Mmastodon TechnologyCybersecurity first seen 6 d ago, last 6 d ago, peak #11
RDP honeypot logs thousands of scans, publishes IOCs
Original: 2026-10-10 RDP # Honeypot IOCs - 5069 scans Thread with top 3 features in each category and links to the full dataset #
A cybersecurity honeypot project published its indicators of compromise for 10 October 2026, covering 5,069 RDP scans. The most active source, IP 192.3.154.48, accounted for 3,209 attempts, with AS36352 the top network. The release also lists the most targeted accounts and links to the full dataset for DFIR and InfoSec practitioners.
Why now: Security teams monitor fresh IOC feeds to block the most active scanning sources.
RDP honeypot192.3.154.48AS36352infosec.exchange
Evidence
- 2026-10-10 RDP # Honeypot IOCs - 5069 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 192.3.154.48 - 3209 76.185.13.48 - 42 81.31.194.72 - 42 Top ASNs: AS36352 - 3209 AS396982 - 246 AS9808 - 192 Top Accounts: hello -… · rdpsnitch@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/1919644