2025-04-28 RDP #Honeypot IOCs - 18519 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
161.97.77.37 - 13674
159.89.6.147 - 3330
191.252.2.116 - 555
Top ASNs:
AS51167 - 13674
AS14061 - 3858
AS27715 - 555
Top Accounts:
hello - 18210
142.93.8.59 - 138
Domain - 57
Top ISPs:
Contabo GmbH - 13674
DigitalOcean, LLC - 3858
Locaweb Serviços de Internet S/A - 555
Top Clients:
Unknown - 18519
Top Software:
Unknown - 18519
Top Keyboards:
Unknown - 18519
Top IP Classification:
hosting - 18219
Unknown - 285
mobile & hosting - 6
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/6nbF3YHg