#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
2026-09-05 RDP #Honeypot IOCs - 2556 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 2409
103.178.235.50 - 27
217.160.240.135 - 27Top ASNs:
Unknown - 2409
AS396982 - 48
AS140810 - 27Top Accounts:
hello - 2469
Administr - 12
0siivpyz - 12Top ISPs:
Private Customer - 2409
Google LLC - 48
VPSTTT - 27Top Clients:
Unknown - 2556Top Software:
Unknown - 2556Top Keyboards:
Unknown - 2556Top IP Classification:
proxy - 2409
hosting - 99
hosting & proxy - 39Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 2556 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 2409
103.178.235.50 - 27
217.160.240.135 - 27Top ASNs:
Unknown - 2409
AS396982 - 48
AS140810 - 27Top Accounts:
hello - 2469
Administr - 12
0siivpyz - 12Top ISPs:
Private Customer - 2409
Google LLC - 48
VPSTTT - 27Top Clients:
Unknown - 2556Top Software:
Unknown - 2556Top Keyboards:
Unknown - 2556Top IP Classification:
proxy - 2409
hosting - 99
hosting & proxy - 39Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 2556 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 2409
103.178.235.50 - 27
217.160.240.135 - 27Top ASNs:
Unknown - 2409
AS396982 - 48
AS140810 - 27Top Accounts:
hello - 2469
Administr - 12
0siivpyz - 12Top ISPs:
Private Customer - 2409
Google LLC - 48
VPSTTT - 27Top Clients:
Unknown - 2556Top Software:
Unknown - 2556Top Keyboards:
Unknown - 2556Top IP Classification:
proxy - 2409
hosting - 99
hosting & proxy - 39Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 2556 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 2409
103.178.235.50 - 27
217.160.240.135 - 27Top ASNs:
Unknown - 2409
AS396982 - 48
AS140810 - 27Top Accounts:
hello - 2469
Administr - 12
0siivpyz - 12Top ISPs:
Private Customer - 2409
Google LLC - 48
VPSTTT - 27Top Clients:
Unknown - 2556Top Software:
Unknown - 2556Top Keyboards:
Unknown - 2556Top IP Classification:
proxy - 2409
hosting - 99
hosting & proxy - 39Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 1704 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 1606
103.178.235.50 - 18
217.160.240.135 - 18Top ASNs:
Unknown - 1606
AS396982 - 32
AS140810 - 18Top Accounts:
hello - 1646
Administr - 8
0siivpyz - 8Top ISPs:
Private Customer - 1606
Google LLC - 32
VPSTTT - 18Top Clients:
Unknown - 1704Top Software:
Unknown - 1704Top Keyboards:
Unknown - 1704Top IP Classification:
proxy - 1606
hosting - 66
hosting & proxy - 26Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 1704 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 1606
103.178.235.50 - 18
217.160.240.135 - 18Top ASNs:
Unknown - 1606
AS396982 - 32
AS140810 - 18Top Accounts:
hello - 1646
Administr - 8
0siivpyz - 8Top ISPs:
Private Customer - 1606
Google LLC - 32
VPSTTT - 18Top Clients:
Unknown - 1704Top Software:
Unknown - 1704Top Keyboards:
Unknown - 1704Top IP Classification:
proxy - 1606
hosting - 66
hosting & proxy - 26Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 1704 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 1606
103.178.235.50 - 18
217.160.240.135 - 18Top ASNs:
Unknown - 1606
AS396982 - 32
AS140810 - 18Top Accounts:
hello - 1646
Administr - 8
0siivpyz - 8Top ISPs:
Private Customer - 1606
Google LLC - 32
VPSTTT - 18Top Clients:
Unknown - 1704Top Software:
Unknown - 1704Top Keyboards:
Unknown - 1704Top IP Classification:
proxy - 1606
hosting - 66
hosting & proxy - 26Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 1704 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 1606
103.178.235.50 - 18
217.160.240.135 - 18Top ASNs:
Unknown - 1606
AS396982 - 32
AS140810 - 18Top Accounts:
hello - 1646
Administr - 8
0siivpyz - 8Top ISPs:
Private Customer - 1606
Google LLC - 32
VPSTTT - 18Top Clients:
Unknown - 1704Top Software:
Unknown - 1704Top Keyboards:
Unknown - 1704Top IP Classification:
proxy - 1606
hosting - 66
hosting & proxy - 26Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 852 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 803
103.178.235.50 - 9
