Mmastodon TechnologyCybersecurity first seen 5 h ago, last 5 h ago, peak #11
RDP honeypot data logs 398 scans and new IOCs
Original: 2026-10-08 RDP # Honeypot IOCs - 398 scans Thread with top 3 features in each category and links to the full dataset # D
A cybersecurity honeypot project has published its daily RDP attack indicators for October 8, 2026, covering 398 scanned connections. The dataset highlights the most active source IP addresses, led by 165.232.97.161, 34.170.147.105 and 34.82.15.211 with 24 scans each, along with top hosting networks and the most targeted account names, such as 'hello'. Full data and indicators of compromise are shared for defenders to block.
Why now: Security teams regularly track fresh indicators of compromise to block active RDP scanning infrastructure.
RDP honeypot165.232.97.161AS396982AS14061AS8075
Evidence
- 2026-10-08 RDP # Honeypot IOCs - 398 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 165.232.97.161 - 24 34.170.147.105 - 24 34.82.15.211 - 24 Top ASNs: AS396982 - 168 AS14061 - 26 AS8075 - 22 Top Accounts: hello - 180… · rdpsnitch@infosec.exchange · 2
API: https://socialmediatrends-api.osmike.com/v1/trends/1549603