Elektrine
Log in Register

#blueteam

67 posts · Last used 15h

Back to Timeline
rdpsnitch
RDP Snitch @rdpsnitch@infosec.exchange · 15h ago
2026-07-25 RDP #Honeypot IOCs - 2232 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 5.44.100.245 - 2124 35.203.211.119 - 12 134.209.62.30 - 12 Top ASNs: AS8648 - 2124 AS396982 - 30 AS14061 - 15 Top Accounts: hello - 2142 60wcz1bp - 12 Administr - 9 Top ISPs: Alvotech GmbH via velia.net - 2124 Google LLC - 30 DigitalOcean, LLC - 15 Top Clients: Unknown - 2232 Top Software: Unknown - 2232 Top Keyboards: Unknown - 2232 Top IP Classification: Unknown - 2151 hosting - 66 mobile & hosting - 12 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0
0
0
rdpsnitch
RDP Snitch @rdpsnitch@infosec.exchange · 15h ago
2026-07-25 RDP #Honeypot IOCs - 1488 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 5.44.100.245 - 1416 35.203.211.119 - 8 134.209.62.30 - 8 Top ASNs: AS8648 - 1416 AS396982 - 20 AS14061 - 10 Top Accounts: hello - 1428 60wcz1bp - 8 Administr - 6 Top ISPs: Alvotech GmbH via velia.net - 1416 Google LLC - 20 DigitalOcean, LLC - 10 Top Clients: Unknown - 1488 Top Software: Unknown - 1488 Top Keyboards: Unknown - 1488 Top IP Classification: Unknown - 1434 hosting - 44 mobile & hosting - 8 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0
0
0
rdpsnitch
RDP Snitch @rdpsnitch@infosec.exchange · 15h ago
2026-07-25 RDP #Honeypot IOCs - 744 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 5.44.100.245 - 708 35.203.211.119 - 4 134.209.62.30 - 4 Top ASNs: AS8648 - 708 AS396982 - 10 AS14061 - 5 Top Accounts: hello - 714 60wcz1bp - 4 Administr - 3 Top ISPs: Alvotech GmbH via velia.net - 708 Google LLC - 10 DigitalOcean, LLC - 5 Top Clients: Unknown - 744 Top Software: Unknown - 744 Top Keyboards: Unknown - 744 Top IP Classification: Unknown - 717 hosting - 22 mobile & hosting - 4 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0
0
0
rdpsnitch
RDP Snitch @rdpsnitch@infosec.exchange · 1d ago
2026-07-24 RDP #Honeypot IOCs - 120 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 139.59.230.134 - 30 205.210.31.130 - 9 45.227.254.132 - 9 Top ASNs: AS14061 - 30 AS396982 - 27 AS267784 - 9 Top Accounts: hello - 33 Administr - 12 (empty) - 9 Top ISPs: DIGITALOCEAN - 30 Google LLC - 27 Flyservers S.A. - 9 Top Clients: Unknown - 120 Top Software: Unknown - 120 Top Keyboards: Unknown - 120 Top IP Classification: hosting - 75 Unknown - 36 proxy - 6 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0
0
0
rdpsnitch
RDP Snitch @rdpsnitch@infosec.exchange · 1d ago
2026-07-24 RDP #Honeypot IOCs - 80 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 139.59.230.134 - 20 205.210.31.130 - 6 45.227.254.132 - 6 Top ASNs: AS14061 - 20 AS396982 - 18 AS267784 - 6 Top Accounts: hello - 22 Administr - 8 (empty) - 6 Top ISPs: DIGITALOCEAN - 20 Google LLC - 18 Flyservers S.A. - 6 Top Clients: Unknown - 80 Top Software: Unknown - 80 Top Keyboards: Unknown - 80 Top IP Classification: hosting - 50 Unknown - 24 proxy - 4 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0
0
0
rdpsnitch
RDP Snitch @rdpsnitch@infosec.exchange · 1d ago
2026-07-24 RDP #Honeypot IOCs - 40 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 139.59.230.134 - 10 205.210.31.130 - 3 45.227.254.132 - 3 Top ASNs: AS14061 - 10 AS396982 - 9 AS267784 - 3 Top Accounts: hello - 11 Administr - 4 (empty) - 3 Top ISPs: DIGITALOCEAN - 10 Google LLC - 9 Flyservers S.A. - 3 Top Clients: Unknown - 40 Top Software: Unknown - 40 Top Keyboards: Unknown - 40 Top IP Classification: hosting - 25 Unknown - 12 proxy - 2 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0
0
0
niclas
Niclas @niclas@infosec.exchange · 1d ago
Since March 2026, I have been running honeypots on the internet to collect data and analyze attack patterns. The amount of data stored in the log database has steadily increased over the past few months and has now reached 70 GB of raw logs. I may need to consider a better archiving strategy, especially since I am thinking about adding a T-Pot instance, which would significantly increase the load on the current database setup. #honeypot #postgresql #sysadmin #cybersecurity #blueteam
0
0
0
ll
ll :donor: @ll@infosec.exchange · 2d ago