217.160.240.135 - 9Top ASNs:
Unknown - 803
AS396982 - 16
AS140810 - 9Top Accounts:
hello - 823
Administr - 4
0siivpyz - 4Top ISPs:
Private Customer - 803
Google LLC - 16
VPSTTT - 9Top Clients:
Unknown - 852Top Software:
Unknown - 852Top Keyboards:
Unknown - 852Top IP Classification:
proxy - 803
hosting - 33
hosting & proxy - 13Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 852 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 803
103.178.235.50 - 9
217.160.240.135 - 9Top ASNs:
Unknown - 803
AS396982 - 16
AS140810 - 9Top Accounts:
hello - 823
Administr - 4
0siivpyz - 4Top ISPs:
Private Customer - 803
Google LLC - 16
VPSTTT - 9Top Clients:
Unknown - 852Top Software:
Unknown - 852Top Keyboards:
Unknown - 852Top IP Classification:
proxy - 803
hosting - 33
hosting & proxy - 13Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 852 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 803
103.178.235.50 - 9
217.160.240.135 - 9Top ASNs:
Unknown - 803
AS396982 - 16
AS140810 - 9Top Accounts:
hello - 823
Administr - 4
0siivpyz - 4Top ISPs:
Private Customer - 803
Google LLC - 16
VPSTTT - 9Top Clients:
Unknown - 852Top Software:
Unknown - 852Top Keyboards:
Unknown - 852Top IP Classification:
proxy - 803
hosting - 33
hosting & proxy - 13Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-05 RDP #Honeypot IOCs - 852 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
141.11.96.210 - 803
103.178.235.50 - 9
217.160.240.135 - 9Top ASNs:
Unknown - 803
AS396982 - 16
AS140810 - 9Top Accounts:
hello - 823
Administr - 4
0siivpyz - 4Top ISPs:
Private Customer - 803
Google LLC - 16
VPSTTT - 9Top Clients:
Unknown - 852Top Software:
Unknown - 852Top Keyboards:
Unknown - 852Top IP Classification:
proxy - 803
hosting - 33
hosting & proxy - 13Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
In this article, I break down how the vulnerability works, affected configurations, exploitation scenarios, and the mitigation steps organizations should take to protect their remote access infrastructure.
https://denizhalil.com/2026/06/02/cve-2026-0257-pan-os-globalprotect-authentication-bypass/
#CyberSecurity #PaloAlto #GlobalProtect #PANOS #CVE20260257 #VulnerabilityManagement #ThreatDetection #NetworkSecurity #BlueTeam #RedTeam #InfoSec #DenizHalil
-
What is Silver Ticket Attack: A Comprehensive Guide
In this article, I cover how Silver Ticket attacks work, common exploitation scenarios, detection techniques, and mitigation strategies.
https://denizhalil.com/2026/05/27/silver-ticket-attack-comprehensive-guide/#CyberSecurity #ActiveDirectory #SilverTicket #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Kerbrute: Enumerating Active Directory Accounts
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
🔗 https://denizhalil.com/2026/05/21/kerberoasting-attack-defense-guide/
#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Basic Active Directory Enumeration: A Comprehensive Guide
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
https://denizhalil.com/2025/05/05/basic-active-directory-enumeration-a-comprehensive-guide/#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
What is Kerberoasting Attack – Kerberoasting: A Comprehensive Guide
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
https://denizhalil.com/2026/05/21/kerberoasting-attack-defense-guide/#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Responder Tool for Network Credential Capture in Active Directory
In this article, I cover how Responder works, common credential capture techniques, and practical mitigation strategies for defending Active Directory environments.
https://denizhalil.com/2026/05/18/responder-tool-active-directory-credential-capture/
#CyberSecurity #ActiveDirectory #Responder #LLMNR #NTLM #CredentialCapture #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #EthicalHacking #DenizHalil
-
Linux Security Auditing with Lynis
In this article, I cover how to use Lynis for Linux security auditing, system hardening, and practical vulnerability assessment.
