@shadowserver.bsky.social on Bluesky

JavaScript RequiredThis is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is. Learn more about Bluesky at bsky.social and atproto.com.

Post

The Shadowserver Foundation

shadowserver.bsky.social

did:plc:3xyh2kw5hfxsax4zff3pp5ub

We are seeing large numbers of sources scanning for RDP services - especially port 1098/TCP (!) - in our sensors last 2 weeks (up to 740 000 (!) distinct source IPs daily, incl up to 405 000 from Brazil). https://dashboard.shadowserver.org/statistics/honeypot/device/time-series/?date_range=30&type=rdp-scan&geo=BR&dataset=unique_ips&limit=1000&group_by=geo&style=stacked https://dashboard.shadowserver.org/statistics/honeypot/device/map/?day=2024-12-03&geo=all&data_set=count&scale=log

2024-12-13T11:13:39.253Z