#honeypot — Public Fediverse posts

2026-10-06 RDP #Honeypot IOCs - 897 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
20.233.35.68 - 510
104.196.118.248 - 45
82.85.225.167 - 39

Top ASNs:
AS8075 - 537
AS396982 - 81
AS8612 - 39

Top Accounts:
hello - 582
142.93.8.59 - 234
Test - 24

Top ISPs:
Microsoft Corporation - 534
Google LLC - 81
Tiscali Italia SpA - 39

Top Clients:
Unknown - 897

Top Software:
Unknown - 897

Top Keyboards:
Unknown - 897

Top IP Classification:
hosting - 702
Unknown - 180
hosting & proxy - 15

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-06 RDP #Honeypot IOCs - 598 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
20.233.35.68 - 340
104.196.118.248 - 30
82.85.225.167 - 26

Top ASNs:
AS8075 - 358
AS396982 - 54
AS8612 - 26

Top Accounts:
hello - 388
142.93.8.59 - 156
Test - 16

Top ISPs:
Microsoft Corporation - 356
Google LLC - 54
Tiscali Italia SpA - 26

Top Clients:
Unknown - 598

Top Software:
Unknown - 598

Top Keyboards:
Unknown - 598

Top IP Classification:
hosting - 468
Unknown - 120
hosting & proxy - 10

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-06 RDP #Honeypot IOCs - 299 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
20.233.35.68 - 170
104.196.118.248 - 15
82.85.225.167 - 13

Top ASNs:
AS8075 - 179
AS396982 - 27
AS8612 - 13

Top Accounts:
hello - 194
142.93.8.59 - 78
Test - 8

Top ISPs:
Microsoft Corporation - 178
Google LLC - 27
Tiscali Italia SpA - 13

Top Clients:
Unknown - 299

Top Software:
Unknown - 299

Top Keyboards:
Unknown - 299

Top IP Classification:
hosting - 234
Unknown - 60
hosting & proxy - 5

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

🚨 arena.bawnet.io is live On the air now · NetWeather with Storm Desk: • Seven operators from amefur.asia to toot.blue carry a Japanese front on AI and increasing unauthorized access. • hyoyoshikawa at toot.blue says AI in zero-day detection and attack-tool creation is an unmistakable fact. • sugao at muknown.jp says security needs budget, priority over releases, and care around saved information. • ottoto2017 at prattohome.com reports a new SSH private-port scanner pattern tied to Infrawatch Limited domains. Every hour on the hour. Followed by The Forge: the node's build logs, peacefully scrolling across the screen in a symphony of dependency resolution. https://arena.bawnet.io #dialup #modem #bawnet #netweather #stormdesk #theforge

Windows 98 Chaos Arena

#windows98 #honeypot #hacking #bsod #malware #chaos #y2k #retrocomputing #cyberpunk #vaporwave #ambient #tech #247

https://arena.bawnet.io

2026-10-05 RDP #Honeypot IOCs - 330 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
82.85.225.167 - 36
50.250.207.222 - 33
109.49.210.201 - 27

Top ASNs:
AS8075 - 45
AS8612 - 36
AS7922 - 33

Top Accounts:
142.93.8.59 - 213
hello - 27
Administr - 18

Top ISPs:
Microsoft Corporation - 45
Tiscali Italia SpA - 36
Comcast Cable Communications, LLC - 33

Top Clients:
Unknown - 330

Top Software:
Unknown - 330

Top Keyboards:
Unknown - 330

Top IP Classification:
hosting - 177
Unknown - 150
hosting & proxy - 3

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-05 RDP #Honeypot IOCs - 220 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
82.85.225.167 - 24
50.250.207.222 - 22
109.49.210.201 - 18

Top ASNs:
AS8075 - 30
AS8612 - 24
AS7922 - 22

Top Accounts:
142.93.8.59 - 142
hello - 18
Administr - 12

Top ISPs:
Microsoft Corporation - 30
Tiscali Italia SpA - 24
Comcast Cable Communications, LLC - 22

Top Clients:
Unknown - 220

Top Software:
Unknown - 220

Top Keyboards:
Unknown - 220

Top IP Classification:
hosting - 118
Unknown - 100
hosting & proxy - 2

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-05 RDP #Honeypot IOCs - 110 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
82.85.225.167 - 12
50.250.207.222 - 11
109.49.210.201 - 9

Top ASNs:
AS8075 - 15
AS8612 - 12
AS7922 - 11

Top Accounts:
142.93.8.59 - 71
hello - 9
Administr - 6

Top ISPs:
Microsoft Corporation - 15
Tiscali Italia SpA - 12
Comcast Cable Communications, LLC - 11

Top Clients:
Unknown - 110

Top Software:
Unknown - 110

Top Keyboards:
Unknown - 110

Top IP Classification:
hosting - 59
Unknown - 50
hosting & proxy - 1

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

🚨 arena.bawnet.io is live On the air now · NetWeather with Storm Desk: • mastodon.stickbear.me administrators close registrations after a significant influx of spam sign ups. • ottoto2017 at prattohome.com reports Infrawatch Limited domains poking at a private SSH port since late September. • wagesj45 at mastodon.jordanwages.com tells jerry that fedia.io’s SSL certificate had expired. • sakurajima at sakurajima.moe says Yurigaoka community creation now needs permission to keep bad actors out. Every hour on the hour. Followed by The Forge: the node's build logs, peacefully scrolling across the screen in a symphony of dependency resolution. https://arena.bawnet.io #dialup #modem #bawnet #netweather #stormdesk #theforge

Windows 98 Chaos Arena

#windows98 #honeypot #hacking #bsod #malware #chaos #y2k #retrocomputing #cyberpunk #vaporwave #ambient #tech #247

https://arena.bawnet.io

🚨 arena.bawnet.io is live On the air now · NetWeather with Storm Desk: • Darkcat09 at gts.dc09.xyz says tl.dc09.xyz and 4g.dc09.xyz are down after Alpine 3.24 removed Nginx Unit. • Deoan at masto.deoan.org reports planned maintenance, with live migration to another host expected if all goes well. • SolSoCoG at ieji.de says a new image host cutover may cause image issues for an hour or three. • EFF at mastodon.social says a federal judge blocked Utah’s anti-VPN age verification law. Every hour on the hour. Followed by The Forge: the node's build logs, peacefully scrolling across the screen in a symphony of dependency resolution. https://arena.bawnet.io

Windows 98 Chaos Arena

#windows98 #honeypot #hacking #bsod #malware #chaos #y2k #retrocomputing #cyberpunk #vaporwave #ambient #tech #247 #dialup #modem #bawnet #netweather #stormdesk #theforge

https://arena.bawnet.io