#blueteam — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #blueteam, aggregated by home.social.
-
SOC-Analyst Lern- & Praxishandbuch
Ich habe mir in den letzten Wochen ein eigenes SOC-Analyst Lern- & Praxishandbuch erstellt.
Gedacht ist es vor allem für Einsteiger, Interessierte und alle, die sich einen strukturierten Überblick über Security Operations und SOC verschaffen möchten.
Enthalten sind unter anderem Themen wie Netzwerke, SIEM, EDR/XDR, Threat Intelligence, Incident Response, Detection Engineering, Cloud Security, Malware-Analyse, Forensik sowie praktische Lernpfade und Tool-Empfehlungen.
Für mich war wichtig, Theorie und Praxis möglichst verständlich zusammenzubringen und gleichzeitig zu zeigen, was man als angehender SOC Analyst wirklich lernen und üben sollte.
Download: SOC-Analyst – Das umfassende Lern- & Praxishandbuch:
:boost_ok:
#CyberSecurity #SOC #BlueTeam #SecurityOperations #ITSecurity
-
Empty scoreboard.
80 teams.
14 days.Someone's name goes first.
WATCHLIST is a free 24-hour CTF built around one investigation.
24 challenges - memory forensics,
disk forensics, DNS exfil, ADSB analysis, live SSH honeypot.All connected to the same case.
First blood on each challenge gets logged permanently
by The Machine.Sep 19 03:30 UTC. Free entry. Teams 1-6.
Prizes: $750 / $500 / $250ctf.xposedornot.com
CTFtime: ctftime.org/event/3326 -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 633 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 510
79.137.100.124 - 27
45.156.128.61 - 18Top ASNs:
AS14061 - 510
AS396982 - 27
AS16276 - 27Top Accounts:
hello - 549
Administr - 21
root - 18Top ISPs:
DigitalOcean, LLC - 510
Google LLC - 27
OVH SAS - 27Top Clients:
Unknown - 633Top Software:
Unknown - 633Top Keyboards:
Unknown - 633Top IP Classification:
hosting - 603
Unknown - 24
hosting & proxy - 6Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 422 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 340
79.137.100.124 - 18
45.156.128.61 - 12Top ASNs:
AS14061 - 340
AS396982 - 18
AS16276 - 18Top Accounts:
hello - 366
Administr - 14
root - 12Top ISPs:
DigitalOcean, LLC - 340
Google LLC - 18
OVH SAS - 18Top Clients:
Unknown - 422Top Software:
Unknown - 422Top Keyboards:
Unknown - 422Top IP Classification:
hosting - 402
Unknown - 16
hosting & proxy - 4Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-04 RDP #Honeypot IOCs - 211 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
209.38.73.59 - 170
79.137.100.124 - 9
45.156.128.61 - 6Top ASNs:
AS14061 - 170
AS396982 - 9
AS16276 - 9Top Accounts:
hello - 183
Administr - 7
root - 6Top ISPs:
DigitalOcean, LLC - 170
Google LLC - 9
OVH SAS - 9Top Clients:
Unknown - 211Top Software:
Unknown - 211Top Keyboards:
Unknown - 211Top IP Classification:
hosting - 201
Unknown - 8
hosting & proxy - 2Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 3168 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 2415
155.117.13.211 - 636
161.97.85.113 - 9Top ASNs:
AS213737 - 2415
AS16276 - 636
AS396982 - 36Top Accounts:
mstsc - 2424
hello - 666
Administr - 12Top ISPs:
Ayosoft LTD - 2415
OVH SAS - 636
Google LLC - 36Top Clients:
Unknown - 3168Top Software:
Unknown - 3168Top Keyboards:
Unknown - 3168Top IP Classification:
Unknown - 3069
hosting - 99Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 2112 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 1610
155.117.13.211 - 424
161.97.85.113 - 6Top ASNs:
AS213737 - 1610
AS16276 - 424
AS396982 - 24Top Accounts:
mstsc - 1616
hello - 444
Administr - 8Top ISPs:
Ayosoft LTD - 1610
OVH SAS - 424
Google LLC - 24Top Clients:
Unknown - 2112Top Software:
Unknown - 2112Top Keyboards:
Unknown - 2112Top IP Classification:
Unknown - 2046
hosting - 66Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
2026-09-03 RDP #Honeypot IOCs - 1056 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSecTop IPs:
45.88.138.5 - 805
155.117.13.211 - 212
161.97.85.113 - 3Top ASNs:
AS213737 - 805
AS16276 - 212
AS396982 - 12Top Accounts:
mstsc - 808
hello - 222
Administr - 4Top ISPs:
Ayosoft LTD - 805
OVH SAS - 212
Google LLC - 12Top Clients:
Unknown - 1056Top Software:
Unknown - 1056Top Keyboards:
Unknown - 1056Top IP Classification:
Unknown - 1023
hosting - 33Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key -
Red and blue teams breaking down their silos and working in real time—imagine a cybersecurity defense that evolves with every simulated threat. Curious how continuous purple teaming is rewriting the playbook?
