#dfir — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #dfir, aggregated by home.social.
-
2026-08-21 RDP #Honeypot IOCs - 6603 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 2586
37.192.241.247 - 2082
178.128.32.226 - 813Top ASNs:
AS214036 - 2586
AS31200 - 2082
AS14061 - 831Top Accounts:
hello - 1791
admin - 1200
User1 - 1200Top ISPs:
Ultahost, Inc. - 2586
Novotelecom Ltd - 2082
DigitalOcean, LLC - 831Top Clients:
Unknown - 6603Top Software:
Unknown - 6603Top Keyboards:
Unknown - 6603Top IP Classification:
Unknown - 3093
hosting - 2658
hosting & proxy - 852Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-21 RDP #Honeypot IOCs - 6603 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 2586
37.192.241.247 - 2082
178.128.32.226 - 813Top ASNs:
AS214036 - 2586
AS31200 - 2082
AS14061 - 831Top Accounts:
hello - 1791
admin - 1200
User1 - 1200Top ISPs:
Ultahost, Inc. - 2586
Novotelecom Ltd - 2082
DigitalOcean, LLC - 831Top Clients:
Unknown - 6603Top Software:
Unknown - 6603Top Keyboards:
Unknown - 6603Top IP Classification:
Unknown - 3093
hosting - 2658
hosting & proxy - 852Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-21 RDP #Honeypot IOCs - 6603 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 2586
37.192.241.247 - 2082
178.128.32.226 - 813Top ASNs:
AS214036 - 2586
AS31200 - 2082
AS14061 - 831Top Accounts:
hello - 1791
admin - 1200
User1 - 1200Top ISPs:
Ultahost, Inc. - 2586
Novotelecom Ltd - 2082
DigitalOcean, LLC - 831Top Clients:
Unknown - 6603Top Software:
Unknown - 6603Top Keyboards:
Unknown - 6603Top IP Classification:
Unknown - 3093
hosting - 2658
hosting & proxy - 852Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-21 RDP #Honeypot IOCs - 6603 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 2586
37.192.241.247 - 2082
178.128.32.226 - 813Top ASNs:
AS214036 - 2586
AS31200 - 2082
AS14061 - 831Top Accounts:
hello - 1791
admin - 1200
User1 - 1200Top ISPs:
Ultahost, Inc. - 2586
Novotelecom Ltd - 2082
DigitalOcean, LLC - 831Top Clients:
Unknown - 6603Top Software:
Unknown - 6603Top Keyboards:
Unknown - 6603Top IP Classification:
Unknown - 3093
hosting - 2658
hosting & proxy - 852Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-21 RDP #Honeypot IOCs - 4402 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 1724
37.192.241.247 - 1388
178.128.32.226 - 542Top ASNs:
AS214036 - 1724
AS31200 - 1388
AS14061 - 554Top Accounts:
hello - 1194
admin - 800
User1 - 800Top ISPs:
Ultahost, Inc. - 1724
Novotelecom Ltd - 1388
DigitalOcean, LLC - 554Top Clients:
Unknown - 4402Top Software:
Unknown - 4402Top Keyboards:
Unknown - 4402Top IP Classification:
Unknown - 2062
hosting - 1772
hosting & proxy - 568Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-21 RDP #Honeypot IOCs - 4402 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 1724
37.192.241.247 - 1388
178.128.32.226 - 542Top ASNs:
AS214036 - 1724
AS31200 - 1388
AS14061 - 554Top Accounts:
hello - 1194
admin - 800
User1 - 800Top ISPs:
Ultahost, Inc. - 1724
Novotelecom Ltd - 1388
DigitalOcean, LLC - 554Top Clients:
Unknown - 4402Top Software:
Unknown - 4402Top Keyboards:
Unknown - 4402Top IP Classification:
Unknown - 2062
hosting - 1772
hosting & proxy - 568Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-21 RDP #Honeypot IOCs - 4402 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 1724
37.192.241.247 - 1388
