2026-06-03 RDP #Honeypot IOCs - 12680 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
159.223.36.55 - 7620
152.42.212.128 - 4826
193.169.194.14 - 27
Top ASNs:
AS14061 - 12458
AS396982 - 36
AS132203 - 30
Top Accounts:
hello - 12488
142.93.8.59 - 75
(empty) - 27
Top ISPs:
DigitalOcean, LLC - 12458
Google LLC - 36
Berdiev Ruslan Mukhabatovich - 27
Top Clients:
Unknown - 12680
Top Software:
Unknown - 12680
Top Keyboards:
Unknown - 12680
Top IP Classification:
hosting - 12542
Unknown - 117
hosting & proxy - 18
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key