Port report
Port 3389RDP
7-day honeypot probe activity targeting destination port 3389. First seen 2026-05-14, most recent 2026-05-21 11:46.
Events 7d
2,943
Source IPs
705
Source ASNs
227
Countries
54
Top source ASNs
- AS396982Google LLC717
- AS214576Berdiev Ruslan Mukhabatovich222
- AS14061DigitalOcean, LLC212
- AS214295Skynet Network Ltd117
- AS211632Internet Solutions & Innovations LTD.86
- AS63949Akamai Connected Cloud85
- AS202425IP Volume inc85
- AS135377UCLOUD INFORMATION TECHNOLOGY HK LIMITED80
- AS8075Microsoft Corporation73
- AS204428SS-Net64
Top source countries
- United States1,343
- United Kingdom326
- China224
- Romania191
- Russia100
- Netherlands93
- Ukraine91
- Hong Kong91
- Belgium66
- Canada50
Top source IPs hitting port 3389
- 193.169.194.14222 eventsGB· AS214576 Berdiev Ruslan Mukhabatovich
- 45.142.193.145113 eventsRO· AS214295 Skynet Network Ltd
- 162.210.245.7748 eventsUS· AS397651 Sneaker Server, LLC
- 5.181.86.17946 eventsUA· AS211632 Internet Solutions & Innovations LTD.
- 94.102.49.15545 eventsNL· AS202425 IP Volume inc
- 104.243.41.8944 eventsUS· AS23470 ReliableSite.Net LLC
- 80.94.95.8341 eventsRO· AS204428 SS-Net
- 5.181.86.6040 eventsUA· AS211632 Internet Solutions & Innovations LTD.
- 80.82.77.20239 eventsNL· AS202425 IP Volume inc
- 167.99.197.2839 eventsGB· AS14061 DigitalOcean, LLC
- 198.199.122.21539 eventsUS· AS14061 DigitalOcean, LLC
- 159.65.69.1339 eventsUS· AS14061 DigitalOcean, LLC
- 173.255.221.13939 eventsUS· AS63949 Akamai Connected Cloud
- 192.53.121.15139 eventsCA· AS63949 Akamai Connected Cloud
- 138.68.225.6839 eventsUS· AS14061 DigitalOcean, LLC
- 111.170.152.11329 eventsCN· AS151185 China Telecom
- 80.66.83.8028 eventsRU· AS216473 Bashinskii Vadim Ruslanovich
- 185.156.137.17324 eventsGB· AS56444 Atmoso Limited
- 80.66.83.4323 eventsRU· AS216473 Bashinskii Vadim Ruslanovich
- 205.210.31.10822 eventsUS· AS396982 Google LLC
- 198.235.24.15822 eventsUS· AS396982 Google LLC
- 147.185.132.8222 eventsUS· AS396982 Google LLC
- 3.130.168.221 eventsUS· AS16509 Amazon.com, Inc.
- 3.129.187.3815 eventsUS· AS16509 Amazon.com, Inc.
- 193.142.146.13912 eventsDE· AS213438 ColocaTel Inc.
Top user-agents on port 3389
- Python/3.10 aiohttp/3.8.484
- visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.3654
- Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)48
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.024
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.3616
- Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.3610
- Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity10
- Go-http-client/1.19
- Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.08
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.368
JSON: /api/port/3389. CSV: /api/port/3389?format=csv.