Quando pensi che l’attacco ransomware che ti ha criptato il NAS, i backup e pure la cartella “Vacanze 2012” sia il fondo del barile… arriva la prossima vulnerabilità zero-day a ricordarti che c’è sempre più in basso. 
Moraletta da IT: non dire mai “questo è il peggio che possa succedere”.
Perché i cyber criminali hanno sempre fantasia… e tempo libero. 
2025-07-25 RDP #Honeypot IOCs - 591 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
67.205.169.242 - 366
80.94.95.198 - 48
80.64.19.30 - 30
Top ASNs:
AS14061 - 399
AS204428 - 48
AS396982 - 48
Top Accounts:
hello - 417
142.93.8.59 - 48
Test - 30
Top ISPs:
DigitalOcean, LLC - 399
SS-Net - 48
Google LLC - 48
Top Clients:
Unknown - 591
Top Software:
Unknown - 591
Top Keyboards:
Unknown - 591
Top IP Classification:
hosting - 459
Unknown - 123
proxy - 6
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key
2025-07-25 RDP #Honeypot IOCs - 394 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
67.205.169.242 - 244
80.94.95.198 - 32
80.64.19.30 - 20
Top ASNs:
AS14061 - 266
AS204428 - 32
AS396982 - 32
Top Accounts:
hello - 278
142.93.8.59 - 32
Test - 20
Top ISPs:
DigitalOcean, LLC - 266
SS-Net - 32
Google LLC - 32
Top Clients:
Unknown - 394
Top Software:
Unknown - 394
Top Keyboards:
Unknown - 394
Top IP Classification:
hosting - 306
Unknown - 82
proxy - 4
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key
2025-07-25 RDP #Honeypot IOCs - 197 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
67.205.169.242 - 122
80.94.95.198 - 16
80.64.19.30 - 10
Top ASNs:
AS14061 - 133
AS204428 - 16
AS396982 - 16
Top Accounts:
hello - 139
142.93.8.59 - 16
Test - 10
Top ISPs:
DigitalOcean, LLC - 133
SS-Net - 16
Google LLC - 16
Top Clients:
Unknown - 197
Top Software:
Unknown - 197
Top Keyboards:
Unknown - 197
Top IP Classification:
hosting - 153
Unknown - 41
proxy - 2
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key
Our ShouldIClick service received 552 submissions last week. ShouldIClick is our free machine learning based service to evaluate if websites are safe to click. Check before you click: https://www.shouldiclick.org #machinelearning #cybersec #phishing #internetsafety
2025-07-24 RDP #Honeypot IOCs - 381 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
54.162.228.130 - 189
80.94.95.198 - 45
80.64.19.30 - 24
Top ASNs:
AS14618 - 189
AS204428 - 54
AS396982 - 36
Top Accounts:
hello - 216
142.93.8.59 - 45
Administr - 36
Top ISPs:
Amazon.com, Inc. - 189
SS-Net - 54
Google LLC - 36
Top Clients:
Unknown - 381
Top Software:
Unknown - 381
Top Keyboards:
Unknown - 381
Top IP Classification:
hosting - 258
Unknown - 114
proxy - 6
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/wb5TAHRs
2025-07-24 RDP #Honeypot IOCs - 254 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
54.162.228.130 - 126
80.94.95.198 - 30
80.64.19.30 - 16
Top ASNs:
AS14618 - 126
AS204428 - 36
AS396982 - 24
Top Accounts:
hello - 144
142.93.8.59 - 30
Administr - 24
Top ISPs:
Amazon.com, Inc. - 126
SS-Net - 36
Google LLC - 24
Top Clients:
Unknown - 254
Top Software:
Unknown - 254
Top Keyboards:
Unknown - 254
Top IP Classification:
hosting - 172
Unknown - 76
proxy - 4
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/DVx1xQUB
2025-07-24 RDP #Honeypot IOCs - 127 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
54.162.228.130 - 63
80.94.95.198 - 15
80.64.19.30 - 8
Top ASNs:
AS14618 - 63
AS204428 - 18
AS396982 - 12
Top Accounts:
hello - 72
142.93.8.59 - 15
Administr - 12
Top ISPs:
Amazon.com, Inc. - 63
SS-Net - 18
Google LLC - 12
Top Clients:
Unknown - 127
Top Software:
Unknown - 127
Top Keyboards:
Unknown - 127
Top IP Classification:
hosting - 86
Unknown - 38
proxy - 2
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/jkGKicU9
2025-07-23 RDP #Honeypot IOCs - 435 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
164.92.192.11 - 216
80.94.95.198 - 39
159.223.111.195 - 30
Top ASNs:
AS14061 - 261
AS204428 - 48
AS396982 - 36
Top Accounts:
hello - 258
142.93.8.59 - 39
Administr - 21
Top ISPs:
DigitalOcean, LLC - 261
SS-Net - 48
Google LLC - 36
Top Clients:
Unknown - 435
