The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Press CTRL+K to open search

RDP Connections Originating from Outside the Organization

  • Published on Sep 11, 2026
  • 1 minute(s) read
Prev Next
Skip to main content

  • Search on Category RDP

  • Open Graph Filter

  • Look for IP addresses not in IETF RFC1918 range

Note

Note that RDP logs sometimes record the host name and not the IP, even for RDP connections that originate from outside the environment. Ensure that you look for suspicious host names too (user-pc, workstation, etc.).