Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #8
Honeypot Data Reveals Surge in RDP Scanning Activity
Original: 2026-10-12 RDP # Honeypot IOCs - 443 scans Thread with top 3 features in each category and links to the full dataset # D
Security researchers published new indicators of compromise from RDP honeypots on 12 October 2026, highlighting a spike in scanning activity on port 443. The dataset lists the most active source IP addresses, autonomous systems and usernames seen in the scans, with one account name, 'hello', appearing unusually often. Analysts in the infosec community are sharing the full dataset to help defenders block malicious infrastructure.
Why now: Fresh threat intelligence gives network defenders new IOCs to block against ongoing RDP-targeted scanning campaigns.
rdpsnitchGoogle CloudAS396982Infosec Exchange
Evidence
- 2026-10-12 RDP # Honeypot IOCs - 443 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 104.196.118.248 - 39 34.170.147.105 - 36 136.66.0.167 - 36 Top ASNs: AS396982 - 165 AS10439 - 30 AS9808 - 29 Top Accounts: hello - 192… · rdpsnitch@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/2169215