Forum Discussion

snteran's avatar
snteran
Copper Contributor
Sep 10, 2021

RE: Suspicious incoming RDP: Victim IP - 13.65.113.217

We received a LOW ASC Alert regarding an attack to 116 IP addresses.     "Network traffic analysis detected anomalous incoming Remote Desktop Protocol (RDP) communication to 13.65.113.217, associat...
StanislavBelov's avatar
StanislavBelov
Icon for Microsoft rankMicrosoft
Sep 13, 2021
I would suggest that you open a support ticket so that our experts can help you find the root cause of this alert.
  • snteran's avatar
    snteran
    Copper Contributor
    Sep 14, 2021
    thanks for the suggestion, I was hoping to bring this type of alert public to assist others. If anyone has any thoughts/advice on potential explanation, please let me know.

    Cheers