2025-04-15 RDP #Honeypot IOCs - 8100 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
156.146.57.47 - 5064
156.146.57.181 - 2304
222.100.239.9 - 450
Top ASNs:
AS212238 - 7368
AS4766 - 483
AS48721 - 63
Top Accounts:
hello - 7836
142.93.8.59 - 177
Administr - 27
Top ISPs:
Datacamp Limited - 7368
Korea Telecom - 483
Flyservers S.A. - 63
Top Clients:
Unknown - 8100
Top Software:
Unknown - 8100
Top Keyboards:
Unknown - 8100
Top IP Classification:
hosting & proxy - 7371
Unknown - 657
hosting - 54
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/ZsnpxT0s