Mmastodon TechnologyCybersecurity first seen 7 d ago, last 7 d ago, peak #9
RDP honeypot logs 7,383 scans in single-day IOC release
Original: 2026-10-18 RDP # Honeypot IOCs - 7383 scans Thread with top 3 features in each category and links to the full dataset #
A cybersecurity researcher has published indicators of compromise from an RDP honeypot, recording 7,383 scans on 18 October 2026. The dataset highlights one dominant source IP, 154.36.174.33, accounting for over 7,200 attempts under AS979, with attempted logins heavily using the username 'hello'. Top features per category and the full dataset have been shared for defenders.
Why now: Security practitioners are sharing fresh IOC data to help others block active RDP scanning infrastructure.
154.36.174.33AS979RDP honeypotInfosec.Exchange
Evidence
- 2026-10-18 RDP # Honeypot IOCs - 7383 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 154.36.174.33 - 7263 80.66.83.43 - 15 205.210.31.199 - 9 Top ASNs: AS979 - 7263 AS396982 - 36 AS216473 - 15 Top Accounts: hello - 7290… · rdpsnitch@infosec.exchange · 1
API: https://socialmediatrends-api.osmike.com/v1/trends/2800591