178.128.32.226 - 542Top ASNs:
AS214036 - 1724
AS31200 - 1388
AS14061 - 554Top Accounts:
hello - 1194
admin - 800
User1 - 800Top ISPs:
Ultahost, Inc. - 1724
Novotelecom Ltd - 1388
DigitalOcean, LLC - 554Top Clients:
Unknown - 4402Top Software:
Unknown - 4402Top Keyboards:
Unknown - 4402Top IP Classification:
Unknown - 2062
hosting - 1772
hosting & proxy - 568Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-21 RDP #Honeypot IOCs - 4402 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 1724
37.192.241.247 - 1388
178.128.32.226 - 542Top ASNs:
AS214036 - 1724
AS31200 - 1388
AS14061 - 554Top Accounts:
hello - 1194
admin - 800
User1 - 800Top ISPs:
Ultahost, Inc. - 1724
Novotelecom Ltd - 1388
DigitalOcean, LLC - 554Top Clients:
Unknown - 4402Top Software:
Unknown - 4402Top Keyboards:
Unknown - 4402Top IP Classification:
Unknown - 2062
hosting - 1772
hosting & proxy - 568Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-21 RDP #Honeypot IOCs - 2201 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 862
37.192.241.247 - 694
178.128.32.226 - 271Top ASNs:
AS214036 - 862
AS31200 - 694
AS14061 - 277Top Accounts:
hello - 597
admin - 400
User1 - 400Top ISPs:
Ultahost, Inc. - 862
Novotelecom Ltd - 694
DigitalOcean, LLC - 277Top Clients:
Unknown - 2201Top Software:
Unknown - 2201Top Keyboards:
Unknown - 2201Top IP Classification:
Unknown - 1031
hosting - 886
hosting & proxy - 284Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-21 RDP #Honeypot IOCs - 2201 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 862
37.192.241.247 - 694
178.128.32.226 - 271Top ASNs:
AS214036 - 862
AS31200 - 694
AS14061 - 277Top Accounts:
hello - 597
admin - 400
User1 - 400Top ISPs:
Ultahost, Inc. - 862
Novotelecom Ltd - 694
DigitalOcean, LLC - 277Top Clients:
Unknown - 2201Top Software:
Unknown - 2201Top Keyboards:
Unknown - 2201Top IP Classification:
Unknown - 1031
hosting - 886
hosting & proxy - 284Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-21 RDP #Honeypot IOCs - 2201 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 862
37.192.241.247 - 694
178.128.32.226 - 271Top ASNs:
AS214036 - 862
AS31200 - 694
AS14061 - 277Top Accounts:
hello - 597
admin - 400
User1 - 400Top ISPs:
Ultahost, Inc. - 862
Novotelecom Ltd - 694
DigitalOcean, LLC - 277Top Clients:
Unknown - 2201Top Software:
Unknown - 2201Top Keyboards:
Unknown - 2201Top IP Classification:
Unknown - 1031
hosting - 886
hosting & proxy - 284Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-21 RDP #Honeypot IOCs - 2201 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
159.100.19.53 - 862
37.192.241.247 - 694
178.128.32.226 - 271Top ASNs:
AS214036 - 862
AS31200 - 694
AS14061 - 277Top Accounts:
hello - 597
admin - 400
User1 - 400Top ISPs:
Ultahost, Inc. - 862
Novotelecom Ltd - 694
DigitalOcean, LLC - 277Top Clients:
Unknown - 2201Top Software:
Unknown - 2201Top Keyboards:
Unknown - 2201Top IP Classification:
Unknown - 1031
hosting - 886
hosting & proxy - 284Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
Discover what’s new on Forensic Focus – explore UK police well-being funding, BitLocker decryption, protecting investigators working on child safeguarding cases, and more. https://www.forensicfocus.com/news/forensic-focus-digest-august-21-2026/ #DigitalForensics #DFIR
-
