Defender in training — monitoring, learning, building

Dai Hong
Phuc

@fu.dahong

Computer Science and Cyber Security student, focused on blue team / defensive security.

I build things on the web, and I'm learning to defend them. Second-year computer science student in Ho Chi Minh City. I run my own internet-facing server, read what hits it, and write up what I find.

// Threat telemetry — my server
snapshot · analyzed offline
291,215attempts to log in as “root” — all failed
400,000+total failed SSH logins
8+source countries
62,798most from one network (AS)
Pressure concentrates in cloud-hosted ranges (Akamai · Linode · Azure · Hetzner) — rented or compromised — not residential ISPs. The signature of automated botnets, not a targeted attack.
// From my own server’s auth logs, parsed offline. Static — for privacy & performance.
Read the full analysis →
// Top attacking sources — by attempts (snapshot)
  1. 01
    AS63949 Akamai · United States62,798
  2. 02
    AS63949 Linode · United States62,231
  3. 03
    AS133385 Atom · Myanmar25,728
  4. 04
    AS197769 VPS · Slovenia24,679
  5. 05
    AS63949 Akamai · Netherlands19,214
  6. 06
    AS138692 · Bangladesh18,001
  7. 07
    AS153013 GTSC · Vietnam15,632
  8. 08
    AS8075 Azure · Ireland9,763
  9. 09
    AS24940 Hetzner · Finland5,131
Who I am

From healing bodies
to defending systems

Growing up I wanted to be a doctor. Medicine looked like the most direct way to help people. What almost nobody knew was that I spent my nights on computers: I taught myself Python, then C++, wrote small tools to automate the games I played, and read the corners of the internet where security people talk to each other. I was not there to break anything, I just liked how they thought. I kept that quiet and told everyone I was going into medicine.

That changed on 6 June 2023, over a family dinner, when I met P., who founded E—, one of the strongest security teams in Vietnam and a name that travels well outside it. A few months earlier his team had gone up against the best in the world and made the national news. The competition record was not what stayed with me. It was the way he talked about defending systems, data, and the trust people put in both, as though the work were custodial rather than heroic. Cybersecurity, I understood for the first time, is also a way of protecting people, in a world that moves more of itself online every year. The teenage hobby turned out to be a serious craft.

In time I admitted that medicine was not where I was strongest, though the instinct behind it never left. A blue team does for systems roughly what a doctor does for people: monitor, detect, respond, protect. It is quiet and patient work, and mostly invisible when it goes well. That is the part of security I want.

I don't want to break things to look clever. I want to be the one who keeps them standing.

I am now in my second year of computer science, building the programming and systems background the defensive side needs and pointing it at blue team and SOC work. Two years in, I know how little that is. What I do have is a server that gets attacked every day, logs I have learned to read, and the habit of writing down what I find so that someone else can check it.

Selected work

Things I've shipped

Freelance web developer

Lisa Nail & Spa

Built and maintain the public site for a multi-branch salon, keeping booking and branch information current.

HTMLCSSJavaScript
Live client site
Founder & editor

HONQ

A student journalism and photography club I founded, built on real human stories, and ran with a small team of contributors.

JournalismPhotographyTeam
Visit the site →
Personal project

Home SOC lab

A small home lab to practise monitoring, log analysis and incident response. The server took over 400,000 failed SSH logins; the parser and the Sigma rules that flag them are public.

LinuxNetworkingLogging & detection
View on GitHub →
The log

Journey, in entries

growing up
// origin

A kid who wanted to be a doctor

Set on medicine as a way to help people — while quietly teaching myself to code on the side.

2023grade 10
// built

Co-founded my school's computer club

My first taste of building something technical with other people — and helping lead it.

06.06.2023the turn
// turning point

The dinner that changed my direction

A family dinner, a conversation with P., and an unexpected door into cybersecurity.

2024grade 11
// led

Led my school's photography club

Elected to lead it — where I learned to really look at people and their stories.

2025grade 12
// founded

Founded HONQ

A Humans of New York–style project: real stories from students, teachers, staff, and neighbours — gathered to bring a community a little closer.

2025 ·year one
// enrolled

Started my computer science degree

Began a CS degree in Ho Chi Minh City with the direction set early: defensive security — blue team and SOC.

2026 ·now
// studying

Networking foundations → CCNP

Finished CCNA and now working through CCNP, the networking groundwork every blue team role is built on.

next →goal
// next

Targeting: Certified Network Defender (CND)

The next step I'm aiming for — a network-defense certification focused on monitoring, detection, and response: squarely blue team.

What I work on

Two hands, one mindset

Web development

Front-end and full-stack freelance work — turning briefs into clean, maintainable sites for real clients.

Blue team & SOC

Where I'm headed: monitoring, detection, and incident response. Networking now, security operations next.

Stories & photography

From HONQ on, I photograph people and moments — the same attention to detail I bring to the work.

Networking Blue team & SOC Linux Log analysis & detection HTML · CSS · JavaScript Web development Photography English Vietnamese — native
Credentials
  • Cisco CCNACertified · 2025
  • Cisco CCNPIn progress · 2026
  • EC-Council CNDTargeting · next
Open to talk

Let's connect

If you have a project, a question, or just want to talk about security and where it's going, I'm easy to reach. Email is best.