Blog

Filtering by tag: #soc operations · Clear filter

How Do You Decide Which Fresh Blocklist Hits Need a Host Replay Before Autodrop?

By IPThreat Team October 10, 2026

#threat hunting #ip blocklists #soc operations #ransomware #active directory #threat intelligence #network security #incident response

The Myth That Higher Blocklist Hit Counts Deserve Earlier Analyst Time During Exploit Waves

By IPThreat Team October 3, 2026

#threat hunting #ip blocklists #netscaler #soc operations #edge security #incident response #hybrid threats #detection engineering

The Myth That Inbound Blocklist Drops Close Credential Dump Exposure

By IPThreat Team October 1, 2026

#threat hunting #ip blocklists #credential stuffing #soc operations #malware c2 #incident response #perimeter security #cyber threat intelligence

Oracle PeopleSoft Scans Shared an ASN Fingerprint Days Before Individual Source IPs Hit Your Blocklists

By IPThreat Team September 28, 2026

#asn filtering #threat intelligence #perimeter defense #exploit scanning #ransomware defense #network security #soc operations #bgp enrichment

MovieReaper's Torrent Wave Forces Dropper Destinations Into the Same Hunt Queue as Ransomware Callbacks

By IPThreat Team September 27, 2026

#threat hunting #ip blocklists #moviereaper #ransomware #malware droppers #soc operations #egress monitoring #incident response

The Myth That ASN Deny Rules Stay Valid After Tenants Behind Them Turn Over

By IPThreat Team September 27, 2026

#asn filtering #threat intelligence #ransomware defense #network security #egress control #soc operations #ip reputation #cybersecurity

Start Threat Hunts From Outcome Fields Vendors Bury Under Severity Scores

By IPThreat Team September 24, 2026

#log analysis #threat detection #siem #vpn security #identity security #incident response #soc operations #cybersecurity

Ransomware Encryption Starts After Workstations Already Touched Last Quarter's Extortion Ranges

By IPThreat Team September 22, 2026

#threat hunting #ip blocklists #ransomware #extortion infrastructure #incident response #soc operations #cyber threat intelligence #network egress

npm Packages That Skip Install Hooks Still Beacon Through IPs Your Blocklist Catches Too Late

By IPThreat Team September 21, 2026

#threat hunting #ip blocklists #npm security #supply chain #malware c2 #soc operations #abuse intelligence #incident response

Atomic macOS Stealer Hits on Abuse Lists Force a Mac Outbound Replay Before the Block Feels Like Progress

By IPThreat Team September 19, 2026

#threat hunting #ip blocklists #amos stealer #macos security #soc operations #abuse feeds #incident response #cyber threat intelligence

▲

Contact IPThreat