Mmastodon TechnologyCybersecurity first seen 7 d ago, last 7 d ago, peak #10
Honeypot data flags 5,070 RDP scans in single day
Original: 2026-10-10 RDP # Honeypot IOCs - 5070 scans Thread with top 3 features in each category and links to the full dataset #
Cybersecurity researchers published a daily report on October 10, 2026 listing indicators of compromise from RDP honeypots that recorded 5,070 scans. The top source, IP address 192.3.154.48, accounted for 3,210 scans, with AS36352 the most active network. The thread highlights the most common attacker accounts and links to the full dataset for defenders to review.
Why now: Security teams regularly monitor shared honeypot IOC reports to block active scanning sources.
RDP honeypots192.3.154.48AS36352infosec.exchange
Evidence
- 2026-10-10 RDP # Honeypot IOCs - 5070 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 192.3.154.48 - 3210 76.185.13.48 - 42 81.31.194.72 - 42 Top ASNs: AS36352 - 3210 AS396982 - 246 AS9808 - 192 Top Accounts: hello -… · rdpsnitch@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/1919643