search
AS396982
Trends
- 1Honeypot data logs 86 RDP scans in single day●2026-09-29 RDP # Honeypot IOCs - 86 scans Thread with top 3 features in each category and links to the full dataset # DF
A honeypot monitoring project has published indicators of compromise from 86 RDP scans recorded on 29 September 2026. The most active source IPs were 80.66.83.43 and 165.227.214.128, with 12 scans each, while hosting providers AS14061 and AS396982 accounted for the top networks. Attempted logins heavily targeted the default 'Administrator' account. The dataset is shared so defenders can block the flagged addresses.
- 2RDP honeypot data flags 43 scans in daily IOC report●2026-09-29 RDP # Honeypot IOCs - 43 scans Thread with top 3 features in each category and links to the full dataset # DF
A daily RDP honeypot report for 29 September 2026 documents 43 malicious scans, publishing indicators of compromise including the most active source IPs — led by 80.66.83.43 and 165.227.214.128 with six scans each — top networks AS14061 and AS396982, and frequently targeted accounts such as 'Administr'. The release includes category breakdowns and links to the full dataset for defenders.