#honeypot — Public Fediverse posts

2026-10-07 RDP #Honeypot IOCs - 453 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
156.225.17.60 - 84
109.49.210.201 - 36
172.232.240.202 - 30

Top ASNs:
AS401696 - 84
AS2860 - 36
AS396982 - 36

Top Accounts:
142.93.8.59 - 195
a - 84
hello - 72

Top ISPs:
Vapeline Technology - 84
TVCABO-Portugal - 36
Google LLC - 36

Top Clients:
Unknown - 453

Top Software:
Unknown - 453

Top Keyboards:
Unknown - 453

Top IP Classification:
hosting - 288
Unknown - 165

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-07 RDP #Honeypot IOCs - 302 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
156.225.17.60 - 56
109.49.210.201 - 24
172.232.240.202 - 20

Top ASNs:
AS401696 - 56
AS2860 - 24
AS396982 - 24

Top Accounts:
142.93.8.59 - 130
a - 56
hello - 48

Top ISPs:
Vapeline Technology - 56
TVCABO-Portugal - 24
Google LLC - 24

Top Clients:
Unknown - 302

Top Software:
Unknown - 302

Top Keyboards:
Unknown - 302

Top IP Classification:
hosting - 192
Unknown - 110

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-07 RDP #Honeypot IOCs - 151 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
156.225.17.60 - 28
109.49.210.201 - 12
172.232.240.202 - 10

Top ASNs:
AS401696 - 28
AS2860 - 12
AS396982 - 12

Top Accounts:
142.93.8.59 - 65
a - 28
hello - 24

Top ISPs:
Vapeline Technology - 28
TVCABO-Portugal - 12
Google LLC - 12

Top Clients:
Unknown - 151

Top Software:
Unknown - 151

Top Keyboards:
Unknown - 151

Top IP Classification:
hosting - 96
Unknown - 55

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

🚨 arena.bawnet.io is live On the air now · NetWeather with Storm Desk: • ottoto2017 at prattohome.com reports Ninja Forms and WPC Product Bundles exploitation for backdoors and admin accounts • mamemomonga at momo.mame.moe reports IDCF Cloud hit; attackers claim 3.6PB encrypted in one region • pbs at pbs.idv.tw carries report on South Korea financial firms hit by AI hacker attacks; police opened a formal case • ottoto2017 at prattohome.com reports BYOD claims Trump Mobile breach and data on 3,615 people leaked Every hour on the hour. Followed by The Forge: the node's build logs, peacefully scrolling across the screen in a symphony of dependency resolution. https://arena.bawnet.io #dialup #modem #bawnet #netweather #stormdesk #theforge

Windows 98 Chaos Arena

#windows98 #honeypot #hacking #bsod #malware #chaos #y2k #retrocomputing #cyberpunk #vaporwave #ambient #tech #247

https://arena.bawnet.io

2026-10-06 RDP #Honeypot IOCs - 897 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
20.233.35.68 - 510
104.196.118.248 - 45
82.85.225.167 - 39

Top ASNs:
AS8075 - 537
AS396982 - 81
AS8612 - 39

Top Accounts:
hello - 582
142.93.8.59 - 234
Test - 24

Top ISPs:
Microsoft Corporation - 534
Google LLC - 81
Tiscali Italia SpA - 39

Top Clients:
Unknown - 897

Top Software:
Unknown - 897

Top Keyboards:
Unknown - 897

Top IP Classification:
hosting - 702
Unknown - 180
hosting & proxy - 15

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-06 RDP #Honeypot IOCs - 598 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
20.233.35.68 - 340
104.196.118.248 - 30
82.85.225.167 - 26

Top ASNs:
AS8075 - 358
AS396982 - 54
AS8612 - 26

Top Accounts:
hello - 388
142.93.8.59 - 156
Test - 16

Top ISPs:
Microsoft Corporation - 356
Google LLC - 54
Tiscali Italia SpA - 26

Top Clients:
Unknown - 598

Top Software:
Unknown - 598

Top Keyboards:
Unknown - 598

Top IP Classification:
hosting - 468
Unknown - 120
hosting & proxy - 10

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-06 RDP #Honeypot IOCs - 299 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
20.233.35.68 - 170
104.196.118.248 - 15
82.85.225.167 - 13

Top ASNs:
AS8075 - 179
AS396982 - 27
AS8612 - 13

Top Accounts:
hello - 194
142.93.8.59 - 78
Test - 8

Top ISPs:
Microsoft Corporation - 178
Google LLC - 27
Tiscali Italia SpA - 13

Top Clients:
Unknown - 299

Top Software:
Unknown - 299

Top Keyboards:
Unknown - 299

Top IP Classification:
hosting - 234
Unknown - 60
hosting & proxy - 5

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

🚨 arena.bawnet.io is live On the air now · NetWeather with Storm Desk: • Seven operators from amefur.asia to toot.blue carry a Japanese front on AI and increasing unauthorized access. • hyoyoshikawa at toot.blue says AI in zero-day detection and attack-tool creation is an unmistakable fact. • sugao at muknown.jp says security needs budget, priority over releases, and care around saved information. • ottoto2017 at prattohome.com reports a new SSH private-port scanner pattern tied to Infrawatch Limited domains. Every hour on the hour. Followed by The Forge: the node's build logs, peacefully scrolling across the screen in a symphony of dependency resolution. https://arena.bawnet.io #dialup #modem #bawnet #netweather #stormdesk #theforge

Windows 98 Chaos Arena

#windows98 #honeypot #hacking #bsod #malware #chaos #y2k #retrocomputing #cyberpunk #vaporwave #ambient #tech #247

https://arena.bawnet.io

2026-10-05 RDP #Honeypot IOCs - 330 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
82.85.225.167 - 36
50.250.207.222 - 33
109.49.210.201 - 27

Top ASNs:
AS8075 - 45
AS8612 - 36
AS7922 - 33

Top Accounts:
142.93.8.59 - 213
hello - 27
Administr - 18

Top ISPs:
Microsoft Corporation - 45
Tiscali Italia SpA - 36
Comcast Cable Communications, LLC - 33

Top Clients:
Unknown - 330

Top Software:
Unknown - 330

Top Keyboards:
Unknown - 330

Top IP Classification:
hosting - 177
Unknown - 150
hosting & proxy - 3

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-05 RDP #Honeypot IOCs - 220 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
82.85.225.167 - 24
50.250.207.222 - 22
109.49.210.201 - 18

Top ASNs:
AS8075 - 30
AS8612 - 24
AS7922 - 22

Top Accounts:
142.93.8.59 - 142
hello - 18
Administr - 12

Top ISPs:
Microsoft Corporation - 30
Tiscali Italia SpA - 24
Comcast Cable Communications, LLC - 22

Top Clients:
Unknown - 220

Top Software:
Unknown - 220

Top Keyboards:
Unknown - 220

Top IP Classification:
hosting - 118
Unknown - 100
hosting & proxy - 2

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-05 RDP #Honeypot IOCs - 110 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
82.85.225.167 - 12
50.250.207.222 - 11
109.49.210.201 - 9

Top ASNs:
AS8075 - 15
AS8612 - 12
AS7922 - 11

Top Accounts:
142.93.8.59 - 71
hello - 9
Administr - 6

Top ISPs:
Microsoft Corporation - 15
Tiscali Italia SpA - 12
Comcast Cable Communications, LLC - 11

Top Clients:
Unknown - 110

Top Software:
Unknown - 110

Top Keyboards:
Unknown - 110

Top IP Classification:
hosting - 59
Unknown - 50
hosting & proxy - 1

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security