2025-03-30 RDP #Honeypot IOCs - 172404 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
138.199.24.6 - 82242
156.146.57.110 - 54795
156.146.57.52 - 9414
Top ASNs:
AS60068 - 82242
AS212238 - 76293
AS135161 - 9372
Top Accounts:
hello - 172290
Administr - 21
cdc2gf3s - 12
Top ISPs:
DataCamp Limited - 82242
Datacamp Limited - 76293
GMO-Z.COM PTE. LTD. - 9372
Top Clients:
Unknown - 172404
Top Software:
Unknown - 172404
Top Keyboards:
Unknown - 172404
Top IP Classification:
hosting & proxy - 161316
hosting - 10860
Unknown - 204
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
https://pastebin.com/yGbQ3wvM