Mmastodon TechnologyCybersecurity first seen 2 h ago, last 2 h ago, peak #9
Honeypot data logs 598 RDP scans in daily threat report
Original: 2026-10-06 RDP # Honeypot IOCs - 598 scans Thread with top 3 features in each category and links to the full dataset # D
A daily RDP honeypot report dated 6 October 2026 recorded 598 scans and published indicators of compromise for defenders. The most active source IP, 20.233.35.68, accounted for 340 scans, with AS8075 the top network. The most common account probed was 'hello'. The thread lists top indicators per category and links to the full dataset for security teams.
Why now: Security practitioners share daily honeypot IOC data so defenders can block active scanning sources.
RDP honeypotAS807520.233.35.68infosec.exchange
Evidence
- 2026-10-06 RDP # Honeypot IOCs - 598 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 20.233.35.68 - 340 104.196.118.248 - 30 82.85.225.167 - 26 Top ASNs: AS8075 - 358 AS396982 - 54 AS8612 - 26 Top Accounts: hello - 388… · rdpsnitch@infosec.exchange · 3
API: https://socialmediatrends-api.osmike.com/v1/trends/1300479