2025-04-26 RDP #Honeypot IOCs - 3381 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
161.97.77.37 - 3087
138.68.11.85 - 207
80.94.95.198 - 24
Top ASNs:
AS51167 - 3087
AS14061 - 208
AS204428 - 25
Top Accounts:
hello - 3301
142.93.8.59 - 38
Test - 13
Top ISPs:
Contabo GmbH - 3087
DigitalOcean, LLC - 208
SS-Net - 25
Top Clients:
Unknown - 3381
Top Software:
Unknown - 3381
Top Keyboards:
Unknown - 3381
Top IP Classification:
hosting - 3102
hosting & proxy - 208
Unknown - 66
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/jLzEdz8k