#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
2026-09-12 RDP #Honeypot IOCs - 34326 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30099
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30099
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34233
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30099
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34326Top Software:
Unknown - 34326Top Keyboards:
Unknown - 34326Top IP Classification:
Unknown - 30114
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34326 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30099
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30099
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34233
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30099
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34326Top Software:
Unknown - 34326Top Keyboards:
Unknown - 34326Top IP Classification:
Unknown - 30114
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34326 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30099
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30099
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34233
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30099
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34326Top Software:
Unknown - 34326Top Keyboards:
Unknown - 34326Top IP Classification:
Unknown - 30114
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34326 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30099
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30099
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34233
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30099
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34326Top Software:
Unknown - 34326Top Keyboards:
Unknown - 34326Top IP Classification:
Unknown - 30114
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34324 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30097
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30097
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34231
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30097
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34324Top Software:
Unknown - 34324Top Keyboards:
Unknown - 34324Top IP Classification:
Unknown - 30112
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34324 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30097
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30097
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34231
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30097
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34324Top Software:
Unknown - 34324Top Keyboards:
Unknown - 34324Top IP Classification:
Unknown - 30112
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34324 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30097
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30097
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34231
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30097
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34324Top Software:
Unknown - 34324Top Keyboards:
Unknown - 34324Top IP Classification:
Unknown - 30112
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34324 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30097
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30097
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34231
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30097
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34324Top Software:
Unknown - 34324Top Keyboards:
Unknown - 34324Top IP Classification:
Unknown - 30112
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34322 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30095
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30095
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34229
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30095
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34322Top Software:
Unknown - 34322Top Keyboards:
Unknown - 34322Top IP Classification:
Unknown - 30110
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34322 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30095
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30095
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34229
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30095
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34322Top Software:
Unknown - 34322Top Keyboards:
Unknown - 34322Top IP Classification:
Unknown - 30110
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34322 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30095
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30095
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34229
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30095
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34322Top Software:
Unknown - 34322Top Keyboards:
Unknown - 34322Top IP Classification:
Unknown - 30110
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34322 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30095
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30095
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34229
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30095
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34322Top Software:
Unknown - 34322Top Keyboards:
Unknown - 34322Top IP Classification:
Unknown - 30110
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34320 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30093
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30093
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34227
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30093
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34320Top Software:
Unknown - 34320Top Keyboards:
Unknown - 34320Top IP Classification:
Unknown - 30108
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34320 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30093
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30093
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34227