Discover what’s new on Forensic Focus – explore UK police well-being funding, BitLocker decryption, protecting investigators working on child safeguarding cases, and more. https://www.forensicfocus.com/news/forensic-focus-digest-august-21-2026/ #DigitalForensics #DFIR
-
2026-08-20 RDP #Honeypot IOCs - 1692 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 1386
45.11.18.33 - 162
103.178.235.50 - 30Top ASNs:
AS16276 - 1386
AS30823 - 162
AS396982 - 36Top Accounts:
hello - 1602
(empty) - 12
Test - 12Top ISPs:
OVH SAS - 1386
aurologic GmbH - 162
Google LLC - 36Top Clients:
Unknown - 1692Top Software:
Unknown - 1692Top Keyboards:
Unknown - 1692Top IP Classification:
Unknown - 1404
hosting - 255
hosting & proxy - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-20 RDP #Honeypot IOCs - 1692 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 1386
45.11.18.33 - 162
103.178.235.50 - 30Top ASNs:
AS16276 - 1386
AS30823 - 162
AS396982 - 36Top Accounts:
hello - 1602
(empty) - 12
Test - 12Top ISPs:
OVH SAS - 1386
aurologic GmbH - 162
Google LLC - 36Top Clients:
Unknown - 1692Top Software:
Unknown - 1692Top Keyboards:
Unknown - 1692Top IP Classification:
Unknown - 1404
hosting - 255
hosting & proxy - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-20 RDP #Honeypot IOCs - 1692 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 1386
45.11.18.33 - 162
103.178.235.50 - 30Top ASNs:
AS16276 - 1386
AS30823 - 162
AS396982 - 36Top Accounts:
hello - 1602
(empty) - 12
Test - 12Top ISPs:
OVH SAS - 1386
aurologic GmbH - 162
Google LLC - 36Top Clients:
Unknown - 1692Top Software:
Unknown - 1692Top Keyboards:
Unknown - 1692Top IP Classification:
Unknown - 1404
hosting - 255
hosting & proxy - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-20 RDP #Honeypot IOCs - 1692 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 1386
45.11.18.33 - 162
103.178.235.50 - 30Top ASNs:
AS16276 - 1386
AS30823 - 162
AS396982 - 36Top Accounts:
hello - 1602
(empty) - 12
Test - 12Top ISPs:
OVH SAS - 1386
aurologic GmbH - 162
Google LLC - 36Top Clients:
Unknown - 1692Top Software:
Unknown - 1692Top Keyboards:
Unknown - 1692Top IP Classification:
Unknown - 1404
hosting - 255
hosting & proxy - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-20 RDP #Honeypot IOCs - 1128 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 924
45.11.18.33 - 108
103.178.235.50 - 20Top ASNs:
AS16276 - 924
AS30823 - 108
AS396982 - 24Top Accounts:
hello - 1068
(empty) - 8
Test - 8Top ISPs:
OVH SAS - 924
aurologic GmbH - 108
Google LLC - 24Top Clients:
Unknown - 1128Top Software:
Unknown - 1128Top Keyboards:
Unknown - 1128Top IP Classification:
Unknown - 936
hosting - 170
hosting & proxy - 22Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-20 RDP #Honeypot IOCs - 1128 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 924
45.11.18.33 - 108
103.178.235.50 - 20Top ASNs:
AS16276 - 924
AS30823 - 108
AS396982 - 24Top Accounts:
hello - 1068
(empty) - 8
Test - 8Top ISPs:
OVH SAS - 924
aurologic GmbH - 108
Google LLC - 24Top Clients:
Unknown - 1128Top Software:
Unknown - 1128Top Keyboards:
Unknown - 1128Top IP Classification:
Unknown - 936
hosting - 170
hosting & proxy - 22Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-20 RDP #Honeypot IOCs - 1128 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 924
45.11.18.33 - 108
103.178.235.50 - 20Top ASNs:
AS16276 - 924
AS30823 - 108
AS396982 - 24Top Accounts:
hello - 1068
(empty) - 8
Test - 8Top ISPs:
OVH SAS - 924
