#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 10086 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 7056
155.117.13.211 - 2421
175.110.112.165 - 510Top ASNs:
AS213737 - 7056
AS16276 - 2421
AS49981 - 510Top Accounts:
mstsc - 7056
hello - 2949
w1pyjwgr - 12Top ISPs:
Ayosoft LTD - 7056
OVH SAS - 2421
WorldStream B.V. - 510Top Clients:
Unknown - 10086Top Software:
Unknown - 10086Top Keyboards:
Unknown - 10086Top IP Classification:
Unknown - 9483
hosting - 597
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 10086 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 7056
155.117.13.211 - 2421
175.110.112.165 - 510Top ASNs:
AS213737 - 7056
AS16276 - 2421
AS49981 - 510Top Accounts:
mstsc - 7056
hello - 2949
w1pyjwgr - 12Top ISPs:
Ayosoft LTD - 7056
OVH SAS - 2421
WorldStream B.V. - 510Top Clients:
Unknown - 10086Top Software:
Unknown - 10086Top Keyboards:
Unknown - 10086Top IP Classification:
Unknown - 9483
hosting - 597
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 10086 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 7056
155.117.13.211 - 2421
175.110.112.165 - 510Top ASNs:
AS213737 - 7056
AS16276 - 2421
AS49981 - 510Top Accounts:
mstsc - 7056
hello - 2949
w1pyjwgr - 12Top ISPs:
Ayosoft LTD - 7056
OVH SAS - 2421
WorldStream B.V. - 510Top Clients:
Unknown - 10086Top Software:
Unknown - 10086Top Keyboards:
Unknown - 10086Top IP Classification:
Unknown - 9483
hosting - 597
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 10086 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 7056
155.117.13.211 - 2421
175.110.112.165 - 510Top ASNs:
AS213737 - 7056
AS16276 - 2421
AS49981 - 510Top Accounts:
mstsc - 7056
hello - 2949
w1pyjwgr - 12Top ISPs:
Ayosoft LTD - 7056
OVH SAS - 2421
WorldStream B.V. - 510Top Clients:
Unknown - 10086Top Software:
Unknown - 10086Top Keyboards:
Unknown - 10086Top IP Classification:
Unknown - 9483
hosting - 597
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 6724 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 4704
155.117.13.211 - 1614
175.110.112.165 - 340Top ASNs:
AS213737 - 4704
AS16276 - 1614
AS49981 - 340Top Accounts:
mstsc - 4704
hello - 1966
w1pyjwgr - 8Top ISPs:
Ayosoft LTD - 4704
OVH SAS - 1614
WorldStream B.V. - 340Top Clients:
Unknown - 6724Top Software:
Unknown - 6724Top Keyboards:
Unknown - 6724Top IP Classification:
Unknown - 6322
hosting - 398
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 6724 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 4704
155.117.13.211 - 1614
175.110.112.165 - 340Top ASNs:
AS213737 - 4704
AS16276 - 1614
AS49981 - 340Top Accounts:
mstsc - 4704
hello - 1966
w1pyjwgr - 8Top ISPs:
Ayosoft LTD - 4704
OVH SAS - 1614
WorldStream B.V. - 340Top Clients:
Unknown - 6724Top Software:
Unknown - 6724Top Keyboards:
Unknown - 6724Top IP Classification:
Unknown - 6322
hosting - 398
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 6724 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 4704
155.117.13.211 - 1614
175.110.112.165 - 340Top ASNs:
AS213737 - 4704
AS16276 - 1614
AS49981 - 340Top Accounts:
mstsc - 4704
hello - 1966
w1pyjwgr - 8Top ISPs:
Ayosoft LTD - 4704
OVH SAS - 1614
WorldStream B.V. - 340Top Clients:
Unknown - 6724Top Software:
Unknown - 6724Top Keyboards:
Unknown - 6724Top IP Classification:
Unknown - 6322
hosting - 398
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 6724 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 4704
155.117.13.211 - 1614
175.110.112.165 - 340Top ASNs:
AS213737 - 4704
AS16276 - 1614
AS49981 - 340Top Accounts:
mstsc - 4704
hello - 1966
w1pyjwgr - 8Top ISPs:
Ayosoft LTD - 4704
OVH SAS - 1614
WorldStream B.V. - 340Top Clients:
Unknown - 6724Top Software:
Unknown - 6724Top Keyboards:
Unknown - 6724Top IP Classification:
Unknown - 6322
hosting - 398
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 3362 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2352
155.117.13.211 - 807
175.110.112.165 - 170Top ASNs:
AS213737 - 2352
AS16276 - 807
AS49981 - 170Top Accounts:
mstsc - 2352
hello - 983
w1pyjwgr - 4Top ISPs:
Ayosoft LTD - 2352
OVH SAS - 807
WorldStream B.V. - 170Top Clients:
Unknown - 3362Top Software:
Unknown - 3362Top Keyboards:
Unknown - 3362Top IP Classification:
Unknown - 3161
hosting - 199
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 3362 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2352
155.117.13.211 - 807
175.110.112.165 - 170Top ASNs:
AS213737 - 2352
AS16276 - 807
AS49981 - 170Top Accounts:
mstsc - 2352
hello - 983
w1pyjwgr - 4Top ISPs:
Ayosoft LTD - 2352
OVH SAS - 807
WorldStream B.V. - 170Top Clients:
Unknown - 3362Top Software:
Unknown - 3362Top Keyboards:
Unknown - 3362Top IP Classification:
Unknown - 3161
hosting - 199
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 3362 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2352
155.117.13.211 - 807
175.110.112.165 - 170Top ASNs:
AS213737 - 2352
AS16276 - 807
AS49981 - 170Top Accounts:
mstsc - 2352
hello - 983
w1pyjwgr - 4Top ISPs:
Ayosoft LTD - 2352
OVH SAS - 807
WorldStream B.V. - 170Top Clients:
Unknown - 3362Top Software:
Unknown - 3362Top Keyboards:
Unknown - 3362Top IP Classification:
Unknown - 3161
hosting - 199
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-02 RDP #Honeypot IOCs - 3362 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2352
155.117.13.211 - 807
175.110.112.165 - 170Top ASNs:
AS213737 - 2352
AS16276 - 807
AS49981 - 170Top Accounts:
mstsc - 2352
hello - 983
w1pyjwgr - 4Top ISPs:
Ayosoft LTD - 2352
OVH SAS - 807
WorldStream B.V. - 170Top Clients:
Unknown - 3362Top Software:
Unknown - 3362Top Keyboards:
Unknown - 3362Top IP Classification:
Unknown - 3161
hosting - 199
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
Exploitation of PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)
In this article, I break down how the vulnerability works, affected configurations, exploitation scenarios, and the mitigation steps organizations should take to protect their remote access infrastructure.
