Mmastodon TechnologyCybersecurity first seen 4 d ago, last 4 d ago, peak #8
Honeypot data logs nearly 3,000 RDP scans with top attacker IPs
Original: 2026-10-19 RDP # Honeypot IOCs - 2988 scans Thread with top 3 features in each category and links to the full dataset #
A cybersecurity honeypot operator published indicators of compromise from 2,988 RDP scans recorded on 19 October 2026. The dataset highlights the most active source IPs, led by 154.36.174.33 with 2,415 scans, top ASNs including AS979 and AS212815, and the most targeted accounts. Full data was shared for defenders to block and investigate.
Why now: Security teams monitor fresh IOC feeds to block active RDP scanning infrastructure.
RDP honeypot154.36.174.33AS979AS212815InfoSec Exchange
Rank over time, top of the chart is #1. 2 snapshots from 4 d ago to 4 d ago.
Evidence
- 2026-10-19 RDP # Honeypot IOCs - 2988 scans Thread with top 3 features in each category and links to the full dataset # DFIR # InfoSec Top IPs: 154.36.174.33 - 2415 45.154.96.17 - 522 136.244.100.79 - 6 Top ASNs: AS979 - 2415 AS212815 - 522 AS396982 - 12 Top Accounts: hello -… · rdpsnitch@infosec.exchange · 2
API: https://socialmediatrends-api.osmike.com/v1/trends/2922624