aurologic GmbH - 108
Google LLC - 24Top Clients:
Unknown - 1128Top Software:
Unknown - 1128Top Keyboards:
Unknown - 1128Top IP Classification:
Unknown - 936
hosting - 170
hosting & proxy - 22Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-20 RDP #Honeypot IOCs - 1128 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 924
45.11.18.33 - 108
103.178.235.50 - 20Top ASNs:
AS16276 - 924
AS30823 - 108
AS396982 - 24Top Accounts:
hello - 1068
(empty) - 8
Test - 8Top ISPs:
OVH SAS - 924
aurologic GmbH - 108
Google LLC - 24Top Clients:
Unknown - 1128Top Software:
Unknown - 1128Top Keyboards:
Unknown - 1128Top IP Classification:
Unknown - 936
hosting - 170
hosting & proxy - 22Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-20 RDP #Honeypot IOCs - 564 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 462
45.11.18.33 - 54
103.178.235.50 - 10Top ASNs:
AS16276 - 462
AS30823 - 54
AS396982 - 12Top Accounts:
hello - 534
(empty) - 4
Test - 4Top ISPs:
OVH SAS - 462
aurologic GmbH - 54
Google LLC - 12Top Clients:
Unknown - 564Top Software:
Unknown - 564Top Keyboards:
Unknown - 564Top IP Classification:
Unknown - 468
hosting - 85
hosting & proxy - 11Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-20 RDP #Honeypot IOCs - 564 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 462
45.11.18.33 - 54
103.178.235.50 - 10Top ASNs:
AS16276 - 462
AS30823 - 54
AS396982 - 12Top Accounts:
hello - 534
(empty) - 4
Test - 4Top ISPs:
OVH SAS - 462
aurologic GmbH - 54
Google LLC - 12Top Clients:
Unknown - 564Top Software:
Unknown - 564Top Keyboards:
Unknown - 564Top IP Classification:
Unknown - 468
hosting - 85
hosting & proxy - 11Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-20 RDP #Honeypot IOCs - 564 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 462
45.11.18.33 - 54
103.178.235.50 - 10Top ASNs:
AS16276 - 462
AS30823 - 54
AS396982 - 12Top Accounts:
hello - 534
(empty) - 4
Test - 4Top ISPs:
OVH SAS - 462
aurologic GmbH - 54
Google LLC - 12Top Clients:
Unknown - 564Top Software:
Unknown - 564Top Keyboards:
Unknown - 564Top IP Classification:
Unknown - 468
hosting - 85
hosting & proxy - 11Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-20 RDP #Honeypot IOCs - 564 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
155.117.13.211 - 462
45.11.18.33 - 54
103.178.235.50 - 10Top ASNs:
AS16276 - 462
AS30823 - 54
AS396982 - 12Top Accounts:
hello - 534
(empty) - 4
Test - 4Top ISPs:
OVH SAS - 462
aurologic GmbH - 54
Google LLC - 12Top Clients:
Unknown - 564Top Software:
Unknown - 564Top Keyboards:
Unknown - 564Top IP Classification:
Unknown - 468
hosting - 85
hosting & proxy - 11Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
Oh yeah, cause business is on LinkedIn...
Ok, let's try: does anyone on the Fedi need (non AI slob) IT security consulting specialized on IT forensics for court, SOC/CERT, DFIR, and cyber crisis management exercises?
(Let's see if I can delete my LinkedIn...)
#fedihelp #askfedi #cybersecurity #infosec #dfir #linkedinalternative #getfedihired #freelance #freelancer #SOC #expertwitness #CERT #cybercrisismanagement #NoAI #noBot
-
Oh yeah, cause business is on LinkedIn...
Ok, let's try: does anyone on the Fedi need (non AI slob) IT security consulting specialized on IT forensics for court, SOC/CERT, DFIR, and cyber crisis management exercises?
(Let's see if I can delete my LinkedIn...)
