2026-03-29 RDP #Honeypot IOCs - 597 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
143.198.111.35 - 459
80.94.95.221 - 21
80.94.95.83 - 12

Top ASNs:
AS14061 - 462
AS204428 - 42
AS396982 - 36

Top Accounts:
hello - 474
Administr - 48
Test - 18

Top ISPs:
DigitalOcean, LLC - 462
SS-Net - 42
Google LLC - 36

Top Clients:
Unknown - 597

Top Software:
Unknown - 597

Top Keyboards:
Unknown - 597

Top IP Classification:
hosting & proxy - 462
Unknown - 75
hosting - 60

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security