src_0060ae82ad11b5dc16
- Source-provided label
- Not reported
- Evidence class
- mentioned in report
- Confidence
- Not reported
- Observed
- Aug 25, 2025 00:00 UTC
- Retrieved
- Oct 08, 2026 03:52 UTC
Nearly 2,000 Malicious IPs Probe Microsoft Remote Desktop After Single-Day Surge
On August 21, GreyNoise observed a sharp surge in scanning against Microsoft Remote Desktop (RDP) services. The wave’s aim was clear: test for timing flaws that reveal valid usernames, laying the groundwork for credential-based intrusions.
Reference details
- Source category
- Research & news
- Report title
Nearly 2,000 Malicious IPs Probe Microsoft Remote Desktop After Single-Day Surge- First reported
- Aug 25, 2025 00:00 UTC
- Last reported
- Aug 25, 2025 00:00 UTC
- Catalog updated
- Oct 08, 2026 03:52 UTC
- Record ID
152943d09130f2de8fe2f1ae1d282b13b9ffa041f45b1b2f4933024ed4b100c0
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.