https://denizhalil.com/2026/06/02/cve-2026-0257-pan-os-globalprotect-authentication-bypass/
#CyberSecurity #PaloAlto #GlobalProtect #PANOS #CVE20260257 #VulnerabilityManagement #ThreatDetection #NetworkSecurity #BlueTeam #RedTeam #InfoSec #DenizHalil
-
What is Silver Ticket Attack: A Comprehensive Guide
In this article, I cover how Silver Ticket attacks work, common exploitation scenarios, detection techniques, and mitigation strategies.
https://denizhalil.com/2026/05/27/silver-ticket-attack-comprehensive-guide/#CyberSecurity #ActiveDirectory #SilverTicket #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Kerbrute: Enumerating Active Directory Accounts
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
🔗 https://denizhalil.com/2026/05/21/kerberoasting-attack-defense-guide/
#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Basic Active Directory Enumeration: A Comprehensive Guide
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
https://denizhalil.com/2025/05/05/basic-active-directory-enumeration-a-comprehensive-guide/#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
What is Kerberoasting Attack – Kerberoasting: A Comprehensive Guide
In this article, I cover how Kerberoasting works, common attack techniques, detection methods, and practical defense strategies.
https://denizhalil.com/2026/05/21/kerberoasting-attack-defense-guide/#CyberSecurity #ActiveDirectory #Kerberoasting #Kerberos #CredentialAccess #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #ThreatDetection #DenizHalil
-
Responder Tool for Network Credential Capture in Active Directory
In this article, I cover how Responder works, common credential capture techniques, and practical mitigation strategies for defending Active Directory environments.
https://denizhalil.com/2026/05/18/responder-tool-active-directory-credential-capture/
#CyberSecurity #ActiveDirectory #Responder #LLMNR #NTLM #CredentialCapture #RedTeam #BlueTeam #Pentesting #WindowsSecurity #InfoSec #EthicalHacking #DenizHalil
-
Linux Security Auditing with Lynis
In this article, I cover how to use Lynis for Linux security auditing, system hardening, and practical vulnerability assessment.
🔗 https://denizhalil.com/2025/03/17/linux-security-auditing-with-lynis/
#CyberSecurity #LinuxSecurity #Lynis #SecurityAuditing #SystemHardening #BlueTeam #DevSecOps #InfoSec #Linux #ITSecurity #SecurityEngineering #DenizHalil
-
Linux Security Auditing with Lynis
In this article, I cover how to use Lynis for Linux security auditing, system hardening, and practical vulnerability assessment.
https://denizhalil.com/2025/03/17/linux-security-auditing-with-lynis/
#CyberSecurity #LinuxSecurity #Lynis #SecurityAuditing #SystemHardening #BlueTeam #DevSecOps #InfoSec #Linux #ITSecurity #SecurityEngineering #DenizHalil
-
UDP Network Monitoring with C++: A Comprehensive Guide
In this guide, I demonstrate how to build a UDP packet sniffer in C++ using raw sockets, parse packet headers, and extract key data like source/destination IPs and ports.
https://denizhalil.com/2025/07/14/udp-network-monitoring-cpp-packet-sniffer/#CyberSecurity #NetworkMonitoring #PacketSniffer #UDP #Cpp #NetworkSecurity #InfoSec #BlueTeam #RedTeam #InfoSec #securityengineering #denizhalil
-
Spoofing Packets with Scapy: A Comprehensive Guide
In this article, I cover how packet spoofing works with Scapy, practical use cases, and key security implications.
https://denizhalil.com/2025/07/22/spoofing-packets-with-scapy-a-comprehensive-guide/#CyberSecurity #Scapy #PacketSpoofing #NetworkSecurity #Python #EthicalHacking #RedTeam #BlueTeam #Pentesting #InfoSec #SecurityEngineering #denizhalil
-
Cybersecurity Interview Questions and Answer Tips
In this article, I cover the most common cybersecurity interview questions and how to approach them effectively.
https://denizhalil.com/2025/12/08/cybersecurity-interview-questions-2025/
#CyberSecurity #InfoSec #CyberSecurityCareer #InterviewPrep #SOC #RedTeam #BlueTeam #ITSecurity #CareerDevelopment #EthicalHacking #SecurityEngineering #denizhalil
-
Mastering Linux Firewalls: A Deep Dive into Netfilter and iptables
In this article, I cover how iptables works, its architecture, and practical firewall configuration techniques.
https://denizhalil.com/2025/12/31/netfilter-iptables-firewall-configuration-guide/#CyberSecurity #LinuxSecurity #iptables #Netfilter #NetworkSecurity #Firewall #InfoSec #BlueTeam #DevSecOps #securityengineering #ITSecurity #denizhalil