Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #9
Honeypot data logs 442 RDP scans in daily IOC report
Original: 2026-10-12 RDP # Honeypot IOCs - 442 scans Thread with top 3 features in each category and links to the full dataset # D
A daily RDP honeypot report dated 12 October 2026 records 442 scans, listing the most active source IPs, hosting networks, and attempted login accounts. The top source was 104.196.118.248 with 39 hits, and the most-used username was 'hello' with 192 attempts. Indicators of compromise and full dataset links were shared for defenders.
Why now: Security teams track daily honeypot IOC reports to block active scanning sources and spot emerging attack patterns.
RDP honeypot104.196.118.248AS396982InfoSecDFIR
Evidence
- 2026-10-12 RDP # Honeypot IOCs - 442 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 104.196.118.248 - 39 34.170.147.105 - 36 136.66.0.167 - 36 Top ASNs: AS396982 - 165 AS10439 - 30 AS9808 - 28 Top Accounts: hello - 192… · rdpsnitch@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/2169216