2026-03-28 RDP #Honeypot IOCs - 510 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
143.198.111.35 - 330
38.76.31.20 - 72
80.94.95.221 - 32

Top ASNs:
AS14061 - 340
AS174 - 72
AS204428 - 42

Top Accounts:
hello - 404
Administr - 58
Test - 8

Top ISPs:
DigitalOcean, LLC - 340
Cogent Communications - 72
SS-Net - 42

Top Clients:
Unknown - 510

Top Software:
Unknown - 510

Top Keyboards:
Unknown - 510

Top IP Classification:
hosting & proxy - 340
Unknown - 144
hosting - 26

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security