#fedihelp #askfedi #cybersecurity #infosec #dfir #linkedinalternative #getfedihired #freelance #freelancer #SOC #expertwitness #CERT #cybercrisismanagement #NoAI #noBot
-
Oh yeah, cause business is on LinkedIn...
Ok, let's try: does anyone on the Fedi need (non AI slob) IT security consulting specialized on IT forensics for court, SOC/CERT, DFIR, and cyber crisis management exercises?
(Let's see if I can delete my LinkedIn...)
#fedihelp #askfedi #cybersecurity #infosec #dfir #linkedinalternative #getfedihired #freelance #freelancer #SOC #expertwitness #CERT #cybercrisismanagement #NoAI #noBot
-
Oh yeah, cause business is on LinkedIn...
Ok, let's try: does anyone on the Fedi need (non AI slob) IT security consulting specialized on IT forensics for court, SOC/CERT, DFIR, and cyber crisis management exercises?
(Let's see if I can delete my LinkedIn...)
#fedihelp #askfedi #cybersecurity #infosec #dfir #linkedinalternative #getfedihired #freelance #freelancer #SOC #expertwitness #CERT #cybercrisismanagement #NoAI #noBot
-
Oh yeah, cause business is on LinkedIn...
Ok, let's try: does anyone on the Fedi need (non AI slob) IT security consulting specialized on IT forensics for court, SOC/CERT, DFIR, and cyber crisis management exercises?
(Let's see if I can delete my LinkedIn...)
#fedihelp #askfedi #cybersecurity #infosec #dfir #linkedinalternative #getfedihired #freelance #freelancer #SOC #expertwitness #CERT #cybercrisismanagement #NoAI #noBot
-
Cellebrite Genesis is expanding globally and is now generally available to enterprises, helping teams surface critical connections in minutes rather than weeks. https://www.forensicfocus.com/news/cellebrite-genesis-for-enterprise-now-generally-available-regional-availability-expands-to-more-global-markets/ #Cellebrite #CellebriteGenesis #DigitalForensics #DFIR
-
Cellebrite Genesis is expanding globally and is now generally available to enterprises, helping teams surface critical connections in minutes rather than weeks. https://www.forensicfocus.com/news/cellebrite-genesis-for-enterprise-now-generally-available-regional-availability-expands-to-more-global-markets/ #Cellebrite #CellebriteGenesis #DigitalForensics #DFIR
-
2026-08-19 RDP #Honeypot IOCs - 4095 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2796
155.117.13.211 - 750
103.178.235.50 - 60Top ASNs:
AS24940 - 2796
AS16276 - 750
AS8560 - 141Top Accounts:
hello - 3675
142.93.8.59 - 309
Administr - 18Top ISPs:
Hetzner Online GmbH - 2796
OVH SAS - 750
arsys.es - 123Top Clients:
Unknown - 4095Top Software:
Unknown - 4095Top Keyboards:
Unknown - 4095Top IP Classification:
hosting - 3075
Unknown - 915
hosting & proxy - 84Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-19 RDP #Honeypot IOCs - 4095 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2796
155.117.13.211 - 750
103.178.235.50 - 60Top ASNs:
AS24940 - 2796
AS16276 - 750
AS8560 - 141Top Accounts:
hello - 3675
142.93.8.59 - 309
Administr - 18Top ISPs:
Hetzner Online GmbH - 2796
OVH SAS - 750
arsys.es - 123Top Clients:
Unknown - 4095Top Software:
Unknown - 4095Top Keyboards:
Unknown - 4095Top IP Classification:
hosting - 3075
Unknown - 915
hosting & proxy - 84Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-19 RDP #Honeypot IOCs - 4095 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2796
155.117.13.211 - 750
103.178.235.50 - 60Top ASNs:
AS24940 - 2796
AS16276 - 750
AS8560 - 141Top Accounts:
hello - 3675
142.93.8.59 - 309
Administr - 18Top ISPs:
Hetzner Online GmbH - 2796
OVH SAS - 750
arsys.es - 123Top Clients:
Unknown - 4095Top Software:
Unknown - 4095Top Keyboards:
Unknown - 4095Top IP Classification:
hosting - 3075
Unknown - 915
hosting & proxy - 84Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-19 RDP #Honeypot IOCs - 4095 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 2796
155.117.13.211 - 750
103.178.235.50 - 60Top ASNs:
AS24940 - 2796
AS16276 - 750
AS8560 - 141Top Accounts:
hello - 3675
142.93.8.59 - 309
Administr - 18Top ISPs:
Hetzner Online GmbH - 2796
OVH SAS - 750
arsys.es - 123Top Clients:
Unknown - 4095Top Software:
Unknown - 4095Top Keyboards:
Unknown - 4095Top IP Classification:
hosting - 3075
Unknown - 915
hosting & proxy - 84Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-19 RDP #Honeypot IOCs - 2730 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 1864
155.117.13.211 - 500
103.178.235.50 - 40Top ASNs:
AS24940 - 1864
AS16276 - 500
AS8560 - 94Top Accounts:
hello - 2450
142.93.8.59 - 206
Administr - 12Top ISPs:
Hetzner Online GmbH - 1864
OVH SAS - 500
arsys.es - 82Top Clients:
Unknown - 2730Top Software:
Unknown - 2730Top Keyboards:
Unknown - 2730Top IP Classification:
hosting - 2050
Unknown - 610
hosting & proxy - 56Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-19 RDP #Honeypot IOCs - 2730 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 1864
155.117.13.211 - 500
103.178.235.50 - 40Top ASNs:
AS24940 - 1864
AS16276 - 500
AS8560 - 94Top Accounts:
hello - 2450
142.93.8.59 - 206
Administr - 12Top ISPs:
Hetzner Online GmbH - 1864
OVH SAS - 500
arsys.es - 82Top Clients:
Unknown - 2730Top Software:
Unknown - 2730Top Keyboards:
Unknown - 2730Top IP Classification:
hosting - 2050
Unknown - 610
hosting & proxy - 56Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-19 RDP #Honeypot IOCs - 2730 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 1864
155.117.13.211 - 500
103.178.235.50 - 40Top ASNs:
AS24940 - 1864
AS16276 - 500
AS8560 - 94Top Accounts:
hello - 2450
142.93.8.59 - 206
Administr - 12Top ISPs:
Hetzner Online GmbH - 1864
OVH SAS - 500
arsys.es - 82Top Clients:
Unknown - 2730Top Software:
Unknown - 2730Top Keyboards:
Unknown - 2730Top IP Classification:
hosting - 2050
Unknown - 610
hosting & proxy - 56Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-19 RDP #Honeypot IOCs - 2730 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 1864
155.117.13.211 - 500
103.178.235.50 - 40Top ASNs:
AS24940 - 1864
AS16276 - 500
AS8560 - 94Top Accounts:
hello - 2450
142.93.8.59 - 206
Administr - 12Top ISPs:
Hetzner Online GmbH - 1864
OVH SAS - 500
arsys.es - 82Top Clients:
Unknown - 2730Top Software:
Unknown - 2730Top Keyboards:
Unknown - 2730Top IP Classification:
hosting - 2050
Unknown - 610
hosting & proxy - 56Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-19 RDP #Honeypot IOCs - 1365 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 932
155.117.13.211 - 250
103.178.235.50 - 20Top ASNs:
AS24940 - 932
AS16276 - 250
AS8560 - 47Top Accounts:
hello - 1225
142.93.8.59 - 103
Administr - 6Top ISPs:
Hetzner Online GmbH - 932
OVH SAS - 250
arsys.es - 41Top Clients:
Unknown - 1365Top Software:
Unknown - 1365Top Keyboards:
Unknown - 1365Top IP Classification:
hosting - 1025
Unknown - 305
hosting & proxy - 28Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-19 RDP #Honeypot IOCs - 1365 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 932
