home.social

#honeypot — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #honeypot, aggregated by home.social.

  1. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  2. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  3. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  4. 2026-09-10 RDP #Honeypot IOCs - 2139 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 2001
    165.22.57.45 - 18
    80.66.83.43 - 18

    Top ASNs:
    AS135905 - 2001
    AS14061 - 39
    AS396982 - 27

    Top Accounts:
    hello - 2046
    Administr - 27
    Test - 9

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 2001
    DigitalOcean, LLC - 39
    Google LLC - 27

    Top Clients:
    Unknown - 2139

    Top Software:
    Unknown - 2139

    Top Keyboards:
    Unknown - 2139

    Top IP Classification:
    Unknown - 2016
    hosting - 120
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  5. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  6. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  7. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  8. 2026-09-10 RDP #Honeypot IOCs - 1426 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 1334
    165.22.57.45 - 12
    80.66.83.43 - 12

    Top ASNs:
    AS135905 - 1334
    AS14061 - 26
    AS396982 - 18

    Top Accounts:
    hello - 1364
    Administr - 18
    Test - 6

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 1334
    DigitalOcean, LLC - 26
    Google LLC - 18

    Top Clients:
    Unknown - 1426

    Top Software:
    Unknown - 1426

    Top Keyboards:
    Unknown - 1426

    Top IP Classification:
    Unknown - 1344
    hosting - 80
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  9. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  10. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  11. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  12. 2026-09-10 RDP #Honeypot IOCs - 713 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    14.225.19.59 - 667
    165.22.57.45 - 6
    80.66.83.43 - 6

    Top ASNs:
    AS135905 - 667
    AS14061 - 13
    AS396982 - 9

    Top Accounts:
    hello - 682
    Administr - 9
    Test - 3

    Top ISPs:
    Vietnam Posts and Telecommunications Group - 667
    DigitalOcean, LLC - 13
    Google LLC - 9

    Top Clients:
    Unknown - 713

    Top Software:
    Unknown - 713

    Top Keyboards:
    Unknown - 713

    Top IP Classification:
    Unknown - 672
    hosting - 40
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  13. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  14. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  15. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  16. 2026-09-09 RDP #Honeypot IOCs - 5919 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 3300
    168.144.34.49 - 2499
    80.66.83.43 - 18

    Top ASNs:
    AS14061 - 5817
    AS396982 - 42
    AS216473 - 18

    Top Accounts:
    hello - 5850
    Administr - 18
    Test - 6

    Top ISPs:
    DigitalOcean, LLC - 5817
    Google LLC - 42
    Bashinskii Vadim Ruslanovich - 18

    Top Clients:
    Unknown - 5919

    Top Software:
    Unknown - 5919

    Top Keyboards:
    Unknown - 5919

    Top IP Classification:
    hosting - 5910
    Unknown - 6
    hosting & proxy - 3

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  17. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  18. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  19. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  20. 2026-09-09 RDP #Honeypot IOCs - 3946 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 2200
    168.144.34.49 - 1666
    80.66.83.43 - 12

    Top ASNs:
    AS14061 - 3878
    AS396982 - 28
    AS216473 - 12

    Top Accounts:
    hello - 3900
    Administr - 12
    Test - 4

    Top ISPs:
    DigitalOcean, LLC - 3878
    Google LLC - 28
    Bashinskii Vadim Ruslanovich - 12

    Top Clients:
    Unknown - 3946

    Top Software:
    Unknown - 3946

    Top Keyboards:
    Unknown - 3946

    Top IP Classification:
    hosting - 3940
    Unknown - 4
    hosting & proxy - 2

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  21. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  22. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  23. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  24. 2026-09-09 RDP #Honeypot IOCs - 1973 scans
    Thread with top 3 features in each category and links to the full dataset
    #DFIR #InfoSec

    Top IPs:
    152.42.198.23 - 1100
    168.144.34.49 - 833
    80.66.83.43 - 6

    Top ASNs:
    AS14061 - 1939
    AS396982 - 14
    AS216473 - 6

    Top Accounts:
    hello - 1950
    Administr - 6
    Test - 2

    Top ISPs:
    DigitalOcean, LLC - 1939
    Google LLC - 14
    Bashinskii Vadim Ruslanovich - 6

