2025-05-17 RDP #Honeypot IOCs - 4026 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
128.199.168.88 - 3219
172.111.244.66 - 120
104.130.13.117 - 102
Top ASNs:
AS14061 - 3606
AS9009 - 120
AS27357 - 102
Top Accounts:
hello - 3906
Test - 24
Administr - 21
Top ISPs:
DigitalOcean, LLC - 3606
Secure Internet LLC - 120
Rackspace Hosting - 102
Top Clients:
Unknown - 4026
Top Software:
Unknown - 4026
Top Keyboards:
Unknown - 4026
Top IP Classification:
hosting - 3846
hosting & proxy - 120
Unknown - 60
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/bTKVKPv4