Mmastodon TechnologyCybersecurity first seen 10 h ago, last 10 h ago, peak #12
RDP honeypot data flags 43 scans in daily IOC report
Original: 2026-09-29 RDP # Honeypot IOCs - 43 scans Thread with top 3 features in each category and links to the full dataset # DF
A daily RDP honeypot report for 29 September 2026 documents 43 malicious scans, publishing indicators of compromise including the most active source IPs — led by 80.66.83.43 and 165.227.214.128 with six scans each — top networks AS14061 and AS396982, and frequently targeted accounts such as 'Administr'. The release includes category breakdowns and links to the full dataset for defenders.
Why now: Security teams track daily honeypot IOC reports to block actively scanning RDP sources.
80.66.83.43AS14061AS396982RDP honeypot
Evidence
- 2026-09-29 RDP # Honeypot IOCs - 43 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 80.66.83.43 - 6 165.227.214.128 - 6 165.232.58.4 - 4 Top ASNs: AS14061 - 14 AS396982 - 12 AS216473 - 6 Top Accounts: Administr - 10… · rdpsnitch@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/420586