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30093
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34320Top Software:
Unknown - 34320Top Keyboards:
Unknown - 34320Top IP Classification:
Unknown - 30108
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 34320 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 30093
147.182.250.28 - 4032
104.64.217.122 - 60Top ASNs:
AS135905 - 30093
AS14061 - 4050
AS63949 - 66Top Accounts:
hello - 34227
Administr - 33
anonymous - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 30093
DigitalOcean, LLC - 4050
Akamai Technologies, Inc. - 66Top Clients:
Unknown - 34320Top Software:
Unknown - 34320Top Keyboards:
Unknown - 34320Top IP Classification:
Unknown - 30108
hosting - 4212Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 22880 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 20062
147.182.250.28 - 2688
104.64.217.122 - 40Top ASNs:
AS135905 - 20062
AS14061 - 2700
AS63949 - 44Top Accounts:
hello - 22818
Administr - 22
anonymous - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 20062
DigitalOcean, LLC - 2700
Akamai Technologies, Inc. - 44Top Clients:
Unknown - 22880Top Software:
Unknown - 22880Top Keyboards:
Unknown - 22880Top IP Classification:
Unknown - 20072
hosting - 2808Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 22880 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 20062
147.182.250.28 - 2688
104.64.217.122 - 40Top ASNs:
AS135905 - 20062
AS14061 - 2700
AS63949 - 44Top Accounts:
hello - 22818
Administr - 22
anonymous - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 20062
DigitalOcean, LLC - 2700
Akamai Technologies, Inc. - 44Top Clients:
Unknown - 22880Top Software:
Unknown - 22880Top Keyboards:
Unknown - 22880Top IP Classification:
Unknown - 20072
hosting - 2808Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 22880 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 20062
147.182.250.28 - 2688
104.64.217.122 - 40Top ASNs:
AS135905 - 20062
AS14061 - 2700
AS63949 - 44Top Accounts:
hello - 22818
Administr - 22
anonymous - 6Top ISPs:
Vietnam Posts and Telecommunications Group - 20062
DigitalOcean, LLC - 2700
Akamai Technologies, Inc. - 44Top Clients:
Unknown - 22880Top Software:
Unknown - 22880Top Keyboards:
Unknown - 22880Top IP Classification:
Unknown - 20072
hosting - 2808Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 11440 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 10031
147.182.250.28 - 1344
104.64.217.122 - 20Top ASNs:
AS135905 - 10031
AS14061 - 1350
AS63949 - 22Top Accounts:
hello - 11409
Administr - 11
anonymous - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 10031
DigitalOcean, LLC - 1350
Akamai Technologies, Inc. - 22Top Clients:
Unknown - 11440Top Software:
Unknown - 11440Top Keyboards:
Unknown - 11440Top IP Classification:
Unknown - 10036
hosting - 1404Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 11440 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 10031
147.182.250.28 - 1344
104.64.217.122 - 20Top ASNs:
AS135905 - 10031
AS14061 - 1350
AS63949 - 22Top Accounts:
hello - 11409
Administr - 11
anonymous - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 10031
DigitalOcean, LLC - 1350
Akamai Technologies, Inc. - 22Top Clients:
Unknown - 11440Top Software:
Unknown - 11440Top Keyboards:
Unknown - 11440Top IP Classification:
Unknown - 10036
hosting - 1404Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-12 RDP #Honeypot IOCs - 11440 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 10031
147.182.250.28 - 1344
104.64.217.122 - 20Top ASNs:
AS135905 - 10031
AS14061 - 1350
AS63949 - 22Top Accounts:
hello - 11409
Administr - 11
anonymous - 3Top ISPs:
Vietnam Posts and Telecommunications Group - 10031
DigitalOcean, LLC - 1350
Akamai Technologies, Inc. - 22Top Clients:
Unknown - 11440Top Software:
Unknown - 11440Top Keyboards:
Unknown - 11440Top IP Classification:
Unknown - 10036
hosting - 1404Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
CVE-2026-85681 (CRITICAL): WP Component plugin ≤2.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam
-
CVE-2026-85681 (CRITICAL): WP Component plugin ≤2.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam
-
CVE-2026-85681 (CRITICAL): WP Component plugin ≤2.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam
-
CVE-2026-85681 (CRITICAL): WP Component plugin ≤2.2.4 allows unauthenticated option overwrites, risking full WordPress site takeover. Single-site installs are exposed. Check vendor advisory for mitigation steps: https://radar.offseq.com/threat/cve-2026-85681-cwe-269-improper-privilege-management-in-wp-component-ee74cec7c7b526ed #OffSeq #WordPress #Vuln #BlueTeam
-
CVE-2026-81000: Linux kernel TUN driver HIGH severity vulnerability fixed. Flaw in skb headroom calculation could trigger memory corruption. Update to patched kernel ASAP. 🐧 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-net-tun-bound-receive-headroom-683cedae073ef3c4 #OffSeq #Linux #Vulnerability #BlueTeam
-
CVE-2026-81000: Linux kernel TUN driver HIGH severity vulnerability fixed. Flaw in skb headroom calculation could trigger memory corruption. Update to patched kernel ASAP. 🐧 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-net-tun-bound-receive-headroom-683cedae073ef3c4 #OffSeq #Linux #Vulnerability #BlueTeam
-
CVE-2026-81000: Linux kernel TUN driver HIGH severity vulnerability fixed. Flaw in skb headroom calculation could trigger memory corruption. Update to patched kernel ASAP. 🐧 https://radar.offseq.com/threat/in-the-linux-kernel-the-following-vulnerability-has-been-resolved-net-tun-bound-receive-headroom-683cedae073ef3c4 #OffSeq #Linux #Vulnerability #BlueTeam
-
2026-09-10 RDP #Honeypot IOCs - 2142 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2004
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2004
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2049
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2004
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2142Top Software:
Unknown - 2142Top Keyboards:
Unknown - 2142Top IP Classification:
Unknown - 2019
