{"ip":"135.237.122.184","total_events":104,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"strechoid","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (strechoid).","Known research and commercial scanners are labelled as such, not as threats."]},"first_seen":"2026-02-17T18:07:14","last_seen":"2026-07-05T01:43:31","events_24h":0,"events_7d":8,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Washington","lat":38.7095,"lon":-78.1539,"asn":8075,"org":"Microsoft Corporation"},"source_domain":"azpdegq0j4lp.stretchoid.com","known_scanners":["strechoid","Stretchoid"],"scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"research","url":"https://www.stretchoid.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":8083,"proto":"tcp","label":"","count":6},{"port":4333,"proto":"tcp","label":"","count":5},{"port":80,"proto":"tcp","label":"HTTP","count":4},{"port":8333,"proto":"tcp","label":"Bitcoin","count":4},{"port":4545,"proto":"tcp","label":"","count":4},{"port":3391,"proto":"tcp","label":"","count":4},{"port":8945,"proto":"tcp","label":"","count":4},{"port":8889,"proto":"tcp","label":"","count":3},{"port":8983,"proto":"tcp","label":"Solr","count":3},{"port":10000,"proto":"tcp","label":"Webmin","count":3},{"port":1194,"proto":"tcp","label":"OpenVPN","count":3},{"port":88,"proto":"tcp","label":"","count":3},{"port":1389,"proto":"tcp","label":"","count":3},{"port":8008,"proto":"tcp","label":"HTTP-alt","count":2},{"port":8104,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-04-08","count":2},{"date":"2026-04-11","count":4},{"date":"2026-04-14","count":2},{"date":"2026-04-19","count":2},{"date":"2026-04-21","count":2},{"date":"2026-04-23","count":4},{"date":"2026-04-26","count":4},{"date":"2026-04-28","count":4},{"date":"2026-05-02","count":2},{"date":"2026-05-05","count":1},{"date":"2026-05-07","count":1},{"date":"2026-05-08","count":1},{"date":"2026-05-09","count":1},{"date":"2026-05-12","count":1},{"date":"2026-05-14","count":2},{"date":"2026-05-16","count":1},{"date":"2026-05-17","count":1},{"date":"2026-05-18","count":1},{"date":"2026-05-20","count":2},{"date":"2026-05-23","count":1},{"date":"2026-05-24","count":1},{"date":"2026-05-25","count":1},{"date":"2026-05-29","count":1},{"date":"2026-06-09","count":1},{"date":"2026-06-13","count":3},{"date":"2026-06-29","count":1},{"date":"2026-06-30","count":2},{"date":"2026-07-01","count":2},{"date":"2026-07-02","count":2},{"date":"2026-07-04","count":1},{"date":"2026-07-05","count":1}],"recent_events":[{"timestamp":"2026-07-05T01:43:31","port":25,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_25\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f32350a","method":"","user_agent":"","community_id":"1:ZcZLOQVN/L9zru9+9CoeFLw3oHo=","ja3":"","session":"63a56a1e-2af2-47aa-926c-571b866e284f","seq":1,"duration_ms":27,"bytes_in":23,"bytes_out":40,"enriched":{"digest":"61b0e94a79290fe6","strings":["MGLNDD_<HONEYPOT>_25"]}},{"timestamp":"2026-07-04T04:47:31","port":2181,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_2181\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f323138310a","method":"","user_agent":"","community_id":"1:K+MguQYWxTrgJxlBHB6D+TlT2wc=","ja3":"","session":"d4c6cf73-a1f8-4574-869f-651d34a77713","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":15,"enriched":{"digest":"a40f382094844108","strings":["MGLNDD_<HONEYPOT>_2181"]}},{"timestamp":"2026-07-02T23:14:57","port":5938,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5938\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353933380a","method":"","user_agent":"","community_id":"1:feQLFc56wpNAbjAnnD/4jSCBwqA=","ja3":"","session":"a070eca5-f8d3-4c0e-9ce3-fefb017ba3c9","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":15,"enriched":{"digest":"0ab43d27590d13a3","strings":["MGLNDD_<HONEYPOT>_5938"]}},{"timestamp":"2026-07-02T00:38:57","port":8983,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8983\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383938330a","method":"","user_agent":"","community_id":"1:xF/YACQhNc3TJGwEEjsQI5SgslY=","ja3":"","session":"a01cf51e-288e-4e1e-8b08-3b5aa041131d","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":15,"enriched":{"digest":"a3295f60b8374e52","strings":["MGLNDD_<HONEYPOT>_8983"]}},{"timestamp":"2026-07-01T22:42:13","port":8104,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8104\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383130340a","method":"","user_agent":"","community_id":"1:oL5qzgvUJQ/6OgJyGscf7H256ws=","ja3":"","session":"b2156300-e9e9-46dc-9b68-d6a9f3fb205f","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":15,"enriched":{"digest":"e5e02ad15460eb52","strings":["MGLNDD_<HONEYPOT>_8104"]}},{"timestamp":"2026-07-01T05:00:47","port":3391,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_3391\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f333339310a","method":"","user_agent":"","community_id":"1:mHkiv8PjD5Hb69b6yrxlZ2CkNnY=","ja3":"","session":"c8d38fdd-93a7-4b0f-bbc9-82ead825c5f7","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":15,"enriched":{"digest":"953a681d6807fcf2","strings":["MGLNDD_<HONEYPOT>_3391"]}},{"timestamp":"2026-06-30T23:14:13","port":1389,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1389\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313338390a","method":"","user_agent":"","community_id":"1:TkZ0gQ035zllRERgOSfmuws4Tas=","ja3":"","session":"1461bacf-2b82-4024-b5ce-4fe578d1e6ed","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":15,"enriched":{"digest":"846b7cefadd324c8","strings":["MGLNDD_<HONEYPOT>_1389"]}},{"timestamp":"2026-06-30T20:06:08","port":8889,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8889\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383838390a","method":"","user_agent":"","community_id":"1:VA4lJOSHmXKcqiXbtGD7tIu/oA8=","ja3":"","session":"d29c1b9d-dec1-4009-a18c-d2cc4c35013d","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":15,"enriched":{"digest":"de850e283b820234","strings":["MGLNDD_<HONEYPOT>_8889"]}},{"timestamp":"2026-06-29T04:45:06","port":8083,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8083\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383038330a","method":"","user_agent":"","community_id":"1:FtimHqHNbUGm00Uqb1e/C9EPbHs=","ja3":"","session":"9cd927ea-0952-492c-b9bc-68c633585e64","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":15,"enriched":{"digest":"4c524cbfca0dd1ff","strings":["MGLNDD_<HONEYPOT>_8083"]}},{"timestamp":"2026-06-13T15:41:10","port":8083,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8083\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383038330a","method":"","user_agent":"","community_id":"1:HrRo7lGpwMwLju5Rsg8qyb92IrE=","ja3":"","session":"91fdff3b-e56a-480c-bb8a-ea771d952081","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":15,"enriched":{"digest":"4c524cbfca0dd1ff","strings":["MGLNDD_<HONEYPOT>_8083"]}}],"http_methods":[],"distinct_ports_total":49,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-06T07:17:01.337475+00:00"}