search
AS14061
Trends
- 1Honeypot data logs 129 RDP scans in single day●2026-09-29 RDP # Honeypot IOCs - 129 scans Thread with top 3 features in each category and links to the full dataset # D
Security researchers have published a daily report of 129 remote desktop protocol scans captured by a honeypot on 29 September 2026, listing indicators of compromise such as the most active source IP addresses, hosting networks, and attempted login accounts. The most scanned-from address was 80.66.83.43, with 18 scans, and DigitalOcean's AS14061 was the top originating network.
- 2Honeypot data logs 86 RDP scans in single day●2026-09-29 RDP # Honeypot IOCs - 86 scans Thread with top 3 features in each category and links to the full dataset # DF
A honeypot monitoring project has published indicators of compromise from 86 RDP scans recorded on 29 September 2026. The most active source IPs were 80.66.83.43 and 165.227.214.128, with 12 scans each, while hosting providers AS14061 and AS396982 accounted for the top networks. Attempted logins heavily targeted the default 'Administrator' account. The dataset is shared so defenders can block the flagged addresses.
- 3RDP honeypot data flags 43 scans in daily IOC report●2026-09-29 RDP # Honeypot IOCs - 43 scans Thread with top 3 features in each category and links to the full dataset # DF
A daily RDP honeypot report for 29 September 2026 documents 43 malicious scans, publishing indicators of compromise including the most active source IPs — led by 80.66.83.43 and 165.227.214.128 with six scans each — top networks AS14061 and AS396982, and frequently targeted accounts such as 'Administr'. The release includes category breakdowns and links to the full dataset for defenders.