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2142 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2004
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2004
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2049
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2004
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2142Top Software:
Unknown - 2142Top Keyboards:
Unknown - 2142Top IP Classification:
Unknown - 2019
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2142 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2004
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2004
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2049
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2004
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2142Top Software:
Unknown - 2142Top Keyboards:
Unknown - 2142Top IP Classification:
Unknown - 2019
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2141 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2003
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2003
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2048
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2003
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2141Top Software:
Unknown - 2141Top Keyboards:
Unknown - 2141Top IP Classification:
Unknown - 2018
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2141 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2003
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2003
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2048
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2003
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2141Top Software:
Unknown - 2141Top Keyboards:
Unknown - 2141Top IP Classification:
Unknown - 2018
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2141 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2003
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2003
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2048
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2003
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2141Top Software:
Unknown - 2141Top Keyboards:
Unknown - 2141Top IP Classification:
Unknown - 2018
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2140 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2002
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2002
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2047
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2002
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2140Top Software:
Unknown - 2140Top Keyboards:
Unknown - 2140Top IP Classification:
Unknown - 2017
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2140 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2002
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2002
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2047
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2002
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2140Top Software:
Unknown - 2140Top Keyboards:
Unknown - 2140Top IP Classification:
Unknown - 2017
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-10 RDP #Honeypot IOCs - 2140 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
14.225.19.59 - 2002
165.22.57.45 - 18
80.66.83.43 - 18Top ASNs:
AS135905 - 2002
AS14061 - 39
AS396982 - 27Top Accounts:
hello - 2047
Administr - 27
Test - 9Top ISPs:
Vietnam Posts and Telecommunications Group - 2002
DigitalOcean, LLC - 39
Google LLC - 27Top Clients:
Unknown - 2140Top Software:
Unknown - 2140Top Keyboards:
Unknown - 2140Top IP Classification:
Unknown - 2017
hosting - 120
hosting & proxy - 3Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
I looked at reasons why Palo Alto Cortex uses this very old piece of public domain software in their EDR agent, and what can we learn from it.
https://death.sk/posts/clips_detection_engine/
#blueteam #dfir #xdr #edr -
📈 El requerimiento de profesionales forenses crece 🔍 conoce todas las capacidades de Autopsy 🛡️ ☠️ Curso Autopsy Digital Forensics 2026 🥇 Miércoles 29 y Viernes 31 de Julio ✨ De 8:00 pm a 11:00 pm (UTC -05:00) 📲 WhatsApp: https://wa.me/51949304030 🌎 Info: https://www.reydes.com/archivos/cursos/Curso_Autopsy.pdf #DFIR #DigitalForensics #CyberInvestigation #CyberCrime #OSINT #CyberSecurity #BlueTeam #Malware #IncidentResponse -
Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
In this article, I break down how the vulnerability works, affected configurations, exploitation scenarios, and the mitigation steps organizations should take to protect their remote access infrastructure.
https://denizhalil.com/2026/06/02/cve-2026-0257-pan-os-globalprotect-authentication-bypass/
#CyberSecurity #PaloAlto #GlobalProtect #PANOS #CVE20260257 #VulnerabilityManagement #ThreatDetection #NetworkSecurity #BlueTeam #RedTeam #InfoSec #DenizHalil
-
What is Silver Ticket Attack: A Comprehensive Guide
In this article, I cover how Silver Ticket attacks work, common exploitation scenarios, detection techniques, and mitigation strategies.
https://denizhalil.com/2026/05/27/silver-ticket-attack-comprehensive-guide/#CyberSecurity #ActiveDirectory #SilverTicket #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Kerbrute: Enumerating Active Directory Accounts
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
🔗 https://denizhalil.com/2026/05/21/kerberoasting-attack-defense-guide/
#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Basic Active Directory Enumeration: A Comprehensive Guide
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
https://denizhalil.com/2025/05/05/basic-active-directory-enumeration-a-comprehensive-guide/#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
What is Kerberoasting Attack – Kerberoasting: A Comprehensive Guide
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
https://denizhalil.com/2026/05/21/kerberoasting-attack-defense-guide/#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Red and blue teams breaking down their silos and working in real time—imagine a cybersecurity defense that evolves with every simulated threat. Curious how continuous purple teaming is rewriting the playbook?
