Network scan (many hosts) from 94.156.131.120 (AS198037) against Bogahost

We operate AS200239 (Bogahost). Our network monitoring recorded abusive traffic
originating from your network towards our infrastructure. Details below.

Summary
  Type:        Network scan (many hosts)
  Source:      94.156.131.120 (AS198037 Spacecore Solution Ltd, NL)
  Target:      100 hosts in our network (example 92.112.154.209) port 3389/TCP (RDP)
  First seen:  2026-10-18 09:26:41 UTC
  Last seen:   ongoing at 2026-10-18 09:29:47 UTC
  Peak rate:   3 packets/s, 1 kbit/s
  Volume:      ~354 packets
  Evidence:    100.0% unanswered SYN, average packet 40 bytes

Sample flow records (sampled NetFlow/IPFIX, 60 s window ending 2026-10-18 09:29:31 UTC)
  source                                  destination                               port      packets avg_bytes   syn%
  94.156.131.120                          92.112.154.70                             3389            1        40   100%
  94.156.131.120                          46.37.107.192                             3389            1        40   100%
  94.156.131.120                          194.87.64.40                              3389            1        40   100%
  94.156.131.120                          5.178.100.200                             3389            1        40   100%
  94.156.131.120                          194.87.64.60                              3389            1        40   100%
  94.156.131.120                          195.58.63.79                              3389            1        40   100%
  94.156.131.120                          195.58.63.252                             3389            1        40   100%
  94.156.131.120                          46.37.107.255                             3389            1        40   100%
  94.156.131.120                          195.58.63.246                             3389            1        40   100%
  94.156.131.120                          45.80.174.224                             3389            1        40   100%
  94.156.131.120                          195.58.63.69                              3389            1        40   100%
  94.156.131.120                          194.87.64.34                              3389            1        40   100%
  94.156.131.120                          195.58.63.82                              3389            1        40   100%
  94.156.131.120                          195.58.63.76                              3389            1        40   100%
  94.156.131.120                          195.58.63.77                              3389            1        40   100%
  94.156.131.120                          46.37.107.79                              3389            1        40   100%
  94.156.131.120                          195.58.63.70                              3389            1        40   100%
  94.156.131.120                          92.112.154.123                            3389            1        40   100%
  94.156.131.120                          194.87.64.33                              3389            1        40   100%
  94.156.131.120                          185.218.101.115                           3389            1        40   100%

Please investigate the source host(s) and take appropriate action. The traffic