Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #11
Honeypot data logs 633 RDP scans with top attacker IPs
Original: 2026-11-04 RDP # Honeypot IOCs - 633 scans Thread with top 3 features in each category and links to the full dataset # D
A daily RDP honeypot report released November 4, 2026 documents 633 scans and publishes indicators of compromise for defenders. The most active source was 45.77.116.159 with 225 attempts, followed by 102.88.21.136 and 82.223.43.244. Top networks included AS20473, AS8560 and AS8075, with the full dataset and per-category breakdowns shared so security teams can block the listed addresses.
Why now: Security practitioners share and monitor these daily IOC reports to block active scanning sources targeting RDP services.
45.77.116.159AS20473AS8560AS8075RDP honeypot
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/4930421