{"ip":"134.33.67.183","total_events":8,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"Stretchoid","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (Stretchoid).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"request","label":"Request traffic","detail":"205 bytes sent","bytes_sent":205,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-17T08:12:31","last_seen":"2026-09-24T10:33:00","events_24h":2,"events_7d":7,"geo":{"country_code":"US","country_name":"United States","region":"Arizona","city":"Phoenix","lat":33.4532,"lon":-112.0748,"asn":8075,"org":"Microsoft Corporation"},"source_domain":"azpdwghwopc8.stretchoid.com","known_scanners":["Stretchoid"],"scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"},"cve_matches":[],"malware":[],"top_ports":[{"port":1414,"proto":"tcp","label":"","count":2},{"port":8333,"proto":"tcp","label":"Bitcoin","count":2},{"port":1194,"proto":"tcp","label":"OpenVPN","count":1},{"port":8008,"proto":"tcp","label":"HTTP-alt","count":1},{"port":8181,"proto":"tcp","label":"","count":1},{"port":8983,"proto":"tcp","label":"Solr","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-17","count":1},{"date":"2026-09-19","count":2},{"date":"2026-09-21","count":1},{"date":"2026-09-22","count":1},{"date":"2026-09-23","count":2},{"date":"2026-09-24","count":1}],"recent_events":[{"timestamp":"2026-09-24T10:33:00","port":8333,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8333\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383333330a","method":"","user_agent":"","ja3":"","session":"7ac91440-ff3b-4bac-93c2-f2309c3814f1","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"0c8f3d85c9b5f804","strings":["MGLNDD_<HONEYPOT>_8333"]}},{"timestamp":"2026-09-23T19:15:22","port":1194,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_185.228.81.201_1194\n","payload_hex":"4d474c4e44445f3138352e3232382e38312e3230315f313139340a","method":"","user_agent":"","ja3":"","session":"fea5d16e-1b1b-45ab-9dc1-21ae71dcb612","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":13,"enriched":{"digest":"2ec5ce267590b447","strings":["MGLNDD_185.228.81.201_1194"],"iocs":{"ips":["185.228.81.201"]}}},{"timestamp":"2026-09-23T13:42:16","port":1414,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1414\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313431340a","method":"","user_agent":"","ja3":"","session":"ec05e4fd-1c14-4059-b94c-bb52000b57c2","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"be2331fdf69dff81","strings":["MGLNDD_<HONEYPOT>_1414"]}},{"timestamp":"2026-09-22T16:08:00","port":8333,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8333\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383333330a","method":"","user_agent":"","ja3":"","session":"e1ea5547-8cb1-4c4d-b9da-81a437d75146","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"0c8f3d85c9b5f804","strings":["MGLNDD_<HONEYPOT>_8333"]}},{"timestamp":"2026-09-21T19:24:46","port":1414,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1414\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313431340a","method":"","user_agent":"","ja3":"","session":"f300dfba-b08b-43bb-9793-636dcc08cf7f","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"be2331fdf69dff81","strings":["MGLNDD_<HONEYPOT>_1414"]}},{"timestamp":"2026-09-19T06:35:34","port":8983,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8983\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383938330a","method":"","user_agent":"","ja3":"","session":"3292c33f-bd64-4419-a8f6-f0ea135db130","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"a3295f60b8374e52","strings":["MGLNDD_<HONEYPOT>_8983"]}},{"timestamp":"2026-09-19T02:48:29","port":8181,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8181\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383138310a","method":"","user_agent":"","ja3":"","session":"d511a64b-0ebd-4f27-a39e-80bf140e0724","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"2f59c79da2fc8a42","strings":["MGLNDD_<HONEYPOT>_8181"]}},{"timestamp":"2026-09-17T08:12:31","port":8008,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8008\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383030380a","method":"","user_agent":"","ja3":"","session":"e902c474-ba2d-4895-a06a-6ad2fe5eca04","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"c7734b2476b6d92a","strings":["MGLNDD_<HONEYPOT>_8008"]}}],"http_methods":[],"distinct_ports_total":6,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-24T17:25:29.487977+00:00"}