Mmastodon TechnologyCybersecurity first seen 4 d ago, last 4 d ago, peak #9
Honeypot data logs nearly 1,900 RDP scans in a day
Original: 2026-11-04 RDP # Honeypot IOCs - 1899 scans Thread with top 3 features in each category and links to the full dataset #
Security researchers have published a daily threat intelligence report based on an RDP honeypot, recording 1,899 scans on 4 November 2026. The dataset highlights the most active source IPs, led by 45.77.116.159 with 675 attempts, dominant hosting networks such as AS20473, and the most targeted accounts, with indicators of compromise and full data shared for defenders.
Why now: Defenders use these daily honeypot IOC reports to block active RDP-scanning infrastructure.
Evidence
- 2026-11-04 RDP # Honeypot IOCs - 1899 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 45.77.116.159 - 675 102.88.21.136 - 132 82.223.43.244 - 117 Top ASNs: AS20473 - 675 AS8560 - 492 AS8075 - 177 Top Accounts:… · rdpsnitch@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/4930419