155.117.13.211 - 250
103.178.235.50 - 20Top ASNs:
AS24940 - 932
AS16276 - 250
AS8560 - 47Top Accounts:
hello - 1225
142.93.8.59 - 103
Administr - 6Top ISPs:
Hetzner Online GmbH - 932
OVH SAS - 250
arsys.es - 41Top Clients:
Unknown - 1365Top Software:
Unknown - 1365Top Keyboards:
Unknown - 1365Top IP Classification:
hosting - 1025
Unknown - 305
hosting & proxy - 28Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-19 RDP #Honeypot IOCs - 1365 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 932
155.117.13.211 - 250
103.178.235.50 - 20Top ASNs:
AS24940 - 932
AS16276 - 250
AS8560 - 47Top Accounts:
hello - 1225
142.93.8.59 - 103
Administr - 6Top ISPs:
Hetzner Online GmbH - 932
OVH SAS - 250
arsys.es - 41Top Clients:
Unknown - 1365Top Software:
Unknown - 1365Top Keyboards:
Unknown - 1365Top IP Classification:
hosting - 1025
Unknown - 305
hosting & proxy - 28Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-08-19 RDP #Honeypot IOCs - 1365 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 932
155.117.13.211 - 250
103.178.235.50 - 20Top ASNs:
AS24940 - 932
AS16276 - 250
AS8560 - 47Top Accounts:
hello - 1225
142.93.8.59 - 103
Administr - 6Top ISPs:
Hetzner Online GmbH - 932
OVH SAS - 250
arsys.es - 41Top Clients:
Unknown - 1365Top Software:
Unknown - 1365Top Keyboards:
Unknown - 1365Top IP Classification:
hosting - 1025
Unknown - 305
hosting & proxy - 28Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
Read the latest DFIR news - UK police investigator well-being, cloud search warrant strategy, Timestamped for macOS, iLEAPP and ALEAPP updates, and more. https://www.forensicfocus.com/news/digital-forensics-round-up-august-19-2026/ #DigitalForensics #DFIR
-
Read the latest DFIR news - UK police investigator well-being, cloud search warrant strategy, Timestamped for macOS, iLEAPP and ALEAPP updates, and more. https://www.forensicfocus.com/news/digital-forensics-round-up-august-19-2026/ #DigitalForensics #DFIR
-
What Windows 11 Remembers (And Most Investigators Miss)
Recall, Phone Link SMS history, Copilot chats, and secondary telemetry most playbooks still ignore.
Maurice Fielenbach shows the evidence surface standard triage misses — based on hundreds of real cases.
#DFIR #Windows11 -
What Windows 11 Remembers (And Most Investigators Miss)
Recall, Phone Link SMS history, Copilot chats, and secondary telemetry most playbooks still ignore.
Maurice Fielenbach shows the evidence surface standard triage misses — based on hundreds of real cases.
#DFIR #Windows11 -
What Windows 11 Remembers (And Most Investigators Miss)
Recall, Phone Link SMS history, Copilot chats, and secondary telemetry most playbooks still ignore.
Maurice Fielenbach shows the evidence surface standard triage misses — based on hundreds of real cases.
#DFIR #Windows11 -
What Windows 11 Remembers (And Most Investigators Miss)
Recall, Phone Link SMS history, Copilot chats, and secondary telemetry most playbooks still ignore.
Maurice Fielenbach shows the evidence surface standard triage misses — based on hundreds of real cases.
#DFIR #Windows11 -
What Windows 11 Remembers (And Most Investigators Miss)
Recall, Phone Link SMS history, Copilot chats, and secondary telemetry most playbooks still ignore.
Maurice Fielenbach shows the evidence surface standard triage misses — based on hundreds of real cases.
