Mmastodon TechnologyCybersecurity first seen 6 h ago, last 6 h ago, peak #9
Honeypot data shows heavy RDP scanning activity
Original: 2026-10-01 RDP # Honeypot IOCs - 61 scans Thread with top 3 features in each category and links to the full dataset # DF
A daily honeypot report lists indicators of compromise from 61 RDP scan attempts logged on October 1, 2026. The most active source IP, 94.26.68.55, accounted for 20 scans, with ASN-level data and the most targeted accounts also published. Researchers share such datasets so defenders can block malicious addresses and spot patterns in opportunistic remote-desktop probing.
Why now: Security practitioners regularly circulate fresh IOC reports to help network defenders block active scanning sources.
94.26.68.55AS201814AS14061RDP honeypot
Evidence
- 2026-10-01 RDP # Honeypot IOCs - 61 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 94.26.68.55 - 20 165.22.190.202 - 9 80.66.83.43 - 6 Top ASNs: AS201814 - 20 AS396982 - 12 AS14061 - 10 Top Accounts: hello - 31… · rdpsnitch@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/670962