← All reports

The RDP honeypot IOCs indicate a significant increase in scanning activity targeting potential vulnerabilities in remote desktop services.

CybersecurityNetwork SecurityThreat IntelligenceApr 24, 2026score 0.172 posts · 0 replies across 1 instances
The thread discusses RDP honeypot IOCs collected over 24 hours, highlighting top IPs, ASNs, accounts, and other metrics related to network scanning activity. It includes links to datasets and mentions issues with API access.

Claims

The RDP honeypot IOCs indicate a significant increase in scanning activity targeting potential vulnerabilities in remote desktop services.
Parent: CybersecurityEntity: RDP honeypot IOCsImpact: positiveDate: Apr 24, 2026Target: The effectiveness of RDP honeypot monitoring in detecting and mitigating cyber threats.

Source posts

@[email protected]
2026-04-23 RDP #Honeypot IOCs - 57 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 192.155.91.45 - 15 193.142.146.139 - 6 20.55.73.136 - 5 Top ASNs: AS63949 - 15 AS396982 - 12 AS48721 - 7 Top Accounts: hello - 23 Test - 9 Domain - 6 Top ISPs: Akamai Technologies, Inc. - 15 Google LLC - 12 Flyservers S.A. - 7 Top Clients: Unknown - 57 Top Software: Unknown - 57 Top Keyboards: Unknown - 57 Top IP Classification: hosting - 33 Unknown - 23 mobile & hosting - 1 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0 boosts · 0 favs · 0 replies · Apr 24, 2026
#honeypot#dfir#infosec#cybersec#soc#blueteam
@[email protected]
2026-04-23 RDP #Honeypot IOCs - 114 scans Thread with top 3 features in each category and links to the full dataset #DFIR #InfoSec Top IPs: 192.155.91.45 - 30 193.142.146.139 - 12 20.55.73.136 - 10 Top ASNs: AS63949 - 30 AS396982 - 24 AS48721 - 14 Top Accounts: hello - 46 Test - 18 Domain - 12 Top ISPs: Akamai Technologies, Inc. - 30 Google LLC - 24 Flyservers S.A. - 14 Top Clients: Unknown - 114 Top Software: Unknown - 114 Top Keyboards: Unknown - 114 Top IP Classification: hosting - 66 Unknown - 46 mobile & hosting - 2 Pastebin links with full 24-hr RDP Honeypot IOC Lists: Bad API request, invalid api_dev_key #CyberSec #SOC #Blueteam #SecOps #Security
0 boosts · 0 favs · 0 replies · Apr 24, 2026
#honeypot#dfir#infosec#cybersec#soc#blueteam