Top Software:
Unknown - 435
Top Keyboards:
Unknown - 435
Top IP Classification:
hosting - 297
Unknown - 135
hosting & proxy - 3
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/fM4v9dAk
2025-07-23 RDP #Honeypot IOCs - 290 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
164.92.192.11 - 144
80.94.95.198 - 26
159.223.111.195 - 20
Top ASNs:
AS14061 - 174
AS204428 - 32
AS396982 - 24
Top Accounts:
hello - 172
142.93.8.59 - 26
Administr - 14
Top ISPs:
DigitalOcean, LLC - 174
SS-Net - 32
Google LLC - 24
Top Clients:
Unknown - 290
Top Software:
Unknown - 290
Top Keyboards:
Unknown - 290
Top IP Classification:
hosting - 198
Unknown - 90
hosting & proxy - 2
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/QWh691rz
2025-07-23 RDP #Honeypot IOCs - 145 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
164.92.192.11 - 72
80.94.95.198 - 13
159.223.111.195 - 10
Top ASNs:
AS14061 - 87
AS204428 - 16
AS396982 - 12
Top Accounts:
hello - 86
142.93.8.59 - 13
Administr - 7
Top ISPs:
DigitalOcean, LLC - 87
SS-Net - 16
Google LLC - 12
Top Clients:
Unknown - 145
Top Software:
Unknown - 145
Top Keyboards:
Unknown - 145
Top IP Classification:
hosting - 99
Unknown - 45
hosting & proxy - 1
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/PBnDgeVZ
On the 10th of September I'll be addressing the #Cybersec 2025 congress in Utrecht. Our societies and specifically our IT support systems are not ready for war & upheaval. In this talk, I hope to shake things up a bit. Compliance is not everything! To register: https://app.cybersec-365.com/event/cybersec-netherlands-2025/planning/UGxhbm5pbmdfMjcyNTY3MA==
Kinda lost on what to do, kinda bored
Kinda wanna go for some online cybersecurity qualifications but idk where to start
Can someone point me in the right direction?
2025-07-21 RDP #Honeypot IOCs - 3996 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
51.79.199.48 - 3756
194.164.107.6 - 30
80.94.95.75 - 30
Top ASNs:
AS16276 - 3759
AS396982 - 36
AS50219 - 30
Top Accounts:
hello - 3837
Administr - 48
eltons - 15
Top ISPs:
OVH Singapore PTE. LTD - 3756
Google LLC - 36
LNK SYSTEMS MUNTENIA SRL - 30
Top Clients:
Unknown - 3996
Top Software:
Unknown - 3996
Top Keyboards:
Unknown - 3996
Top IP Classification:
hosting - 3843
Unknown - 144
hosting & proxy - 6
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/scdXysyQ
2025-07-21 RDP #Honeypot IOCs - 3995 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
51.79.199.48 - 3755
194.164.107.6 - 30
80.94.95.75 - 30
Top ASNs:
AS16276 - 3758
AS396982 - 36
AS50219 - 30
Top Accounts:
hello - 3836
Administr - 48
eltons - 15
Top ISPs:
OVH Singapore PTE. LTD - 3755
Google LLC - 36
LNK SYSTEMS MUNTENIA SRL - 30
Top Clients:
Unknown - 3995
Top Software:
Unknown - 3995
Top Keyboards:
Unknown - 3995
Top IP Classification:
hosting - 3842
Unknown - 144
hosting & proxy - 6
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/4AU9MKRA
2025-07-21 RDP #Honeypot IOCs - 3994 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
51.79.199.48 - 3754
194.164.107.6 - 30
80.94.95.75 - 30
Top ASNs:
AS16276 - 3757
AS396982 - 36
AS50219 - 30
Top Accounts:
hello - 3835
Administr - 48
eltons - 15
Top ISPs:
OVH Singapore PTE. LTD - 3754
Google LLC - 36
LNK SYSTEMS MUNTENIA SRL - 30
Top Clients:
Unknown - 3994
Top Software:
Unknown - 3994
Top Keyboards:
Unknown - 3994
Top IP Classification:
hosting - 3841
Unknown - 144
hosting & proxy - 6
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/41Xy5MXe
I'm gonna try to run Llama 70b on my laptop...
Wish me luck
2025-07-21 RDP #Honeypot IOCs - 3993 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
51.79.199.48 - 3753
194.164.107.6 - 30
80.94.95.75 - 30
Top ASNs:
AS16276 - 3756
AS396982 - 36
AS50219 - 30
Top Accounts:
hello - 3834
Administr - 48
eltons - 15
Top ISPs:
OVH Singapore PTE. LTD - 3753
Google LLC - 36
LNK SYSTEMS MUNTENIA SRL - 30
Top Clients:
Unknown - 3993
Top Software:
Unknown - 3993
Top Keyboards:
Unknown - 3993
Top IP Classification:
hosting - 3840
Unknown - 144
hosting & proxy - 6
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/zdaEXHYT