🔗 https://denizhalil.com/2025/03/17/linux-security-auditing-with-lynis/
#CyberSecurity #LinuxSecurity #Lynis #SecurityAuditing #SystemHardening #BlueTeam #DevSecOps #InfoSec #Linux #ITSecurity #SecurityEngineering #DenizHalil
-
Linux Security Auditing with Lynis
In this article, I cover how to use Lynis for Linux security auditing, system hardening, and practical vulnerability assessment.
https://denizhalil.com/2025/03/17/linux-security-auditing-with-lynis/
#CyberSecurity #LinuxSecurity #Lynis #SecurityAuditing #SystemHardening #BlueTeam #DevSecOps #InfoSec #Linux #ITSecurity #SecurityEngineering #DenizHalil
-
UDP Network Monitoring with C++: A Comprehensive Guide
In this guide, I demonstrate how to build a UDP packet sniffer in C++ using raw sockets, parse packet headers, and extract key data like source/destination IPs and ports.
https://denizhalil.com/2025/07/14/udp-network-monitoring-cpp-packet-sniffer/#CyberSecurity #NetworkMonitoring #PacketSniffer #UDP #Cpp #NetworkSecurity #InfoSec #BlueTeam #RedTeam #InfoSec #securityengineering #denizhalil
-
Spoofing Packets with Scapy: A Comprehensive Guide
In this article, I cover how packet spoofing works with Scapy, practical use cases, and key security implications.
https://denizhalil.com/2025/07/22/spoofing-packets-with-scapy-a-comprehensive-guide/#CyberSecurity #Scapy #PacketSpoofing #NetworkSecurity #Python #EthicalHacking #RedTeam #BlueTeam #Pentesting #InfoSec #SecurityEngineering #denizhalil
-
Cybersecurity Interview Questions and Answer Tips
In this article, I cover the most common cybersecurity interview questions and how to approach them effectively.
https://denizhalil.com/2025/12/08/cybersecurity-interview-questions-2025/
#CyberSecurity #InfoSec #CyberSecurityCareer #InterviewPrep #SOC #RedTeam #BlueTeam #ITSecurity #CareerDevelopment #EthicalHacking #SecurityEngineering #denizhalil
-
Mastering Linux Firewalls: A Deep Dive into Netfilter and iptables
In this article, I cover how iptables works, its architecture, and practical firewall configuration techniques.
https://denizhalil.com/2025/12/31/netfilter-iptables-firewall-configuration-guide/#CyberSecurity #LinuxSecurity #iptables #Netfilter #NetworkSecurity #Firewall #InfoSec #BlueTeam #DevSecOps #securityengineering #ITSecurity #denizhalil
-
What are Pass-the-Hash and Pass-the-Ticket Attacks: A Comprehensive Guide
In this article, I cover how these attacks work, their differences, and how to detect and mitigate them.
https://denizhalil.com/2026/01/05/pass-the-hash-pass-the-ticket-attacks-guide/#cybersecurity #ActiveDirectory #PassTheHash #PassTheTicket #credentialaccess #RedTeam #BlueTeam #Pentesting #InfoSec #WindowsSecurity #EthicalHacking #ITSecurity #denizhalil
-
What is NetBIOS and SMB Exploitation Techniques: A Practical Guide
In this article, I cover key exploitation techniques, real-world attack scenarios, and how to secure these services effectively.
https://denizhalil.com/2026/01/15/netbios-smb-exploitation-techniques-guide/
#CyberSecurity #SMB #NetBIOS #NetworkSecurity #ActiveDirectory #RedTeam #BlueTeam #Pentesting #InfoSec #WindowsSecurity #EthicalHacking #ITSecurity #DenizHalil
-
What is SNMP Security and Exploitation: A Comprehensive Guide
In this article, I cover how SNMP exploitation works, common vulnerabilities, and how to properly secure it.
https://denizhalil.com/2026/01/21/snmp-security-exploitation-guide#CyberSecurity #SNMP #NetworkSecurity #InfoSec #InfrastructureSecurity #BlueTeam #RedTeam #Pentesting #ITSecurity #SecurityEngineering #DenizHalil