Mmastodon TechnologyCybersecurity first seen 4 d ago, last 4 d ago, peak #9
RDP honeypot logs nearly 6,000 scans in single-day IOC release
Original: 2026-10-19 RDP # Honeypot IOCs - 5976 scans Thread with top 3 features in each category and links to the full dataset #
Cybersecurity researchers have published indicators of compromise drawn from RDP honeypot data collected on 19 October 2026, covering 5,976 scans. The breakdown highlights three source IPs dominating the activity, led by 154.36.174.33 with 4,830 scans, alongside the most targeted accounts and autonomous systems, with the full dataset and top features in each category shared for defenders to block.
Why now: Defenders are sharing fresh threat intelligence so security teams can block the listed malicious IP addresses.
154.36.174.3345.154.96.17AS979AS212815RDP honeypot
Evidence
API: https://socialmediatrends-api.osmike.com/v1/trends/2922625