search
AS396982
Trends
- 1RDP honeypot logs 184 scans, shares indicator data●2026-10-03 RDP # Honeypot IOCs - 184 scans Thread with top 3 features in each category and links to the full dataset # D
A cybersecurity researcher has published indicators of compromise from an RDP honeypot covering 184 scans recorded on 3 October 2026. The dataset highlights the most active source IPs, led by 94.26.68.55 and 94.26.68.54 with 26 scans each, top hosting networks AS201814, AS396982 and AS151734, and the most attempted usernames, including 'hello' with 80 attempts. Full data has been released for defenders to block.
- 2Honeypot data logs 86 RDP scans in single day●2026-09-29 RDP # Honeypot IOCs - 86 scans Thread with top 3 features in each category and links to the full dataset # DF
A honeypot monitoring project has published indicators of compromise from 86 RDP scans recorded on 29 September 2026. The most active source IPs were 80.66.83.43 and 165.227.214.128, with 12 scans each, while hosting providers AS14061 and AS396982 accounted for the top networks. Attempted logins heavily targeted the default 'Administrator' account. The dataset is shared so defenders can block the flagged addresses.
- 3RDP honeypot data flags 43 scans in daily IOC report●2026-09-29 RDP # Honeypot IOCs - 43 scans Thread with top 3 features in each category and links to the full dataset # DF
A daily RDP honeypot report for 29 September 2026 documents 43 malicious scans, publishing indicators of compromise including the most active source IPs — led by 80.66.83.43 and 165.227.214.128 with six scans each — top networks AS14061 and AS396982, and frequently targeted accounts such as 'Administr'. The release includes category breakdowns and links to the full dataset for defenders.