HoneyLabs
LookupEnrichFeedsCVEsCampaignsASN IndexMCPBlogDocs
Dashboard
iAnonymous lookups: 10/min, 100/hr per source IP. Sign in for a daily credit budget (free: 500, pro: 50,000) and history.

Filtered actors

query: port:3389

2.8K unique IPs · 86.3K events · 84 countries · 455 ASNs

Activity · last 30d

2026-05-05: 267 events2026-05-06: 1.1K events2026-05-07: 1.1K events2026-05-08: 775 events2026-05-09: 819 events2026-05-10: 641 events2026-05-11: 872 events2026-05-12: 692 events2026-05-13: 718 events2026-05-14: 784 events2026-05-15: 689 events2026-05-16: 372 events2026-05-17: 378 events2026-05-18: 254 events2026-05-19: 268 events2026-05-20: 412 events2026-05-21: 364 events2026-05-22: 354 events2026-05-23: 347 events2026-05-24: 475 events2026-05-25: 467 events2026-05-26: 539 events2026-05-27: 441 events2026-05-28: 530 events2026-05-29: 797 events2026-05-30: 692 events2026-05-31: 67.7K events2026-06-01: 807 events2026-06-02: 827 events2026-06-03: 1.0K events2026-06-04: 801 events

peak 67.7K on 2026-05-31

Top source networks · click to refine

AS15557 Societe Francaise Du Radiotelephone - SF77.6%
AS396982 Google LLC4.0%
AS29465 MTN NIGERIA Communication limited2.8%
AS14061 DigitalOcean, LLC1.2%
query: port:3389×window: 30d
Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed
IPCountryASNTop portsEvents
89.226.200.248248.200.226.89.rev.sfr.net🇫🇷FRAS15557 Societe Francaise Du Radiotelephone - SF3389/RDP66.9K
102.88.21.136🇳🇬NGAS29465 MTN NIGERIA Communication limited3389/RDP2.4K
193.169.194.14🇬🇧GBAS214576 Berdiev Ruslan Mukhabatovich3389/RDP625
103.72.98.79🇻🇳VNAS149068 iNET software one member company limited3389/RDP604
45.142.193.145🇷🇴ROAS214295 Skynet Network Ltd3389/RDP331
183.81.35.16🇻🇳VNAS18403 FPT Telecom Company3389/RDP296
92.154.41.2laubervilliers-656-1-233-2.w92-154.abo.wanadoo.fr🇫🇷FRAS3215 Orange3389/RDP269
78.46.33.198static.198.33.46.78.clients.your-server.de🇩🇪DEAS24940 Hetzner Online GmbH3389/RDP263
80.94.95.83🇷🇴ROAS204428 SS-Net3389/RDP190
104.243.41.89🇺🇸USAS23470 ReliableSite.Net LLC3389/RDP172
80.94.95.221🇷🇴ROAS204428 SS-Net3389/RDP170
94.102.49.155🇳🇱NLAS202425 IP Volume inc3389/RDP166
5.181.86.179🇺🇦UAAS211632 Internet Solutions & Innovations LTD.3389/RDP163
80.82.77.202rnd.group-ib.com🇳🇱NLAS202425 IP Volume inc3389/RDP150
162.210.245.77🇺🇸USAS397651 Sneaker Server, LLC3389/RDP145
80.66.83.80🇷🇺RUAS216473 Bashinskii Vadim Ruslanovich3389/RDP141
45.142.193.166🇷🇴ROAS214295 Skynet Network Ltd3389/RDP112
103.203.57.12scan-57-12.security.ipip.net🇨🇳CNAS136180 Beijing Tiantexin Tech. Co., Ltd.3389/RDP96
218.75.151.41🇨🇳CNAS4134 Chinanet3389/RDP91
80.66.83.43🇷🇺RUAS216473 Bashinskii Vadim Ruslanovich3389/RDP81
111.170.152.113🇨🇳CNAS151185 China Telecom3389/RDP77
80.188.223.202🇨🇿CZAS5610 O2 Czech Republic, a.s.3389/RDP74
202.162.199.146xc792.mdn.nusa.net.id🇮🇩IDAS23679 PT. Media Antar Nusa3389/RDP70
5.230.201.253🇩🇪DEAS215292 Gravhosting LLC3389/RDP65
185.156.73.157🇺🇦UAAS211736 FOP Dmytro Nedilskyi3389/RDP54
5.181.86.60🇺🇦UAAS211632 Internet Solutions & Innovations LTD.3389/RDP52
16.58.56.214scan.visionheight.com🇺🇸USAS16509 Amazon.com, Inc.3389/RDP48
162.216.18.178prod-beryllium-us-east-35.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud3389/RDP43
73.204.137.84c-73-204-137-84.hsd1.fl.comcast.net🇺🇸USAS7922 Comcast Cable Communications, LLC3389/RDP41
159.65.69.13prod-boron-sfo2-69.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
50.116.17.167prod-boron-us-central-25.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud3389/RDP39
173.255.226.126prod-beryllium-us-east-43.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud3389/RDP39
173.255.221.139prod-boron-us-west-30.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud3389/RDP39
178.128.191.134prod-boron-sfo2-59.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
198.58.100.99prod-boron-us-central-25.li.binaryedge.ninja🇺🇸USAS63949 Akamai Connected Cloud3389/RDP39
159.223.104.144prod-boron-nyc1-56.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
159.223.189.59prod-boron-nyc1-34.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
159.223.129.6prod-bromine-nyc1-26.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
167.99.197.28prod-bromine-lon1-2.do.binaryedge.ninja🇬🇧GBAS14061 DigitalOcean, LLC3389/RDP39
138.68.10.198prod-bromine-sfo2-201.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
167.99.172.211prod-beryllium-sfo2-17.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
143.198.185.126prod-bromine-nyc1-32.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
167.71.148.88prod-boron-sfo2-125.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
104.248.228.78prod-beryllium-nyc1-100.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
206.189.220.72prod-beryllium-sfo2-37.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
165.245.215.124prod-bromine-fra1-2.do.binaryedge.ninja🇺🇸USunknown network3389/RDP39
157.245.229.198prod-bromine-sfo2-91.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
138.68.9.82prod-beryllium-sfo2-69.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
165.227.26.149prod-beryllium-sfo2-97.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
147.182.170.20prod-bromine-nyc1-90.do.binaryedge.ninja🇺🇸USAS14061 DigitalOcean, LLC3389/RDP39
Showing top 50 by event count. Window is the last 30d. Add or remove filters by clicking any value on a per-IP report.