2026-06-29 RDP #Honeypot IOCs - 7284 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
80.251.132.58 - 6195
134.199.228.58 - 990
157.10.44.121 - 33

Top ASNs:
AS21446 - 6195
AS14061 - 990
AS150862 - 33

Top Accounts:
hello - 7230
Test - 12
zgrab - 6

Top ISPs:
VPK-Telecom - 6195
DigitalOcean, LLC - 990
HAINAMTECH - 33

Top Clients:
Unknown - 7284

Top Software:
Unknown - 7284

Top Keyboards:
Unknown - 7284

Top IP Classification:
Unknown - 6246
hosting - 1029
hosting & proxy - 9

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-06-29 RDP #Honeypot IOCs - 4856 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
80.251.132.58 - 4130
134.199.228.58 - 660
157.10.44.121 - 22

Top ASNs:
AS21446 - 4130
AS14061 - 660
AS150862 - 22

Top Accounts:
hello - 4820
Test - 8
zgrab - 4

Top ISPs:
VPK-Telecom - 4130
DigitalOcean, LLC - 660
HAINAMTECH - 22

Top Clients:
Unknown - 4856

Top Software:
Unknown - 4856

Top Keyboards:
Unknown - 4856

Top IP Classification:
Unknown - 4164
hosting - 686
hosting & proxy - 6

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-06-29 RDP #Honeypot IOCs - 2428 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
80.251.132.58 - 2065
134.199.228.58 - 330
157.10.44.121 - 11

Top ASNs:
AS21446 - 2065
AS14061 - 330
AS150862 - 11

Top Accounts:
hello - 2410
Test - 4
zgrab - 2

Top ISPs:
VPK-Telecom - 2065
DigitalOcean, LLC - 330
HAINAMTECH - 11

Top Clients:
Unknown - 2428

Top Software:
Unknown - 2428

Top Keyboards:
Unknown - 2428

Top IP Classification:
Unknown - 2082
hosting - 343
hosting & proxy - 3

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-06-28 RDP #Honeypot IOCs - 1839 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
134.199.228.58 - 1602
80.94.95.221 - 66
135.171.80.73 - 36

Top ASNs:
AS14061 - 1635
AS204428 - 66
AS396982 - 36

Top Accounts:
hello - 1668
Administr - 66
eltons - 15

Top ISPs:
DigitalOcean, LLC - 1635
SS-Net - 66
Google LLC - 36

Top Clients:
Unknown - 1839

Top Software:
Unknown - 1839

Top Keyboards:
Unknown - 1839

Top IP Classification:
hosting - 1758
Unknown - 78
hosting & proxy - 3

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-06-28 RDP #Honeypot IOCs - 1226 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
134.199.228.58 - 1068
80.94.95.221 - 44
135.171.80.73 - 24

Top ASNs:
AS14061 - 1090
AS204428 - 44
AS396982 - 24

Top Accounts:
hello - 1112
Administr - 44
eltons - 10

Top ISPs:
DigitalOcean, LLC - 1090
SS-Net - 44
Google LLC - 24

Top Clients:
Unknown - 1226

Top Software:
Unknown - 1226

Top Keyboards:
Unknown - 1226

Top IP Classification:
hosting - 1172
Unknown - 52
hosting & proxy - 2

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-06-28 RDP #Honeypot IOCs - 613 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
134.199.228.58 - 534
80.94.95.221 - 22
135.171.80.73 - 12

Top ASNs:
AS14061 - 545
AS204428 - 22
AS396982 - 12

Top Accounts:
hello - 556
Administr - 22
eltons - 5

Top ISPs:
DigitalOcean, LLC - 545
SS-Net - 22
Google LLC - 12

Top Clients:
Unknown - 613

Top Software:
Unknown - 613

Top Keyboards:
Unknown - 613

Top IP Classification:
hosting - 586
Unknown - 26
hosting & proxy - 1

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-06-27 RDP #Honeypot IOCs - 102 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
159.223.238.255 - 24
147.185.133.116 - 12
205.210.31.196 - 9

Top ASNs:
AS396982 - 48
AS14061 - 27
AS214295 - 6

Top Accounts:
hello - 33
zgrab - 9
yhDxyQONx - 6

Top ISPs:
Google LLC - 48
DigitalOcean, LLC - 27
Skynet Network LTD - 6

Top Clients:
Unknown - 102

Top Software:
Unknown - 102

Top Keyboards:
Unknown - 102

Top IP Classification:
hosting - 84
Unknown - 12
hosting & proxy - 6

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-06-27 RDP #Honeypot IOCs - 68 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
159.223.238.255 - 16
147.185.133.116 - 8
205.210.31.196 - 6

Top ASNs:
AS396982 - 32
AS14061 - 18
AS214295 - 4

Top Accounts:
hello - 22
zgrab - 6
yhDxyQONx - 4

Top ISPs:
Google LLC - 32
DigitalOcean, LLC - 18
Skynet Network LTD - 4

Top Clients:
Unknown - 68

Top Software:
Unknown - 68

Top Keyboards:
Unknown - 68

Top IP Classification:
hosting - 56
Unknown - 8
hosting & proxy - 4

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

2026-06-27 RDP #Honeypot IOCs - 34 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
159.223.238.255 - 8
147.185.133.116 - 4
205.210.31.196 - 3

Top ASNs:
AS396982 - 16
AS14061 - 9
AS214295 - 2

Top Accounts:
hello - 11
zgrab - 3
yhDxyQONx - 2

Top ISPs:
Google LLC - 16
DigitalOcean, LLC - 9
Skynet Network LTD - 2

Top Clients:
Unknown - 34

Top Software:
Unknown - 34

Top Keyboards:
Unknown - 34

Top IP Classification:
hosting - 28
Unknown - 4
hosting & proxy - 2

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security

๐Ÿ” Lambda Watchdog detected that CVE-2026-44492 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/553 #AWS #Lambda #Security #CVE #DevOps #SecOps
CVE-2026-44492 (HIGH): detected in Lambda Docker Images. ยท Issue #553 ยท aws/aws-lambda-base-images

CVE Details CVE ID Severity Affected Package Installed Version Fixed Version Date Published Date of Scan CVE-2026-44492 HIGH axios 1.15.2 1.16.0, 0.32.0 2026-06-11T17:16:33.167Z 2026-06-12T10:18:16...

GitHub