I heard GAYINT is busy building out some weird shit, but until then, here are some more lists that might be handy for some of you.  

Recent IPs seen attacking SSL VPN portals:

https://blog.gayint.org/intel/vpnAttacks20260316.txt

Usernames used in password sprays and brute force attempts on SSL VPN portals:

https://blog.gayint.org/intel/usernames.txt

Passwords used in password sprays and brute force attempts on SSL VPN portals:

https://blog.gayint.org/intel/passwords.txt

#GAYINT