Threat-Intelligence on MEISTSEChttps://44e06765.meistsec-blog.pages.dev/tags/threat-intelligence/Recent content in Threat-Intelligence on MEISTSECHugoen-usFri, 21 Aug 2026 00:00:00 +0000Read the Lease: From a Firewall Log to a Twelve-Membership LIR Farmhttps://44e06765.meistsec-blog.pages.dev/posts/lease/Fri, 21 Aug 2026 00:00:00 +0000https://44e06765.meistsec-blog.pages.dev/posts/lease/Eleven IPs scanned my WAN. My firewall said Iran, but the servers were in Amsterdam. Following the address space led to twelve RIPE LIR memberships sharing one company registration number, while several of my own threat-hunting heuristics failed along the way.