THREAT OPS › Threat News › Just 21 IP Addresses Are Now Behind Nearly Half of All RDP Scanning on the Internet
Just 21 IP Addresses Are Now Behind Nearly Half of All RDP Scanning on the Internet
GreyNoise uncovers a concentrated RDP scanning campaign, revealing infrastructure patterns, rapid traffic shifts that impact detection, and recommendations for defenders.
MITRE ATT&CK techniques
- IP AddressesT1590.005