#purpleteaming
#cyberdefense
#breachandattacksimulation
#mitreattack
#redteam
#blueteam
#securityautomation
#continuousvalidation
#cybersecuritystrategy -
🚨 Critical Magento & Adobe Commerce Flaw (CVE-2025-54236 – SessionReaper) 🚨
Impact: Customer account takeover + unauthenticated remote code execution (CVSS 9.1 Critical).
👉 Full details and action steps: https://hostvix.com/sessionreaper-critical-magento-adobe-commerce-vulnerability-cve-2025-54236/
#Magento #AdobeCommerce #SessionReaper #CVE202554236 #CVE #Infosec #CyberSecurity #AppSec #WebSecurity #SecOps #BlueTeam #RedTeam #ThreatIntel #Vulnerability #PatchNow #ZeroDay #Exploit #EcommerceSecurity #DataSecurity #SecurityUpdate
-
🚨 Critical Magento & Adobe Commerce Flaw (CVE-2025-54236 – SessionReaper) 🚨
Impact: Customer account takeover + unauthenticated remote code execution (CVSS 9.1 Critical).
👉 Full details and action steps: https://hostvix.com/sessionreaper-critical-magento-adobe-commerce-vulnerability-cve-2025-54236/
#Magento #AdobeCommerce #SessionReaper #CVE202554236 #CVE #Infosec #CyberSecurity #AppSec #WebSecurity #SecOps #BlueTeam #RedTeam #ThreatIntel #Vulnerability #PatchNow #ZeroDay #Exploit #EcommerceSecurity #DataSecurity #SecurityUpdate
-
🚨 Critical Magento & Adobe Commerce Flaw (CVE-2025-54236 – SessionReaper) 🚨
Impact: Customer account takeover + unauthenticated remote code execution (CVSS 9.1 Critical).
👉 Full details and action steps: https://hostvix.com/sessionreaper-critical-magento-adobe-commerce-vulnerability-cve-2025-54236/
#Magento #AdobeCommerce #SessionReaper #CVE202554236 #CVE #Infosec #CyberSecurity #AppSec #WebSecurity #SecOps #BlueTeam #RedTeam #ThreatIntel #Vulnerability #PatchNow #ZeroDay #Exploit #EcommerceSecurity #DataSecurity #SecurityUpdate
-
🚨 Critical Magento & Adobe Commerce Flaw (CVE-2025-54236 – SessionReaper) 🚨
Impact: Customer account takeover + unauthenticated remote code execution (CVSS 9.1 Critical).
👉 Full details and action steps: https://hostvix.com/sessionreaper-critical-magento-adobe-commerce-vulnerability-cve-2025-54236/
#Magento #AdobeCommerce #SessionReaper #CVE202554236 #CVE #Infosec #CyberSecurity #AppSec #WebSecurity #SecOps #BlueTeam #RedTeam #ThreatIntel #Vulnerability #PatchNow #ZeroDay #Exploit #EcommerceSecurity #DataSecurity #SecurityUpdate
-
Here's me #introduction - I grew up an avid #gamer on old school #mmorpg and #fps . #hacking became my passion at a young age and over the years I've been fortunate enough to meet some truly amazing folks within the #infosec community and I'm better for it - #DEFCON #Goon #NOLACON Staff and #3o3 helped make that possible. Support your local cons and communities! I started in #iam before branching into #soc #sirt #threatintelligence and now #redteam . #blueteam is still my passion but there's nothing sweeter than finding and exercising vulns in an attack chain.
I've recently dove into #hamradio and have fallen in love with activating #sota summits with low power #qrp setups using #morsecode #cw . Callsign is WS0UP!