<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[2026-04-02 RDP #Honeypot IOCs - 768 scansThread with top 3 features in each category and links to the full dataset#DFIR #InfoSec]]></title><description><![CDATA[<p>2026-04-02 RDP <a href="https://infosec.exchange/tags/Honeypot" rel="tag">#<span>Honeypot</span></a> IOCs - 768 scans<br />Thread with top 3 features in each category and links to the full dataset<br /><a href="https://infosec.exchange/tags/DFIR" rel="tag">#<span>DFIR</span></a> <a href="https://infosec.exchange/tags/InfoSec" rel="tag">#<span>InfoSec</span></a></p><p>Top IPs:<br />106.51.23.167 - 417<br />143.198.111.35 - 147<br />122.165.249.151 - 48</p><p>Top ASNs:<br />AS24309 - 417<br />AS14061 - 165<br />AS24560 - 48</p><p>Top Accounts:<br />hello - 633<br />Administr - 27<br />142.93.8.59 - 27</p><p>Top ISPs:<br />Atria Convergence Technologies Pvt. Ltd. - 417<br />DigitalOcean, LLC - 165<br />BHARTI - 48</p><p>Top Clients:<br />Unknown - 768</p><p>Top Software:<br />Unknown - 768</p><p>Top Keyboards:<br />Unknown - 768</p><p>Top IP Classification:<br />Unknown - 549<br />hosting &amp; proxy - 147<br />hosting - 72</p><p>Pastebin links with full 24-hr RDP Honeypot IOC Lists:<br />Bad API request, invalid api_dev_key</p><p><a href="https://infosec.exchange/tags/CyberSec" rel="tag">#<span>CyberSec</span></a> <a href="https://infosec.exchange/tags/SOC" rel="tag">#<span>SOC</span></a> <a href="https://infosec.exchange/tags/Blueteam" rel="tag">#<span>Blueteam</span></a> <a href="https://infosec.exchange/tags/SecOps" rel="tag">#<span>SecOps</span></a> <a href="https://infosec.exchange/tags/Security" rel="tag">#<span>Security</span></a></p>]]></description><link>https://board.circlewithadot.net/topic/35dbadca-c5bb-4dc4-b267-4f04af24dd86/2026-04-02-rdp-honeypot-iocs-768-scansthread-with-top-3-features-in-each-category-and-links-to-the-full-dataset-dfir-infosec</link><generator>RSS for Node</generator><lastBuildDate>Tue, 07 Apr 2026 08:00:45 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/35dbadca-c5bb-4dc4-b267-4f04af24dd86.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 03 Apr 2026 00:18:21 GMT</pubDate><ttl>60</ttl></channel></rss>