RE: https://infosec.exchange/@ll/116951091146117719 Last days to apply. Come cyber with us at the ILO, a United Nations agency. Deadline 29/07 Boosts really appreciated! #fedihire #itjobs #infosec #infosecjobs #hire #GetFediHired #Hiring #blueteam #FediHired #cybersecurity #infosec
Quoting
ll :donor: @ll@infosec.exchange
We are hiring! United Nations cyber job in Geneva! If you’re passionate about incident response, threat hunting, detection engineering, and using cybersecurity to support a meaningful global mission, come work with us at the International Labour Organization, a specialized agency of the United Nations. If this sounds like you, or someone in your network, please take a look and share. International recruitment, relocation to Geneva included and other benefits. https://jobs.ilo.org/job/Information-Security-Operations-Officer/13686-en_GB Deadline July 29th! #fedihire #itjobs #infosec #infosecjobs #hire #GetFediHired #Hiring #blueteam #FediHired #cybersecurity #infosec
Open quoted post
0
0
0
bsidesba
BSides Bratislava @bsidesba@infosec.exchange · 2d ago
🚀 Every year, we challenge ourselves to raise the bar. A conference isn’t defined only by its talks, workshops, or Capture The Flag. It’s also about creating an identity that people remember. Today, we’re excited to share the visual direction for BSides Bratislava 2027. 🛡️ Guardians of the Future This year’s theme represents those who stand at the front line of cybersecurity—professionals, researchers, students, defenders, and the community working together to protect tomorrow’s digital world. This is only the beginning. We’re incredibly excited for what’s ahead, and we can’t wait to welcome you to BSides Bratislava 2027. The future isn’t something we wait for. It’s something we protect. #BSidesBratislava #BSidesBA #CyberSecurity #InformationSecurity #BlueTeam #RedTeam #CTF #Community #CyberDefense #Bratislava #Slovakia #GuardiansOfTheFuture #Infosec #SecurityCommunity #BSidesBratislava2027
0
0
0
thecybersecguru @thecybersecguru@infosec.exchange · 2d ago
🚨 Check Point admins: Patch NOW. A critical authentication bypass, CVE-2026-16232, is being actively exploited and can let an unauthenticated attacker obtain full administrative access to SmartConsole by abusing the login process. If your Security Management or MDSM server is internet-exposed, don't wait. 🛡️ Apply the latest Jumbo Hotfix immediately. Read the full technical analysis: 🔗 https://thecybersecguru.com/news/check-point-cve-2026-16232-authentication-bypass-active-exploitation/ #CyberSecurity #CheckPoint #CVE202616232 #ZeroDay #ThreatIntel #BlueTeam #SOC #InfoSec #Vulnerability #DFIR #PatchNow
0
0
0
rdpsnitch
RDP Snitch @rdpsnitch@infosec.exchange · 2d ago
2026-07-23 RDP #Honeypot IOCs - 6951 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 173.225.102.23 - 6795 139.59.230.134 - 30 216.226.76.30 - 30 Top ASNs: AS19318 - 6795 AS396982 - 36 AS14061 - 30 Top Accounts: hello - 6825 root - 18 Administr - 15 Top ISPs: Interserver, Inc - 6795 Google LLC - 36 DIGITALOCEAN - 30 Top Clients: Unknown - 6951 Top Software: Unknown - 6951 Top Keyboards: Unknown - 6951 Top IP Classification: hosting - 6870 Unknown - 78 hosting & proxy - 3 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0
0
0
rdpsnitch
RDP Snitch @rdpsnitch@infosec.exchange · 2d ago
2026-07-23 RDP #Honeypot IOCs - 2317 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 173.225.102.23 - 2265 139.59.230.134 - 10 216.226.76.30 - 10 Top ASNs: AS19318 - 2265 AS396982 - 12 AS14061 - 10 Top Accounts: hello - 2275 root - 6 Administr - 5 Top ISPs: Interserver, Inc - 2265 Google LLC - 12 DIGITALOCEAN - 10 Top Clients: Unknown - 2317 Top Software: Unknown - 2317 Top Keyboards: Unknown - 2317 Top IP Classification: hosting - 2290 Unknown - 26 hosting & proxy - 1 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0
0
0
rdpsnitch
RDP Snitch @rdpsnitch@infosec.exchange · 3d ago
2026-07-22 RDP #Honeypot IOCs - 708 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 51.77.190.75 - 597 31.70.99.149 - 15 45.142.193.145 - 12 Top ASNs: AS16276 - 597 AS396982 - 36 AS63949 - 18 Top Accounts: hello - 621 Test - 12 07va67qh - 12 Top ISPs: OVH SAS - 597 Google LLC - 36 IONOS SE - 15 Top Clients: Unknown - 708 Top Software: Unknown - 708 Top Keyboards: Unknown - 708 Top IP Classification: hosting - 675 Unknown - 18 hosting & proxy - 15 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0
0
0
rdpsnitch
RDP Snitch @rdpsnitch@infosec.exchange · 3d ago
