Scan attack on VAV : mstshash=Administr

[FredR]

# cat /var/log/nginx/access.log-* | grep "Administr" | awk '{print $1}' | sort -n | uniq -c
      2 45.227.254.156
      3 176.46.158.61
      2 193.24.211.48
      1 194.165.16.162
      1 194.165.16.164
      1 194.165.16.165
      1 194.165.16.167

Logs :
“\x03\x00\x00/*\xE0\x00\x00\x00\x00\x00Cookie: mstshash=Administr”

https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-rdpbcgr/e78db616-689f-4b8a-8a99-525f7a433ee2?redirectedfrom=MSDN