Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #10
Honeypot data reveals 1,266 RDP scans with top attacker IPs
Original: 2026-11-04 RDP # Honeypot IOCs - 1266 scans Thread with top 3 features in each category and links to the full dataset #
A cybersecurity honeypot project has published fresh indicators of compromise covering 1,266 RDP scans recorded on 4 November 2026. The dataset lists the most active source IPs, led by 45.77.116.159 with 450 scans, the top hosting networks, and commonly targeted accounts, with full data shared for defenders. Security practitioners are circulating the findings to help block malicious infrastructure.
Why now: Defenders are sharing newly published indicators of compromise to help block active RDP-scanning infrastructure.
rdpsnitch45.77.116.159AS20473AS8560AS8075
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/4930420