#purpleteaming
#cyberdefense
#breachandattacksimulation
#mitreattack
#redteam
#blueteam
#securityautomation
#continuousvalidation
#cybersecuritystrategy -
🚀 MITRE ATT&CK v18 = a major leap in detection depth.
The new version adds Detection Strategies and Analytics - helping defenders align detection logic to platform-specific threats.
Also new: CI/CD, Kubernetes, ransomware prep behaviors, mobile “linked devices” exploits, and ICS asset updates.
MITRE even launched the ATT&CK Advisory Council to strengthen community collaboration.
💬 What part of ATT&CK v18 do you think will have the biggest impact on detection engineering?
Follow @technadu for more #ThreatIntel insights.#CyberSecurity #MITREATTACK #DetectionEngineering #CTI #ThreatIntel #BlueTeam #Infosec #CyberDefense #MITRE #ICS #CloudSecurity #MobileSecurity
-
Day 1 of posting to social media until I get an offensive security research job
First, I’m going to start with what I know – Windows. I need to recreate what I had access to at Microsoft, so that starts by setting up a dev environment and finding a copy of Windows System Internals, perhaps the greatest resource for learning Windows out there. My expertise is in Windows and virtualization, so I’m going to make sure I master those areas.
Next, I don’t think I want to grind coding exercises, but I do need to shake the rust off my coding skills. I think I’m going to start with some HackTheBox challenges and find some CTFs to participate in.
Finally, my long overdue goal: learn Rust. I’m not sure if this will help immediately, as I could choose to improve my knowledge of Python. But Rust was getting more and more popular in the areas of Windows I was tasked with protecting, so I need to learn what all the fuss is about with regards to memory safety.
If anyone is on a similar journey, let’s hold each other accountable in the comments! I will be sure to document any write-ups at blog.maxrenke.com (work in progress).#OffensiveSecurity #CyberSecurity #WindowsInternals #HackTheBox #CTF #EthicalHacking #RedTeam #BlueTeam #RustLang #PythonProgramming #DevEnvironment #InfoSec #CyberCareer #SecurityResearch #MemorySafety #CyberCommunity #JobSearch #TechJourney #SecurityEngineering #Pentesting #LearningEveryDay
-
Get started with the CrowdSec WAF: https://doc.crowdsec.net/docs/next/appsec/intro
Virtual Patching WAF collection: https://app.crowdsec.net/hub/author/crowdsecurity/collections/appsec-virtual-patching [3/3]
#CrowdSec #CTI #CyberThreatIntelligence #CVE202427292 #Docassemble #ExploitAlert #PathTraversal #OpenSourceSecurity #Infosec #BlueTeam #ThreatIntel
-
#GammaGroup clients use
🔎 UDP port 123 🔍
as default #RedTeam data #exfiltration ports
#gammagroup #finfsher #finspy #infosec #memes
#BlueTeam
#statesponsoredmalware ☣️🤳🐐☣️Update: Add logging before implementing BLOCKING the #exfil shim, obviously. ☣️🤳🔎🐐☣️🔍🧐
-
Good day everyone! I hope everyone is enjoying their Wednesday!
In a recent report by Bitdefender Labs, they took a deep-dive into the threat group #CharmingKitten and their latest malware, #BellaCiao. It is a great read, but some main behaviors that I pulled from the report included:
#DefenseEvasion:
T1562.001 - Impair Defenses: Disable or Modify Tools
Charming Kitten used powershell to disable real-time monitoring on the machine to avoid detection.#Persistence:
T1053.005 - Scheduled Task/Job: Scheduled Task
They also created scheduled tasks to run on start and used the technique of masquerading their process names to blend in.#Execution:
The Bitdefender team provided the locations that the executables were written to.You should go and check out this #readoftheday, it contains great technical details that you can use to improve your threat hunting skill.
Enjoy and Happy Hunting!#CyberSecurity #ITSecurity #InfoSec #BlueTeam #ThreatIntel #ThreatHunting #ThreatDetection #HappyHunting