Just 21 IP Addresses Are Now Behind Nearly Half of All RDP Scanning on the Internet

GreyNoise Version 1 original current

Imported from official source

GreyNoise uncovers a concentrated RDP scanning campaign, revealing infrastructure patterns, rapid traffic shifts that impact detection, and recommendations for defenders.

This version

Version
1 of 1
Recorded
September 20, 2026 19:52
Change
Initial
Content hash
47f33101ae4e3f40b4d9fda54f1d0d43
All versions
Revision history

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.