Mmastodon TechnologyCybersecurity first seen 8 h ago, last 8 h ago, peak #8
RDP honeypot data flags 122 scans and top attacker IPs
Original: 2026-10-01 RDP # Honeypot IOCs - 122 scans Thread with top 3 features in each category and links to the full dataset # D
A cybersecurity researcher has published indicators of compromise drawn from an RDP honeypot, covering 122 scans recorded on 1 October 2026. The dataset highlights the most active source IP addresses, hosting networks and attempted account names, with the leading IP accounting for 40 scans. Full data and per-category breakdowns have been shared for defenders to block or investigate.
Why now: Security teams monitor shared honeypot IOCs to block active scanning sources.
RDP honeypot94.26.68.55AS201814AS14061Infosec.Exchange
Evidence
- 2026-10-01 RDP # Honeypot IOCs - 122 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 94.26.68.55 - 40 165.22.190.202 - 18 80.66.83.43 - 12 Top ASNs: AS201814 - 40 AS396982 - 24 AS14061 - 20 Top Accounts: hello - 62… · rdpsnitch@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/670961