    Top Clients:
    Unknown - 1973

    Top Software:
    Unknown - 1973

    Top Keyboards:
    Unknown - 1973

    Top IP Classification:
    hosting - 1970
    Unknown - 2
    hosting & proxy - 1

    Pastebin links with full 24-hr RDP Honeypot IOC Lists:
    Bad API request, invalid api_dev_key

    #CyberSec #SOC #Blueteam #SecOps #Security

  25. Attacks on AI Infrastructure: 90-Day Honeypot Telemetry

    Wiz Threat Research deployed honeypots across AI and ML services including LiteLLM, Flowise, LangChain, Langflow, ChromaDB, and Ollama, observing sustained attack activity over 90 days. Three distinct attack patterns emerged: exploitation of Internet-facing MCP servers for remote code execution through authentication bypass and command injection vulnerabilities; blind prompt injection attacks against AI agent frameworks using out-of-band DNS callbacks to confirm execution; and AI-native post-exploitation techniques adapted to AI infrastructure internals, including extracting master keys from Python module state and staging cryptominers in framework-specific directories. Attackers demonstrated deep knowledge of AI tooling internals, targeting credential concentration points where proxies hold multiple provider keys, and exploiting agent reachability to execute instructions embedded in requests. The campaigns primarily deployed XMRig cryptominers, leveraging framework-specific paths and processes for camoufl...

    Pulse ID: 6a90b73a3cf4e349584c8d6d
    Pulse Link: otx.alienvault.com/pulse/6a90b
    Pulse Author: AlienVault
    Created: 2026-08-27 22:16:26

    Be advised, this data is unverified and should be considered preliminary. Always do further verification.

    #0Day #CryptoMiner #CyberSecurity #DNS #Edge #HoneyPot #InfoSec #OTX #OpenThreatExchange #Python #RAT #RemoteCodeExecution #bot #AlienVault

  26. Stood up a fresh honeypot in Madrid, pointed a domain I registered in 2008 at it, and just watched.

    36 hours in, my logs are full of domain-name-flavored usernames and passwords, generously seasoned with 2008, 2009, 2010, all the way to 2030 and other years that line up a little too well with when I actually regisstered the thing.

    I did not publish my registration date anywhere. The bots found out anyway and are now trying it as both a username AND password, just to cover their bases. Efficient. Rude. Efficient.

    Something in the pipeline is pulling WHOIS data and using domain age as a password hint. Not earth shattering, not life changing, but in just about a day you start to see the patterns. Now I will wait to see the payloads they drop and further exploration of the 2 additional "hosts" connected to this little decoy.

    What are you doing on this fabulous Wednesday? yes yes, so I'm a nerd - I admit it. And you? Will you admit it too? Do you also have a friendly Flamingo helping set these up?

    #cybersecurity #Infosec #honeypot #nerd #SashaTheFlamingo @sashatheflamingo

  27. 🎉 TODAY’S THE DAY! 🎉

    @sashatheflamingo has officially landed in Leeds—and guess what? She’s not just here to strut her stuff (though, let’s be real, the strutting is fabulous). With a little help from her human (that’s me! 😄), Sasha is taking the stage at #BSidesLeeds to talk about her global #honeypot mischief—er, network.

    Huge shoutout to the BSidesLeeds team for all the incredible work they’ve put in—this community is fierce, friendly, and fantastically nerdy. 💜

    Let’s do this, Leeds! 🦩✨ #SashaTheFlamingo #cybersecurity #honeypots @bsidesleeds

  28. Finally adding additional security checks to our help desk team was a big win yesterday!
    I have my talk at Penn State tomorrow where I'll be talking about macOS defense evasion and RDP honey pots!

    For today, I think I'll be just knocking out some low hanging fruit tickets, tomorrow is going to be a busy day. LETS GO :D

    #security #helpdesk #socialengineering #macos #defenseevasion #honeypot