and build.

    #DEFCON #DEFCONTraining #LasVegas #DC34 #Cybersecurity #Training #InfoSec #HackerCommunity #RedTeam #BlueTeam #AI #CyberTraining

  37. DEF CON Training Las Vegas 2026 Course Lineup is now live!

    We’re thrilled to share the full slate of courses for DEF CON Training in Las Vegas! Join us in August for hands-on courses led by top practitioners from across the community.

    For the first time ever, we will offer 1-day, 2-day, and 4-day classes! Whatever your needs, whether you’re sharpening fundamentals or diving deep into advanced techniques, there’s something here for you!

    Explore the full lineup and course details here: training.defcon.org/

    Explore our offerings, grab your seat, and get ready to learn and build.

    #DEFCON #DEFCONTraining #LasVegas #DC34 #Cybersecurity #Training #InfoSec #HackerCommunity #RedTeam #BlueTeam #AI #CyberTraining

  38. DEF CON Training Las Vegas 2026 Course Lineup is now live!

    We’re thrilled to share the full slate of courses for DEF CON Training in Las Vegas! Join us in August for hands-on courses led by top practitioners from across the community.

    For the first time ever, we will offer 1-day, 2-day, and 4-day classes! Whatever your needs, whether you’re sharpening fundamentals or diving deep into advanced techniques, there’s something here for you!

    Explore the full lineup and course details here: training.defcon.org/

    Explore our offerings, grab your seat, and get ready to learn and build.

    #DEFCON #DEFCONTraining #LasVegas #DC34 #Cybersecurity #Training #InfoSec #HackerCommunity #RedTeam #BlueTeam #AI #CyberTraining

  39. DEF CON Training Las Vegas 2026 Course Lineup is now live!

    We’re thrilled to share the full slate of courses for DEF CON Training in Las Vegas! Join us in August for hands-on courses led by top practitioners from across the community.

    For the first time ever, we will offer 1-day, 2-day, and 4-day classes! Whatever your needs, whether you’re sharpening fundamentals or diving deep into advanced techniques, there’s something here for you!

    Explore the full lineup and course details here: training.defcon.org/

    Explore our offerings, grab your seat, and get ready to learn and build.

    #DEFCON #DEFCONTraining #LasVegas #DC34 #Cybersecurity #Training #InfoSec #HackerCommunity #RedTeam #BlueTeam #AI #CyberTraining

  40. DEF CON Training Las Vegas 2026 Course Lineup is now live!

    We’re thrilled to share the full slate of courses for DEF CON Training in Las Vegas! Join us in August for hands-on courses led by top practitioners from across the community.

    For the first time ever, we will offer 1-day, 2-day, and 4-day classes! Whatever your needs, whether you’re sharpening fundamentals or diving deep into advanced techniques, there’s something here for you!

    Explore the full lineup and course details here: training.defcon.org/

    Explore our offerings, grab your seat, and get ready to learn and build.

    #DEFCON #DEFCONTraining #LasVegas #DC34 #Cybersecurity #Training #InfoSec #HackerCommunity #RedTeam #BlueTeam #AI #CyberTraining

  41. Bitwarden introduces “Cupid Vault” — a 2-user shared Organization vault available on the free plan.

    Security considerations:
    • End-to-end encryption
    • Vault isolation from personal storage
    • Fingerprint phrase verification (anti-ATMIT enrollment control)
    • Bidirectional sharing
    • Revocable access

    Limitations: 2 users, 2 collections. No RBAC granularity (reserved for paid tiers).

    Question for practitioners:
    Is secure shared vault architecture preferable to federated identity or delegated access models for small trust groups?

    Source: bleepingcomputer.com/news/secu

    Join the discussion below.
    Follow @technadu for actionable security insights.

