search
192.3.154.48
Trends
- 1RDP honeypot logs 5,068 scans with top attacker IOCs published●2026-10-10 RDP # Honeypot IOCs - 5068 scans Thread with top 3 features in each category and links to the full dataset #
An RDP honeypot recorded 5,068 scans on October 10, with indicators of compromise shared in a security community thread. The most active source, IP 192.3.154.48, accounted for 3,208 attempts, tied to AS36352. Other frequently observed networks included AS396982 and AS9808, with commonly targeted accounts also listed alongside links to the full dataset for defenders.
- 2Honeypot data flags 5,070 RDP scans in single day●2026-10-10 RDP # Honeypot IOCs - 5070 scans Thread with top 3 features in each category and links to the full dataset #
Cybersecurity researchers published a daily report on October 10, 2026 listing indicators of compromise from RDP honeypots that recorded 5,070 scans. The top source, IP address 192.3.154.48, accounted for 3,210 scans, with AS36352 the most active network. The thread highlights the most common attacker accounts and links to the full dataset for defenders to review.
- 3RDP honeypot logs thousands of scans, publishes IOCs●2026-10-10 RDP # Honeypot IOCs - 5069 scans Thread with top 3 features in each category and links to the full dataset #
A cybersecurity honeypot project published its indicators of compromise for 10 October 2026, covering 5,069 RDP scans. The most active source, IP 192.3.154.48, accounted for 3,209 attempts, with AS36352 the top network. The release also lists the most targeted accounts and links to the full dataset for DFIR and InfoSec practitioners.