Port 3389 (RDP)
HoneyLabs honeypots recorded 5,797 probes against destination port 3389 (RDP) from 606 distinct source IP addresses in the last 7 days.
First observed 2026-09-23 16:03:28, most recently 2026-09-30 16:01:17 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 193.24.123.39 | 786 | Prospero Ooo | RU |
| 52.157.33.111 | 652 | Microsoft Corporation | US |
| 13.77.158.0 | 415 | Microsoft Corporation | US |
| 77.239.124.110 | 281 | Banatsync Srl | US |
| 103.146.159.62 | 271 | YISU CLOUD LTD | HK |
| 103.77.214.179 | 226 | Megacore Technology Company Limited | VN |
| 94.26.68.54 | 161 | MEVSPACE sp. z o.o. | BG |
| 103.160.216.44 | 116 | Uteleservices | IN |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS8075 | Microsoft Corporation | 1,146 | 45 |
| AS396982 | Google LLC | 898 | 109 |
| AS200593 | Prospero Ooo | 809 | 2 |
| AS198364 | Banatsync Srl | 288 | 2 |
| AS201814 | MEVSPACE sp. z o.o. | 275 | 4 |
| AS142403 | YISU CLOUD LTD | 271 | 1 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 3,095 |
| Russia | 963 |
| Hong Kong | 322 |
| Bulgaria | 299 |
| Vietnam | 247 |
| India | 197 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 125 |
| visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 45 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0 | 36 |
| Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 | 15 |
| Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity | 14 |
Port report
Port report
Loading live data…