2026-07-22 RDP #Honeypot IOCs - 472 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 51.77.190.75 - 398 31.70.99.149 - 10 45.142.193.145 - 8 Top ASNs: AS16276 - 398 AS396982 - 24 AS63949 - 12 Top Accounts: hello - 414 Test - 8 07va67qh - 8 Top ISPs: OVH SAS - 398 Google LLC - 24 IONOS SE - 10 Top Clients: Unknown - 472 Top Software: Unknown - 472 Top Keyboards: Unknown - 472 Top IP Classification: hosting - 450 Unknown - 12 hosting & proxy - 10 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0
0
0
rdpsnitch
RDP Snitch @rdpsnitch@infosec.exchange · 3d ago
2026-07-22 RDP #Honeypot IOCs - 236 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 51.77.190.75 - 199 31.70.99.149 - 5 45.142.193.145 - 4 Top ASNs: AS16276 - 199 AS396982 - 12 AS63949 - 6 Top Accounts: hello - 207 Test - 4 07va67qh - 4 Top ISPs: OVH SAS - 199 Google LLC - 12 IONOS SE - 5 Top Clients: Unknown - 236 Top Software: Unknown - 236 Top Keyboards: Unknown - 236 Top IP Classification: hosting - 225 Unknown - 6 hosting & proxy - 5 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0
0
0
thecybersecguru @thecybersecguru@infosec.exchange · 4d ago
A third SharePoint vulnerability is now being actively exploited. CVE-2026-50522 (CVSS 9.8) is a critical .NET deserialization vulnerability affecting on-premises SharePoint Server. Following the release of a public PoC, researchers observed attackers exploiting the flaw to extract ASP.NET machine keys, enabling persistent access beyond simply achieving RCE. One important point: applying Microsoft's patch may not be sufficient if a server was already compromised. Incident response should include reviewing IIS logs, investigating potential machine key exposure, and rotating compromised cryptographic secrets where necessary. I published a technical deep dive covering everything. Read here: https://thecybersecguru.com/news/sharepoint-cve-2026-50522-active-exploitation/ #InfoSec #CyberSecurity #SharePoint #Microsoft #DFIR #ThreatHunting #BlueTeam #Vulnerability
0
0
0
reput_io
Reput.io @reput_io@infosec.exchange · 4d ago
A theme worth sitting with from this week's reporting: the malicious traffic wasn't hiding near trusted infrastructure, it was flowing through it. Group-IB's HollowGraph runs its C2 inside a compromised Microsoft 365 calendar. Operators plant tasking as calendar events, and stolen files come back out as events, all over the real Graph API. https://www.reput.io/blog/reputation-radar-03 #blueteam #threatintel #infosec
0
0
0
thecybersecguru @thecybersecguru@infosec.exchange · 4d ago
🎉 AI Subscription Giveaway! As a thank you to everyone supporting my work, I'm giving away some AI subscriptions (ChatGPT and Claude, Pro and Max Inclusive) exclusively to active Buy Me a Coffee members. ✔️ Any membership tier is eligible ✔️ Winner chosen at random ✔️ Be sure to use the same email address as your Buy Me a Coffee membership when entering, otherwise your entry cannot be verified. Enter here: https://thecybersecguru.com/giveaways/ai-subscription-giveaway/ Thank you for helping support independent cybersecurity research, projects, educational content and much much more. ❤️ To support me, please buy me a coffee: https://buymeacoffee.com/thecybersecguru/membership #InfoSec #CyberSecurity #Giveaway #AI #OpenSource #BlueTeam #RedTeam
0
0
0
bsidesba
BSides Bratislava @bsidesba@infosec.exchange · 4d ago
🚀 The wait is over. Today, we’re proud to unveil the new visual identity for BSides Bratislava 2027. Every BSides edition tells a different story. This year’s design is more than just a new look—it’s a reflection of our vision, our community, and the future we’re building together. Inspired by the theme “Guardians of the Future,” the 2027 identity represents innovation, resilience, collaboration, and the people who work every day to secure tomorrow’s digital world. #BSidesBratislava #BSides #CyberSecurity #InfoSec #Community #GuardiansOfTheFuture #BlueTeam #RedTeam #ThreatIntelligence #SOC #DFIR #Hacking #Conference #Bratislava #CyberCommunity #BSides2027
0
0
0
Bluewall
Bluewall :verified: @Bluewall@infosec.exchange · 4d ago
Happy to share I've joined the Microsoft Security Advisors Program :) Looking forward to giving Microsoft's engineering teams some real-world Blue Team feedback from the field. #MSSecurity #BlueTeam #Intune #Defender #Entra
0
0
0