Mmastodon TechnologyCybersecurity first seen 21 h ago, last 21 h ago, peak #10
Honeypot data flags surge of RDP scanning activity
Original: 2026-10-03 RDP # Honeypot IOCs - 276 scans Thread with top 3 features in each category and links to the full dataset # D
Cybersecurity researchers have published indicators of compromise drawn from 276 RDP scan attempts recorded by honeypot sensors on 3 October 2026. The dataset highlights the most active source addresses, including 94.26.68.55 and 94.26.68.54 with 39 scans each, leading autonomous systems such as AS201814, and commonly targeted accounts like 'hello'. Full data and per-category breakdowns are shared for defenders.
Why now: Security teams monitor fresh threat intelligence to block active scanning infrastructure targeting remote desktop services.
94.26.68.5594.26.68.54103.180.212.8AS201814RDP honeypot
Evidence
- 2026-10-03 RDP # Honeypot IOCs - 276 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 94.26.68.55 - 39 94.26.68.54 - 39 103.180.212.8 - 30 Top ASNs: AS201814 - 84 AS396982 - 48 AS151734 - 30 Top Accounts: hello - 120… · rdpsnitch@infosec.exchange · 2
API: https://socialmediatrends-api.osmike.com/v1/trends/921819