    #InfoSec #PasswordManagement #ZeroTrust #Encryption #AccessControl #CyberDefense #Authentication #SecurityArchitecture #BlueTeam #PrivacyEngineering

  42. The DEF CON Training Singapore course lineup is now live!

    We’re thrilled to share the full slate of courses for the first-ever DEF CON Training Singapore! Join us in April for hands-on, skills-forward trainings led by top practitioners from across the community. Whether you’re sharpening fundamentals or diving deep into emerging threats and advanced techniques, there’s something here for you!

    Explore the full lineup and course details here:
    training.defcon.org/collection

    Spots go fast, so take a look, grab your seat, and get ready to learn and build.

    Early bird pricing available now until February 8. See you in Singapore 🇸🇬

    #DEFCON #DEFCONTraining #Singapore #DCSG #Cybersecurity #Training #InfoSec #HackerCommunity #RedTeam #BlueTeam #AI #CyberTraining

  43. The DEF CON Training Singapore course lineup is now live!

    We’re thrilled to share the full slate of courses for the first-ever DEF CON Training Singapore! Join us in April for hands-on, skills-forward trainings led by top practitioners from across the community. Whether you’re sharpening fundamentals or diving deep into emerging threats and advanced techniques, there’s something here for you!

    Explore the full lineup and course details here:
    training.defcon.org/collection

    Spots go fast, so take a look, grab your seat, and get ready to learn and build.

    Early bird pricing available now until February 8. See you in Singapore 🇸🇬

    #DEFCON #DEFCONTraining #Singapore #DCSG #Cybersecurity #Training #InfoSec #HackerCommunity #RedTeam #BlueTeam #AI #CyberTraining

  44. The DEF CON Training Singapore course lineup is now live!

    We’re thrilled to share the full slate of courses for the first-ever DEF CON Training Singapore! Join us in April for hands-on, skills-forward trainings led by top practitioners from across the community. Whether you’re sharpening fundamentals or diving deep into emerging threats and advanced techniques, there’s something here for you!

    Explore the full lineup and course details here:
    training.defcon.org/collection

    Spots go fast, so take a look, grab your seat, and get ready to learn and build.

    Early bird pricing available now until February 8. See you in Singapore 🇸🇬

    #DEFCON #DEFCONTraining #Singapore #DCSG #Cybersecurity #Training #InfoSec #HackerCommunity #RedTeam #BlueTeam #AI #CyberTraining

  45. The DEF CON Training Singapore course lineup is now live!

    We’re thrilled to share the full slate of courses for the first-ever DEF CON Training Singapore! Join us in April for hands-on, skills-forward trainings led by top practitioners from across the community. Whether you’re sharpening fundamentals or diving deep into emerging threats and advanced techniques, there’s something here for you!

    Explore the full lineup and course details here:
    training.defcon.org/collection

    Spots go fast, so take a look, grab your seat, and get ready to learn and build.

    Early bird pricing available now until February 8. See you in Singapore 🇸🇬

    #DEFCON #DEFCONTraining #Singapore #DCSG #Cybersecurity #Training #InfoSec #HackerCommunity #RedTeam #BlueTeam #AI #CyberTraining

  46. The DEF CON Training Singapore course lineup is now live!

    We’re thrilled to share the full slate of courses for the first-ever DEF CON Training Singapore! Join us in April for hands-on, skills-forward trainings led by top practitioners from across the community. Whether you’re sharpening fundamentals or diving deep into emerging threats and advanced techniques, there’s something here for you!

    Explore the full lineup and course details here:
    training.defcon.org/collection

    Spots go fast, so take a look, grab your seat, and get ready to learn and build.

    Early bird pricing available now until February 8. See you in Singapore 🇸🇬

    #DEFCON #DEFCONTraining #Singapore #DCSG #Cybersecurity #Training #InfoSec #HackerCommunity #RedTeam #BlueTeam #AI #CyberTraining

  47. New blog post live for my Sentinel Saturday series! :1000: :apartyblobcat:
    Read the blog 👉 marshsecurity.org/sentinel-sat

    In this post, I explore the power of using Microsoft Sentinel Tasks as part of your automation workflows.

