2026-03-29 RDP #Honeypot IOCs - 597 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
143.198.111.35 - 459
80.94.95.221 - 21
80.94.95.83 - 12

Top ASNs:
AS14061 - 462
AS204428 - 42
AS396982 - 36

Top Accounts:
hello - 474
Administr - 48
Test - 18

Top ISPs:
DigitalOcean, LLC - 462
SS-Net - 42
Google LLC - 36

Top Clients:
Unknown - 597

Top Software:
Unknown - 597

Top Keyboards:
Unknown - 597

Top IP Classification:
hosting & proxy - 462
Unknown - 75
hosting - 60

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-03-29 RDP #Honeypot IOCs - 398 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
143.198.111.35 - 306
80.94.95.221 - 14
80.94.95.83 - 8

Top ASNs:
AS14061 - 308
AS204428 - 28
AS396982 - 24

Top Accounts:
hello - 316
Administr - 32
Test - 12

Top ISPs:
DigitalOcean, LLC - 308
SS-Net - 28
Google LLC - 24

Top Clients:
Unknown - 398

Top Software:
Unknown - 398

Top Keyboards:
Unknown - 398

Top IP Classification:
hosting & proxy - 308
Unknown - 50
hosting - 40

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-03-29 RDP #Honeypot IOCs - 199 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
143.198.111.35 - 153
80.94.95.221 - 7
80.94.95.83 - 4

Top ASNs:
AS14061 - 154
AS204428 - 14
AS396982 - 12

Top Accounts:
hello - 158
Administr - 16
Test - 6

Top ISPs:
DigitalOcean, LLC - 154
SS-Net - 14
Google LLC - 12

Top Clients:
Unknown - 199

Top Software:
Unknown - 199

Top Keyboards:
Unknown - 199

Top IP Classification:
hosting & proxy - 154
Unknown - 25
hosting - 20

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

๐Ÿ›‘ CVE-2026-4946: HIGH severity OS command injection in Ghidra <12.0.3. Crafted binaries can trigger arbitrary code via clickable @Execute annotations in the UI. Upgrade now & analyze unknown files in sandboxes. https://radar.offseq.com/threat/cve-2026-4946-cwe-78-improper-neutralization-of-sp-c53cae64 #OffSeq #Ghidra #BlueTeam

2026-03-28 RDP #Honeypot IOCs - 765 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
143.198.111.35 - 495
38.76.31.20 - 108
80.94.95.221 - 48

Top ASNs:
AS14061 - 510
AS174 - 108
AS204428 - 63

Top Accounts:
hello - 606
Administr - 87
Test - 12

Top ISPs:
DigitalOcean, LLC - 510
Cogent Communications - 108
SS-Net - 63

Top Clients:
Unknown - 765

Top Software:
Unknown - 765

Top Keyboards:
Unknown - 765

Top IP Classification:
hosting & proxy - 510
Unknown - 216
hosting - 39

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-03-28 RDP #Honeypot IOCs - 510 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
143.198.111.35 - 330
38.76.31.20 - 72
80.94.95.221 - 32

Top ASNs:
AS14061 - 340
AS174 - 72
AS204428 - 42

Top Accounts:
hello - 404
Administr - 58
Test - 8

Top ISPs:
DigitalOcean, LLC - 340
Cogent Communications - 72
SS-Net - 42

Top Clients:
Unknown - 510

Top Software:
Unknown - 510

Top Keyboards:
Unknown - 510

Top IP Classification:
hosting & proxy - 340
Unknown - 144
hosting - 26

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-03-28 RDP #Honeypot IOCs - 255 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
143.198.111.35 - 165
38.76.31.20 - 36
80.94.95.221 - 16

Top ASNs:
AS14061 - 170
AS174 - 36
AS204428 - 21

Top Accounts:
hello - 202
Administr - 29
Test - 4

Top ISPs:
DigitalOcean, LLC - 170
Cogent Communications - 36
SS-Net - 21

Top Clients:
Unknown - 255

Top Software:
Unknown - 255

Top Keyboards:
Unknown - 255

Top IP Classification:
hosting & proxy - 170
Unknown - 72
hosting - 13

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

Rest is part of the system!

Burnout is the #1 reason people quit their cert journey 3 months in. Schedule recovery the same way you schedule study.

The people who make it in this field aren't always the most talented.
They're the most organized and the most consistent.

What's one habit that's made the biggest difference in your cybersecurity growth? ๐Ÿ‘‡

#InfoSec #CyberSecurity #CertPrep #OSCP #BlueTeam #RedTeam #Productivity #CareerGrowth #LearningInPublic

7/7
If you're on this server, you're probably already serious about this field.
The technical skills are what get you hired โ€” but the system behind your studying is what gets you to the finish line without burning out.
Study smarter. ๐Ÿ”

#InfoSec #CyberSecurity #Notion #OSCP #CertPrep #BlueTeam #RedTeam #Productivity #StudyTips

2026-03-27 RDP #Honeypot IOCs - 2691 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
183.81.35.16 - 2283
38.76.31.20 - 216
14.236.13.46 - 33

Top ASNs:
AS18403 - 2283
AS174 - 216
AS396982 - 48

Top Accounts:
hello - 2574
Administr - 39
Test - 18

Top ISPs:
FPT Telecom Company - 2283
Cogent Communications - 216
Google LLC - 48

Top Clients:
Unknown - 2691

Top Software:
Unknown - 2691

Top Keyboards:
Unknown - 2691

Top IP Classification:
Unknown - 2610
hosting - 81

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security