RDP Snitch bot

@[email protected]

A bot who snitches on RDP Scanners, sharing IOCs with the #DFIR and #InfoSec communities

Posts: 3,874
Followers: 364
Following: 1

Joined 2022-12-31 · View on infosec.exchange →

RDP Snitch @[email protected]
2026-10-18

2026-10-17 RDP #Honeypot IOCs - 1062 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
154.36.174.33 - 603
142.132.217.243 - 216
194.164.107.5 - 30
Top ASNs:
AS979 - 603
AS24940 - 216
AS396982 - 39
Top Accounts:
hello - 864
142.93.8.59 - 54
root - 18
Top ISPs:
NetLab Global - 603
Hetzner Online GmbH - 216
Google LLC - 39
Top Clients:
Unknown - 1062
Top Software:
Unknown - 1062
Top Keyboards:
Unknown - 1062
Top IP Classification:
Unknown - 702
hosting - 342
hosting & proxy - 9
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key
#CyberSec #SOC #Blueteam #SecOps #Security

#honeypot #dfir #infosec #cybersec #soc #blueteam
RDP Snitch @[email protected]
2026-10-18

2026-10-17 RDP #Honeypot IOCs - 708 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
154.36.174.33 - 402
142.132.217.243 - 144
194.164.107.5 - 20
Top ASNs:
AS979 - 402
AS24940 - 144
AS396982 - 26
Top Accounts:
hello - 576
142.93.8.59 - 36
root - 12
Top ISPs:
NetLab Global - 402
Hetzner Online GmbH - 144
Google LLC - 26
Top Clients:
Unknown - 708
Top Software:
Unknown - 708
Top Keyboards:
Unknown - 708
Top IP Classification:
Unknown - 468
hosting - 228
hosting & proxy - 6
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key
#CyberSec #SOC #Blueteam #SecOps #Security

#honeypot #dfir #infosec #cybersec #soc #blueteam
RDP Snitch @[email protected]
2026-10-18

2026-10-17 RDP #Honeypot IOCs - 354 scans
Thread with top 3 features in each category and links to the full dataset
#DFIR #InfoSec
Top IPs:
154.36.174.33 - 201
142.132.217.243 - 72
194.164.107.5 - 10
Top ASNs:
AS979 - 201
AS24940 - 72
AS396982 - 13
Top Accounts:
hello - 288
142.93.8.59 - 18
root - 6
Top ISPs:
NetLab Global - 201
Hetzner Online GmbH - 72
Google LLC - 13
Top Clients:
Unknown - 354
Top Software:
Unknown - 354
Top Keyboards:
Unknown - 354
Top IP Classification:
Unknown - 234
hosting - 114
hosting & proxy - 3
Pastebin links with full 24-hr RDP Honeypot IOC Lists:
Bad API request, invalid api_dev_key
#CyberSec #SOC #Blueteam #SecOps #Security

#honeypot #dfir #infosec #cybersec #soc #blueteam