An RDP honeypot tracked 3,627 scans over five days, with malicious activity escalating sharply from 120 scans on July 24 to 3,627 by July 29. The primary attacker IP 5.44.100.245 accounted for 2,952 scans, representing 81% of the latest attack volume.
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
2026-07-24 RDP # Honeypot IOCs - 40 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 139.59.230.134 - 10 205.210.31.130 - 3 45.227.254.132 - 3 Top ASNs: AS14061 - 10 AS396982 - 9 AS267784 - 3 Top Accounts: hello - 11 Administr - 4 (empty) - 3 Top ISPs: DIGITALOCEAN - 10 Google LLC - 9 Flyservers S.A. - 3 Top Clients: Unknown - 40 Top Softwar
2026-07-24 RDP # Honeypot IOCs - 80 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 139.59.230.134 - 20 205.210.31.130 - 6 45.227.254.132 - 6 Top ASNs: AS14061 - 20 AS396982 - 18 AS267784 - 6 Top Accounts: hello - 22 Administr - 8 (empty) - 6 Top ISPs: DIGITALOCEAN - 20 Google LLC - 18 Flyservers S.A. - 6 Top Clients: Unknown - 80 Top Softw
2026-07-24 RDP # Honeypot IOCs - 120 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 139.59.230.134 - 30 205.210.31.130 - 9 45.227.254.132 - 9 Top ASNs: AS14061 - 30 AS396982 - 27 AS267784 - 9 Top Accounts: hello - 33 Administr - 12 (empty) - 9 Top ISPs: DIGITALOCEAN - 30 Google LLC - 27 Flyservers S.A. - 9 Top Clients: Unknown - 120 Top So
2026-07-25 RDP # Honeypot IOCs - 744 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 708 35.203.211.119 - 4 134.209.62.30 - 4 Top ASNs: AS8648 - 708 AS396982 - 10 AS14061 - 5 Top Accounts: hello - 714 60wcz1bp - 4 Administr - 3 Top ISPs: Alvotech GmbH via velia.net - 708 Google LLC - 10 DigitalOcean, LLC - 5 Top Clients: Unkn
2026-07-25 RDP # Honeypot IOCs - 1488 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 1416 35.203.211.119 - 8 134.209.62.30 - 8 Top ASNs: AS8648 - 1416 AS396982 - 20 AS14061 - 10 Top Accounts: hello - 1428 60wcz1bp - 8 Administr - 6 Top ISPs: Alvotech GmbH via velia.net - 1416 Google LLC - 20 DigitalOcean, LLC - 10 Top Client
2026-07-25 RDP # Honeypot IOCs - 2232 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 2124 35.203.211.119 - 12 134.209.62.30 - 12 Top ASNs: AS8648 - 2124 AS396982 - 30 AS14061 - 15 Top Accounts: hello - 2142 60wcz1bp - 12 Administr - 9 Top ISPs: Alvotech GmbH via velia.net - 2124 Google LLC - 30 DigitalOcean, LLC - 15 Top Cli
2026-07-26 RDP # Honeypot IOCs - 1635 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 1027 146.190.103.74 - 353 134.199.148.184 - 165 Top ASNs: AS8648 - 1027 AS14061 - 518 AS4788 - 38 Top Accounts: hello - 1616 Administrator - 3 zgrab - 2 Top ISPs: Alvotech GmbH via velia.net - 1027 DigitalOcean, LLC - 518 TM TECHNOLOGY SERVI
2026-07-26 RDP # Honeypot IOCs - 3270 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 2054 146.190.103.74 - 706 134.199.148.184 - 330 Top ASNs: AS8648 - 2054 AS14061 - 1036 AS4788 - 76 Top Accounts: hello - 3232 Administrator - 6 zgrab - 4 Top ISPs: Alvotech GmbH via velia.net - 2054 DigitalOcean, LLC - 1036 TM TECHNOLOGY SER
2026-07-26 RDP # Honeypot IOCs - 4905 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 3081 146.190.103.74 - 1059 134.199.148.184 - 495 Top ASNs: AS8648 - 3081 AS14061 - 1554 AS4788 - 114 Top Accounts: hello - 4848 Administrator - 9 zgrab - 6 Top ISPs: Alvotech GmbH via velia.net - 3081 DigitalOcean, LLC - 1554 TM TECHNOLOGY S
2026-07-27 RDP # Honeypot IOCs - 1070 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 1007 102.88.21.136 - 21 139.59.99.66 - 20 Top ASNs: AS8648 - 1007 AS29465 - 21 AS14061 - 20 Top Accounts: hello - 1049 (empty) - 3 Administr - 2 Top ISPs: Alvotech GmbH via velia.net - 1007 MTN NIGERIA Communication limited - 21 DIGITALOCEAN
2026-07-27 RDP # Honeypot IOCs - 2140 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 2014 102.88.21.136 - 42 139.59.99.66 - 40 Top ASNs: AS8648 - 2014 AS29465 - 42 AS14061 - 40 Top Accounts: hello - 2098 (empty) - 6 Administr - 4 Top ISPs: Alvotech GmbH via velia.net - 2014 MTN NIGERIA Communication limited - 42 DIGITALOCEAN
2026-07-27 RDP # Honeypot IOCs - 3210 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 3021 102.88.21.136 - 63 139.59.99.66 - 60 Top ASNs: AS8648 - 3021 AS29465 - 63 AS14061 - 60 Top Accounts: hello - 3147 (empty) - 9 Administr - 6 Top ISPs: Alvotech GmbH via velia.net - 3021 MTN NIGERIA Communication limited - 63 DIGITALOCEAN
this outlet adds: 3212, 3023, 3149, 3140
this outlet adds: 3213, 3024, 3150, 3141
2026-07-27 RDP # Honeypot IOCs - 3211 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 3022 102.88.21.136 - 63 139.59.99.66 - 60 Top ASNs: AS8648 - 3022 AS29465 - 63 AS14061 - 60 Top Accounts: hello - 3148 (empty) - 9 Administr - 6 Top ISPs: Alvotech GmbH via velia.net - 3022 MTN NIGERIA Communication limited - 63 DIGITALOCEAN
2026-07-29 RDP # Honeypot IOCs - 1209 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 984 134.199.148.184 - 165 102.88.21.136 - 13 Top ASNs: AS8648 - 984 AS14061 - 186 AS29465 - 13 Top Accounts: hello - 1184 Test - 4 ident - 3 Top ISPs: Alvotech GmbH via velia.net - 984 DigitalOcean, LLC - 176 MTN NIGERIA Communication limite
2026-07-29 RDP # Honeypot IOCs - 2418 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 1968 134.199.148.184 - 330 102.88.21.136 - 26 Top ASNs: AS8648 - 1968 AS14061 - 372 AS29465 - 26 Top Accounts: hello - 2368 Test - 8 ident - 6 Top ISPs: Alvotech GmbH via velia.net - 1968 DigitalOcean, LLC - 352 MTN NIGERIA Communication lim
2026-07-29 RDP # Honeypot IOCs - 3627 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 5.44.100.245 - 2952 134.199.148.184 - 495 102.88.21.136 - 39 Top ASNs: AS8648 - 2952 AS14061 - 558 AS29465 - 39 Top Accounts: hello - 3552 Test - 12 ident - 9 Top ISPs: Alvotech GmbH via velia.net - 2952 DigitalOcean, LLC - 528 MTN NIGERIA Communication li