    Most teams aren’t getting the full #value out of Tasks in Microsoft Sentinel. Are you? When you combine Sentinel Tasks with automation, they become a game-changer.

    - Auto-create tasks when automation fails (so nothing slips through the cracks)
    - Auto-complete tasks when automation succeeds
    - Use tasks to verify automation outcomes
    - Build engineering feedback loops and automation #QA

    Read the blog 👉 marshsecurity.org/sentinel-sat

    #MicrosoftSentinel #SentinelAutomation #CyberSecurity #SOCAutomation
    #CloudSecurity #AzureSecurity #SIEM #SecOps #Automation #InfoSec
    #CyberSecurityCommunity #BlueTeam #ThreatDetection #SecurityEngineering #SecurityOperations

  48. New blog post live for my Sentinel Saturday series! :1000: :apartyblobcat:
    Read the blog 👉 marshsecurity.org/sentinel-sat

    In this post, I explore the power of using Microsoft Sentinel Tasks as part of your automation workflows.

    Most teams aren’t getting the full #value out of Tasks in Microsoft Sentinel. Are you? When you combine Sentinel Tasks with automation, they become a game-changer.

    - Auto-create tasks when automation fails (so nothing slips through the cracks)
    - Auto-complete tasks when automation succeeds
    - Use tasks to verify automation outcomes
    - Build engineering feedback loops and automation #QA

    Read the blog 👉 marshsecurity.org/sentinel-sat

    #MicrosoftSentinel #SentinelAutomation #CyberSecurity #SOCAutomation
    #CloudSecurity #AzureSecurity #SIEM #SecOps #Automation #InfoSec
    #CyberSecurityCommunity #BlueTeam #ThreatDetection #SecurityEngineering #SecurityOperations

  49. New blog post live for my Sentinel Saturday series! :1000: :apartyblobcat:
    Read the blog 👉 marshsecurity.org/sentinel-sat

    In this post, I explore the power of using Microsoft Sentinel Tasks as part of your automation workflows.

    Most teams aren’t getting the full #value out of Tasks in Microsoft Sentinel. Are you? When you combine Sentinel Tasks with automation, they become a game-changer.

    - Auto-create tasks when automation fails (so nothing slips through the cracks)
    - Auto-complete tasks when automation succeeds
    - Use tasks to verify automation outcomes
    - Build engineering feedback loops and automation #QA

    Read the blog 👉 marshsecurity.org/sentinel-sat

    #MicrosoftSentinel #SentinelAutomation #CyberSecurity #SOCAutomation
    #CloudSecurity #AzureSecurity #SIEM #SecOps #Automation #InfoSec
    #CyberSecurityCommunity #BlueTeam #ThreatDetection #SecurityEngineering #SecurityOperations

  50. New blog post live for my Sentinel Saturday series! :1000: :apartyblobcat:
    Read the blog 👉 marshsecurity.org/sentinel-sat

    In this post, I explore the power of using Microsoft Sentinel Tasks as part of your automation workflows.

    Most teams aren’t getting the full #value out of Tasks in Microsoft Sentinel. Are you? When you combine Sentinel Tasks with automation, they become a game-changer.

    - Auto-create tasks when automation fails (so nothing slips through the cracks)
    - Auto-complete tasks when automation succeeds
    - Use tasks to verify automation outcomes
    - Build engineering feedback loops and automation #QA

    Read the blog 👉 marshsecurity.org/sentinel-sat

    #MicrosoftSentinel #SentinelAutomation #CyberSecurity #SOCAutomation
    #CloudSecurity #AzureSecurity #SIEM #SecOps #Automation #InfoSec
    #CyberSecurityCommunity #BlueTeam #ThreatDetection #SecurityEngineering #SecurityOperations