#honeypot — Public Fediverse posts

2026-10-08 RDP #Honeypot IOCs - 597 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
165.232.97.161 - 36
34.170.147.105 - 36
34.82.15.211 - 36

Top ASNs:
AS396982 - 252
AS14061 - 39
AS8075 - 33

Top Accounts:
hello - 270
142.93.8.59 - 219
(empty) - 15

Top ISPs:
Google LLC - 252
DigitalOcean, LLC - 39
Microsoft Corporation - 33

Top Clients:
Unknown - 597

Top Software:
Unknown - 597

Top Keyboards:
Unknown - 597

Top IP Classification:
hosting - 459
Unknown - 120
hosting & proxy - 18

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-08 RDP #Honeypot IOCs - 398 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
165.232.97.161 - 24
34.170.147.105 - 24
34.82.15.211 - 24

Top ASNs:
AS396982 - 168
AS14061 - 26
AS8075 - 22

Top Accounts:
hello - 180
142.93.8.59 - 146
(empty) - 10

Top ISPs:
Google LLC - 168
DigitalOcean, LLC - 26
Microsoft Corporation - 22

Top Clients:
Unknown - 398

Top Software:
Unknown - 398

Top Keyboards:
Unknown - 398

Top IP Classification:
hosting - 306
Unknown - 80
hosting & proxy - 12

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-08 RDP #Honeypot IOCs - 199 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
165.232.97.161 - 12
34.170.147.105 - 12
34.82.15.211 - 12

Top ASNs:
AS396982 - 84
AS14061 - 13
AS8075 - 11

Top Accounts:
hello - 90
142.93.8.59 - 73
(empty) - 5

Top ISPs:
Google LLC - 84
DigitalOcean, LLC - 13
Microsoft Corporation - 11

Top Clients:
Unknown - 199

Top Software:
Unknown - 199

Top Keyboards:
Unknown - 199

Top IP Classification:
hosting - 153
Unknown - 40
hosting & proxy - 6

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-07 RDP #Honeypot IOCs - 453 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
156.225.17.60 - 84
109.49.210.201 - 36
172.232.240.202 - 30

Top ASNs:
AS401696 - 84
AS2860 - 36
AS396982 - 36

Top Accounts:
142.93.8.59 - 195
a - 84
hello - 72

Top ISPs:
Vapeline Technology - 84
TVCABO-Portugal - 36
Google LLC - 36

Top Clients:
Unknown - 453

Top Software:
Unknown - 453

Top Keyboards:
Unknown - 453

Top IP Classification:
hosting - 288
Unknown - 165

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-07 RDP #Honeypot IOCs - 302 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
156.225.17.60 - 56
109.49.210.201 - 24
172.232.240.202 - 20

Top ASNs:
AS401696 - 56
AS2860 - 24
AS396982 - 24

Top Accounts:
142.93.8.59 - 130
a - 56
hello - 48

Top ISPs:
Vapeline Technology - 56
TVCABO-Portugal - 24
Google LLC - 24

Top Clients:
Unknown - 302

Top Software:
Unknown - 302

Top Keyboards:
Unknown - 302

Top IP Classification:
hosting - 192
Unknown - 110

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-07 RDP #Honeypot IOCs - 151 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
156.225.17.60 - 28
109.49.210.201 - 12
172.232.240.202 - 10

Top ASNs:
AS401696 - 28
AS2860 - 12
AS396982 - 12

Top Accounts:
142.93.8.59 - 65
a - 28
hello - 24

Top ISPs:
Vapeline Technology - 28
TVCABO-Portugal - 12
Google LLC - 12

Top Clients:
Unknown - 151

Top Software:
Unknown - 151

Top Keyboards:
Unknown - 151

Top IP Classification:
hosting - 96
Unknown - 55

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

🚨 arena.bawnet.io is live On the air now · NetWeather with Storm Desk: • ottoto2017 at prattohome.com reports Ninja Forms and WPC Product Bundles exploitation for backdoors and admin accounts • mamemomonga at momo.mame.moe reports IDCF Cloud hit; attackers claim 3.6PB encrypted in one region • pbs at pbs.idv.tw carries report on South Korea financial firms hit by AI hacker attacks; police opened a formal case • ottoto2017 at prattohome.com reports BYOD claims Trump Mobile breach and data on 3,615 people leaked Every hour on the hour. Followed by The Forge: the node's build logs, peacefully scrolling across the screen in a symphony of dependency resolution. https://arena.bawnet.io #dialup #modem #bawnet #netweather #stormdesk #theforge

Windows 98 Chaos Arena

#windows98 #honeypot #hacking #bsod #malware #chaos #y2k #retrocomputing #cyberpunk #vaporwave #ambient #tech #247

https://arena.bawnet.io

2026-10-06 RDP #Honeypot IOCs - 897 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
20.233.35.68 - 510
104.196.118.248 - 45
82.85.225.167 - 39

Top ASNs:
AS8075 - 537
AS396982 - 81
AS8612 - 39

Top Accounts:
hello - 582
142.93.8.59 - 234
Test - 24

Top ISPs:
Microsoft Corporation - 534
Google LLC - 81
Tiscali Italia SpA - 39

Top Clients:
Unknown - 897

Top Software:
Unknown - 897

Top Keyboards:
Unknown - 897

Top IP Classification:
hosting - 702
Unknown - 180
hosting & proxy - 15

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-06 RDP #Honeypot IOCs - 598 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
20.233.35.68 - 340
104.196.118.248 - 30
82.85.225.167 - 26

Top ASNs:
AS8075 - 358
AS396982 - 54
AS8612 - 26

Top Accounts:
hello - 388
142.93.8.59 - 156
Test - 16

Top ISPs:
Microsoft Corporation - 356
Google LLC - 54
Tiscali Italia SpA - 26

Top Clients:
Unknown - 598

Top Software:
Unknown - 598

Top Keyboards:
Unknown - 598

Top IP Classification:
hosting - 468
Unknown - 120
hosting & proxy - 10

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-10-06 RDP #Honeypot IOCs - 299 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
20.233.35.68 - 170
104.196.118.248 - 15
82.85.225.167 - 13

Top ASNs:
AS8075 - 179
AS396982 - 27
AS8612 - 13

Top Accounts:
hello - 194
142.93.8.59 - 78
Test - 8

Top ISPs:
Microsoft Corporation - 178
Google LLC - 27
Tiscali Italia SpA - 13

Top Clients:
Unknown - 299

Top Software:
Unknown - 299

Top Keyboards:
Unknown - 299

Top IP Classification:
hosting - 234
Unknown - 60
hosting & proxy - 5

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

🚨 arena.bawnet.io is live On the air now · NetWeather with Storm Desk: • Seven operators from amefur.asia to toot.blue carry a Japanese front on AI and increasing unauthorized access. • hyoyoshikawa at toot.blue says AI in zero-day detection and attack-tool creation is an unmistakable fact. • sugao at muknown.jp says security needs budget, priority over releases, and care around saved information. • ottoto2017 at prattohome.com reports a new SSH private-port scanner pattern tied to Infrawatch Limited domains. Every hour on the hour. Followed by The Forge: the node's build logs, peacefully scrolling across the screen in a symphony of dependency resolution. https://arena.bawnet.io #dialup #modem #bawnet #netweather #stormdesk #theforge

Windows 98 Chaos Arena

#windows98 #honeypot #hacking #bsod #malware #chaos #y2k #retrocomputing #cyberpunk #vaporwave #ambient #tech #247

https://arena.bawnet.io