{"ip":"134.33.65.46","total_events":7,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["7 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"181 bytes sent","bytes_sent":181,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-15T18:52:57","last_seen":"2026-10-04T04:49:56","events_24h":0,"events_7d":3,"geo":{"country_code":"US","country_name":"United States","region":"Arizona","city":"Phoenix","lat":33.4532,"lon":-112.0748,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":8443,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T16:33:32","last_seen":"2026-10-05T16:33:32","recent":[{"timestamp":"2026-10-05T16:33:32","port":8443,"src_port":51718,"proto":"udp","app_proto":"","app_protocol":"","summary":"MGLNDD_<HONEYPOT>_8443\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383434330a","sni":"","session":"52c668a3-b028-44fd-84ea-184dfe4881e7","bytes_in":26,"source_verified":false,"enriched":{"digest":"6f7f3440a9023eca","strings":["MGLNDD_<HONEYPOT>_8443"]}}]},"top_ports":[{"port":8084,"proto":"tcp","label":"","count":1},{"port":1311,"proto":"tcp","label":"","count":1},{"port":8086,"proto":"tcp","label":"InfluxDB","count":1},{"port":161,"proto":"tcp","label":"SNMP","count":1},{"port":9060,"proto":"tcp","label":"","count":1},{"port":6066,"proto":"tcp","label":"","count":1},{"port":111,"proto":"tcp","label":"RPC","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-15","count":1},{"date":"2026-09-18","count":1},{"date":"2026-09-26","count":2},{"date":"2026-09-30","count":1},{"date":"2026-10-02","count":1},{"date":"2026-10-04","count":1}],"recent_events":[{"timestamp":"2026-10-04T04:49:56","port":6066,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_6066\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f363036360a","method":"","user_agent":"","ja3":"","session":"e67147d0-7bff-4678-b656-f1088f4461f3","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":12,"enriched":{"digest":"6a084a2d85c0db6a","strings":["MGLNDD_<HONEYPOT>_6066"]}},{"timestamp":"2026-10-02T19:29:39","port":111,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_111\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3131310a","method":"","user_agent":"","ja3":"","session":"434be281-2433-4335-89b4-866ac99f0837","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":12,"enriched":{"digest":"29242794e9bce34e","strings":["MGLNDD_<HONEYPOT>_111"]}},{"timestamp":"2026-09-30T06:40:55","port":1311,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1311\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313331310a","method":"","user_agent":"","ja3":"","session":"943b73b7-1b03-4cc1-8323-0d24640fa32b","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"d84753717ed087e5","strings":["MGLNDD_<HONEYPOT>_1311"]}},{"timestamp":"2026-09-26T17:31:11","port":161,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_161\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3136310a","method":"","user_agent":"","ja3":"","session":"ff943298-f832-4ed1-aea3-559df8f00f06","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":12,"enriched":{"digest":"70f4c7cf4e0b75fb","strings":["MGLNDD_<HONEYPOT>_161"]}},{"timestamp":"2026-09-26T09:35:46","port":8086,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8086\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383038360a","method":"","user_agent":"","ja3":"","session":"7621b62f-b74a-4f57-911c-8959c183bd49","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"d593dd6d23410c6f","strings":["MGLNDD_<HONEYPOT>_8086"]}},{"timestamp":"2026-09-18T00:12:54","port":9060,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_9060\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f393036300a","method":"","user_agent":"","ja3":"","session":"4f7400e8-bfc7-471c-b7aa-2bd563b3f4a9","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":12,"enriched":{"digest":"a132d6101589eb56","strings":["MGLNDD_<HONEYPOT>_9060"]}},{"timestamp":"2026-09-15T18:52:57","port":8084,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8084\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383038340a","method":"","user_agent":"","ja3":"","session":"455036c7-422f-4c7e-92bc-31cc5c5c6c7c","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":12,"enriched":{"digest":"59979471e5607f55","strings":["MGLNDD_<HONEYPOT>_8084"]}}],"http_methods":[],"distinct_ports_total":7,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T19:36:42.220299+00:00"}