There is some unusually high RDP worldwide "scanning" going on since the beginning of December. RDP must not be accessible via the internet without additional security measures like VPN.

www.cert.at/de/aktuelles...