Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #12
RDP honeypot logs flag 199 scans and new IOCs
Original: 2026-10-08 RDP # Honeypot IOCs - 199 scans Thread with top 3 features in each category and links to the full dataset # D
Cybersecurity researchers have published indicators of compromise drawn from an RDP honeypot, documenting 199 scans recorded on 8 October 2026. The dataset highlights the most active source IPs, including 165.232.97.161 and 34.170.147.105, top hosting networks such as AS396982, and commonly attempted accounts like 'hello', with full data shared for defenders.
Why now: Security teams monitor shared honeypot IOC feeds to block active RDP scanning sources.
RDP honeypotAS396982165.232.97.161AS14061AS8075
Evidence
- 2026-10-08 RDP # Honeypot IOCs - 199 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 165.232.97.161 - 12 34.170.147.105 - 12 34.82.15.211 - 12 Top ASNs: AS396982 - 84 AS14061 - 13 AS8075 - 11 Top Accounts: hello - 90… · rdpsnitch@infosec.exchange · 2
API: https://socialmediatrends-api.osmike.com/v1/trends/1549604