Port 3389 (RDP)
HoneyLabs honeypots recorded 9,605 probes against destination port 3389 (RDP) from 622 distinct source IP addresses in the last 7 days.
First observed 2026-08-09 06:25:58, most recently 2026-08-16 06:13:41 (UTC).
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 209.145.60.161 | 5,448 | Contabo Inc. | US |
| 8.211.141.34 | 302 | Alibaba (US) Technology Co., Ltd. | JP |
| 183.6.72.85 | 219 | Chinanet | CN |
| 45.137.194.93 | 180 | Contabo Inc. | US |
| 80.82.77.202 | 120 | IP Volume inc | NL |
| 45.142.193.18 | 108 | Iic Rail Limited | RO |
| 136.158.243.154 | 73 | Converge ICT Solutions Inc. | PH |
| 77.91.122.2 | 57 | MEVSPACE sp. z o.o. | GE |
Networks it comes from
| ASN | Organisation | Probes | Source IPs |
|---|---|---|---|
| AS40021 | Contabo Inc. | 5,635 | 6 |
| AS396982 | Google LLC | 978 | 125 |
| AS14061 | DigitalOcean, LLC | 331 | 39 |
| AS45102 | Alibaba (US) Technology Co., Ltd. | 317 | 7 |
| AS4134 | Chinanet | 230 | 8 |
| AS202425 | IP Volume inc | 171 | 5 |
Where it comes from
| Country | Probes |
|---|---|
| United States | 7,551 |
| China | 345 |
| Japan | 304 |
| The Netherlands | 213 |
| Romania | 190 |
| Russia | 107 |
Client strings seen on this port
| User agent | Probes |
|---|---|
| Python/3.10 aiohttp/3.8.4 | 165 |
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 90 |
| visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36 | 75 |
| Mozilla/5.0 (compatible; FlowIQLabsBot/1.0; +https://flowiq-labs.com/scanning-info) | 70 |
| beyondmemory-research (+https://beyondmemory.io/opt-out) | 28 |
Port report
Port report
Loading live data…