Since October 8, 2025, GreyNoise has tracked a coordinated botnet operation involving over 100,000 unique IP addresses from more than 100 countries targeting Remote Desktop Protocol (RDP) services in the United States.
100,000+ IP Botnet Launches Coordinated RDP Attack Wave Against US Infrastructure
calendar_today
October 10, 2025
domain
greynoise