#DFIR #Windows11 -
Join Rich Frawley of ADF Solutions as he shares practical strategies for managing complex ICAC scenes, prioritizing the devices most likely to contain probative evidence, and making faster, more informed decisions in the field. https://www.forensicfocus.com/news/upcoming-webinar-reducing-icac-backlogs-prioritizing-digital-evidence-for-faster-investigations/ #ADFSolutions #ICAC #DigitalForensics #DFIR
-
Join Rich Frawley of ADF Solutions as he shares practical strategies for managing complex ICAC scenes, prioritizing the devices most likely to contain probative evidence, and making faster, more informed decisions in the field. https://www.forensicfocus.com/news/upcoming-webinar-reducing-icac-backlogs-prioritizing-digital-evidence-for-faster-investigations/ #ADFSolutions #ICAC #DigitalForensics #DFIR
-
iLEAPP and ALEAPP are both at v2026.3.1.
Landed on both sides in the same release: Snapchat, Tinder, TikTok, Reddit, Proton Mail, WhatsApp, GroupMe, Chrome saved payments.
📱 iLEAPP also: OneDrive, Google Drive DriveKit, Onion Browser, Proton Mail conversation view with inline media
🤖 ALEAPP also: Instagram, Netflix, Amazon Shopping, Snapchat chat media, Wire recovery across encrypted app generations, LINE calls even with empty contact tables
Absence is not a negative finding. The tools should say so.
-
iLEAPP and ALEAPP are both at v2026.3.1.
Landed on both sides in the same release: Snapchat, Tinder, TikTok, Reddit, Proton Mail, WhatsApp, GroupMe, Chrome saved payments.
📱 iLEAPP also: OneDrive, Google Drive DriveKit, Onion Browser, Proton Mail conversation view with inline media
🤖 ALEAPP also: Instagram, Netflix, Amazon Shopping, Snapchat chat media, Wire recovery across encrypted app generations, LINE calls even with empty contact tables
Absence is not a negative finding. The tools should say so.
-
iLEAPP and ALEAPP are both at v2026.3.1.
Landed on both sides in the same release: Snapchat, Tinder, TikTok, Reddit, Proton Mail, WhatsApp, GroupMe, Chrome saved payments.
📱 iLEAPP also: OneDrive, Google Drive DriveKit, Onion Browser, Proton Mail conversation view with inline media
🤖 ALEAPP also: Instagram, Netflix, Amazon Shopping, Snapchat chat media, Wire recovery across encrypted app generations, LINE calls even with empty contact tables
Absence is not a negative finding. The tools should say so.
-
iLEAPP and ALEAPP are both at v2026.3.1.
Landed on both sides in the same release: Snapchat, Tinder, TikTok, Reddit, Proton Mail, WhatsApp, GroupMe, Chrome saved payments.
📱 iLEAPP also: OneDrive, Google Drive DriveKit, Onion Browser, Proton Mail conversation view with inline media
🤖 ALEAPP also: Instagram, Netflix, Amazon Shopping, Snapchat chat media, Wire recovery across encrypted app generations, LINE calls even with empty contact tables
Absence is not a negative finding. The tools should say so.
-
iLEAPP and ALEAPP are both at v2026.3.1.
Landed on both sides in the same release: Snapchat, Tinder, TikTok, Reddit, Proton Mail, WhatsApp, GroupMe, Chrome saved payments.
📱 iLEAPP also: OneDrive, Google Drive DriveKit, Onion Browser, Proton Mail conversation view with inline media
🤖 ALEAPP also: Instagram, Netflix, Amazon Shopping, Snapchat chat media, Wire recovery across encrypted app generations, LINE calls even with empty contact tables
Absence is not a negative finding. The tools should say so.
-
2026-08-18 RDP #Honeypot IOCs - 6609 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
88.198.2.157 - 4911
82.223.43.244 - 144
82.223.17.218 - 144Top ASNs:
AS24940 - 4911
AS8560 - 723
AS8075 - 165Top Accounts:
hello - 4950
142.93.8.59 - 1554
Test - 24Top ISPs:
Hetzner Online GmbH - 4911
arsys.es - 615
Microsoft Corporation - 138Top Clients:
Unknown - 6609Top Software:
Unknown - 6609Top Keyboards:
Unknown - 6609Top IP Classification:
hosting - 5937
Unknown - 420
proxy - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key