2026-05-06 RDP #Honeypot IOCs - 426 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
183.81.35.16 - 237
45.142.193.145 - 24
157.230.103.243 - 18

Top ASNs:
AS18403 - 237
AS396982 - 36
AS214295 - 24

Top Accounts:
hello - 279
Administr - 36
Test - 30

Top ISPs:
FPT Telecom Company - 237
Google LLC - 36
Skynet Network LTD - 24

Top Clients:
Unknown - 426

Top Software:
Unknown - 426

Top Keyboards:
Unknown - 426

Top IP Classification:
Unknown - 345
hosting - 72
proxy - 6

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-05-06 RDP #Honeypot IOCs - 284 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
183.81.35.16 - 158
45.142.193.145 - 16
157.230.103.243 - 12

Top ASNs:
AS18403 - 158
AS396982 - 24
AS214295 - 16

Top Accounts:
hello - 186
Administr - 24
Test - 20

Top ISPs:
FPT Telecom Company - 158
Google LLC - 24
Skynet Network LTD - 16

Top Clients:
Unknown - 284

Top Software:
Unknown - 284

Top Keyboards:
Unknown - 284

Top IP Classification:
Unknown - 230
hosting - 48
proxy - 4

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-05-06 RDP #Honeypot IOCs - 142 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
183.81.35.16 - 79
45.142.193.145 - 8
157.230.103.243 - 6

Top ASNs:
AS18403 - 79
AS396982 - 12
AS214295 - 8

Top Accounts:
hello - 93
Administr - 12
Test - 10

Top ISPs:
FPT Telecom Company - 79
Google LLC - 12
Skynet Network LTD - 8

Top Clients:
Unknown - 142

Top Software:
Unknown - 142

Top Keyboards:
Unknown - 142

Top IP Classification:
Unknown - 115
hosting - 24
proxy - 2

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

Nouvel épisode avec David Bizeul sur l'IA dans les SOC : évolution agentique, agents d'investigation et de triage, choix de modèles, et transformation des métiers. Le triage automatisé arrive. La question reste : comment former les experts de demain ?

🎧 Web: https://bit.ly/4taicHL
🎧 Spotify: https://bit.ly/4taicHL
🎧 YouTube: https://bit.ly/4thuBd7

#Cybersécurité #SOC #IA

2026-05-05 RDP #Honeypot IOCs - 501 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
183.81.35.16 - 243
157.245.128.158 - 66
41.82.206.14 - 18

Top ASNs:
AS18403 - 243
AS14061 - 78
AS396982 - 36

Top Accounts:
hello - 336
142.93.8.59 - 39
Test - 30

Top ISPs:
FPT Telecom Company - 243
DigitalOcean, LLC - 78
Google LLC - 36

Top Clients:
Unknown - 501

Top Software:
Unknown - 501

Top Keyboards:
Unknown - 501

Top IP Classification:
Unknown - 339
hosting - 141
hosting & proxy - 9

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-05-05 RDP #Honeypot IOCs - 334 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
183.81.35.16 - 162
157.245.128.158 - 44
41.82.206.14 - 12

Top ASNs:
AS18403 - 162
AS14061 - 52
AS396982 - 24

Top Accounts:
hello - 224
142.93.8.59 - 26
Test - 20

Top ISPs:
FPT Telecom Company - 162
DigitalOcean, LLC - 52
Google LLC - 24

Top Clients:
Unknown - 334

Top Software:
Unknown - 334

Top Keyboards:
Unknown - 334

Top IP Classification:
Unknown - 226
hosting - 94
hosting & proxy - 6

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-05-05 RDP #Honeypot IOCs - 167 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
183.81.35.16 - 81
157.245.128.158 - 22
41.82.206.14 - 6

Top ASNs:
AS18403 - 81
AS14061 - 26
AS396982 - 12

Top Accounts:
hello - 112
142.93.8.59 - 13
Test - 10

Top ISPs:
FPT Telecom Company - 81
DigitalOcean, LLC - 26
Google LLC - 12

Top Clients:
Unknown - 167

Top Software:
Unknown - 167

Top Keyboards:
Unknown - 167

Top IP Classification:
Unknown - 113
hosting - 47
hosting & proxy - 3

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

BlueVoyant Targets Mature SOCs with AI-Powered SaaS Platform

BlueVoyant's innovative SaaS platform harnesses the power of AI to supercharge security operations, empowering teams to defend customers faster and more effectively. This cutting-edge technology also offers a standalone solution for companies seeking to elevate their SOC capabilities.

https://osintsights.com/bluevoyant-targets-mature-socs-with-ai-powered-saas-platform?utm_source=mastodon&utm_medium=social

#AipoweredSaas #Cybersecurity #Soc #Roc #EmergingThreats

Investigation Scenario 🔎

While creating new user accounts in Active Directory, you find that several legitimate user accounts with no apparent connection are part of an undocumented group named "test".

What do you look for to investigate whether an incident occurred? Focus on the efficiency of your investigative actions here.

#InvestigationPath #DFIR #SOC