2026-03-30 RDP #Honeypot IOCs - 227 scansThread with top 3 features in each category and links to the full dataset#DFIR #InfoSec

[rdpsnitch@infosec.exchange]

2026-03-30 RDP #Honeypot IOCs - 227 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec

Top IPs:
143.198.111.35 - 165
80.66.83.74 - 9
80.94.95.221 - 7

Top ASNs:
AS14061 - 165
AS396982 - 15
AS204428 - 15

Top Accounts:
hello - 170
Administr - 18
Domain - 15

Top ISPs:
DigitalOcean, LLC - 165
Google LLC - 15
SS-Net - 15

Top Clients:
Unknown - 227

Top Software:
Unknown - 227

Top Keyboards:
Unknown - 227

Top IP Classification:
hosting & proxy - 165
Unknown - 39
hosting - 17

Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key

#CyberSec #SOC #Blueteam #SecOps #Security