{"ip":"135.237.125.106","total_events":78,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"strechoid","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (strechoid).","Known research and commercial scanners are labelled as such, not as threats."]},"first_seen":"2026-02-22T09:43:29","last_seen":"2026-07-09T00:39:40","events_24h":1,"events_7d":3,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Washington","lat":38.7095,"lon":-78.1539,"asn":8075,"org":"Microsoft Corporation"},"source_domain":"azpdegu2azdo.stretchoid.com","known_scanners":["strechoid","Stretchoid"],"scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"},"cve_matches":[],"malware":[],"top_ports":[{"port":3391,"proto":"tcp","label":"","count":7},{"port":27019,"proto":"tcp","label":"","count":5},{"port":8089,"proto":"tcp","label":"Splunk","count":4},{"port":4331,"proto":"tcp","label":"","count":4},{"port":17185,"proto":"tcp","label":"","count":3},{"port":8181,"proto":"tcp","label":"","count":2},{"port":2304,"proto":"tcp","label":"","count":2},{"port":1723,"proto":"tcp","label":"PPTP","count":2},{"port":2181,"proto":"tcp","label":"","count":2},{"port":6066,"proto":"tcp","label":"","count":2},{"port":162,"proto":"tcp","label":"SNMP","count":2},{"port":2375,"proto":"tcp","label":"Docker","count":2},{"port":8981,"proto":"tcp","label":"","count":2},{"port":5632,"proto":"tcp","label":"","count":2},{"port":55554,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-04-11","count":2},{"date":"2026-04-13","count":2},{"date":"2026-04-18","count":2},{"date":"2026-04-20","count":4},{"date":"2026-04-23","count":2},{"date":"2026-05-03","count":3},{"date":"2026-05-04","count":1},{"date":"2026-05-06","count":1},{"date":"2026-05-07","count":1},{"date":"2026-05-09","count":1},{"date":"2026-05-10","count":1},{"date":"2026-05-12","count":1},{"date":"2026-05-13","count":1},{"date":"2026-05-20","count":1},{"date":"2026-05-23","count":1},{"date":"2026-05-24","count":1},{"date":"2026-05-27","count":1},{"date":"2026-05-29","count":1},{"date":"2026-05-30","count":1},{"date":"2026-06-07","count":1},{"date":"2026-06-11","count":1},{"date":"2026-06-19","count":1},{"date":"2026-06-24","count":1},{"date":"2026-06-30","count":1},{"date":"2026-07-03","count":1},{"date":"2026-07-04","count":1},{"date":"2026-07-09","count":1}],"recent_events":[{"timestamp":"2026-07-09T00:39:40","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_6379\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f363337390a","method":"","user_agent":"","community_id":"1:vWSQDQQUOnal6zWmgbx9lw/RHrQ=","ja3":"","session":"8118307a-da37-48d3-9ab5-6b677a60d7d9","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":5,"enriched":{"digest":"c527d5681f7b683c","strings":["MGLNDD_<HONEYPOT>_6379"]}},{"timestamp":"2026-07-04T03:33:50","port":8333,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8333\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383333330a","method":"","user_agent":"","community_id":"1:ickmYR/z4otNwRo42t/Z1BcjYzI=","ja3":"","session":"da847f89-c043-4faf-920b-d6e9570d5c3d","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":15,"enriched":{"digest":"0c8f3d85c9b5f804","strings":["MGLNDD_<HONEYPOT>_8333"]}},{"timestamp":"2026-07-03T09:36:51","port":15001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_15001\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f31353030310a","method":"","user_agent":"","community_id":"1:SLMzQPYzd5FDl+grIqILyyWdOlg=","ja3":"","session":"d6feb000-3d39-4895-ae0b-3eb6cd5efbfd","seq":1,"duration_ms":101,"bytes_in":26,"bytes_out":15,"enriched":{"digest":"7ebbbbbbb1a3d25f","strings":["MGLNDD_<HONEYPOT>_15001"]}},{"timestamp":"2026-06-30T13:56:06","port":8080,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8080\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383038300a","method":"","user_agent":"","community_id":"1:mi1O5q8hm8dSlvqDsBjvgvlN5EU=","ja3":"","session":"d07d3b7c-028c-4955-90b6-0de7e5c06dac","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":15,"enriched":{"digest":"771a62c3980bb829","strings":["MGLNDD_<HONEYPOT>_8080"]}},{"timestamp":"2026-06-24T19:43:15","port":1900,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1900\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313930300a","method":"","user_agent":"","community_id":"1:5oS0dn7ct0BVeZlsU8MIMsVknxE=","ja3":"","session":"7622cce1-80ff-46d1-9a7a-c8f1b9382a70","seq":1,"duration_ms":101,"bytes_in":25,"bytes_out":15,"enriched":{"digest":"b881120cd57c4aad","strings":["MGLNDD_<HONEYPOT>_1900"]}},{"timestamp":"2026-06-19T05:38:40","port":771,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_771\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3737310a","method":"","user_agent":"","community_id":"1:V5n7Pebyh5LbmbMGMoAt8NPRLfI=","ja3":"","session":"66999784-6055-47bb-b2d0-97be590f0687","seq":1,"duration_ms":100,"bytes_in":24,"bytes_out":15,"enriched":{"digest":"02612c44125dd412","strings":["MGLNDD_<HONEYPOT>_771"]}},{"timestamp":"2026-06-11T15:59:12","port":8091,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8091\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383039310a","method":"","user_agent":"","community_id":"1:SnEEsBWb3ozmuRnGDDkGo4BmRGY=","ja3":"","session":"0b59948c-962e-4c0f-8165-a28e110bb93c","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":15,"enriched":{"digest":"6ddd0549b0ac091a","strings":["MGLNDD_<HONEYPOT>_8091"]}},{"timestamp":"2026-06-07T05:03:53","port":27018,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_27018\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f32373031380a","method":"","user_agent":"","community_id":"1:DPIFwsz5x+asr5rx0sKbJ+32AWQ=","ja3":"","session":"6564f4f5-3d51-4ca5-ac34-78084a1ab860","seq":1,"duration_ms":100,"bytes_in":28,"bytes_out":15,"enriched":{"digest":"cd0ef6ab115b9376","strings":["MGLNDD_<HONEYPOT>_27018"]}},{"timestamp":"2026-05-30T03:57:31","port":5351,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5351\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353335310a","method":"","user_agent":"","community_id":"1:Go7VukQ1pEq+Z0tuhRrB2bb3q5E=","ja3":"","session":"a38474bb-8d96-4a44-ae67-0d19c7e93555","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"e158939d534ced87","strings":["MGLNDD_<HONEYPOT>_5351"]}},{"timestamp":"2026-05-29T13:37:13","port":9990,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_9990\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f393939300a","method":"","user_agent":"","community_id":"1:hf01dJTNfYDLG0bcbO3jgUfR970=","ja3":"","session":"100e9004-e9a4-41c2-bd7c-f79037b1e4f2","seq":0,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"9d0f9a64e3b3ca3f","strings":["MGLNDD_<HONEYPOT>_9990"]}}],"http_methods":[],"distinct_ports_total":41,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-09T09:11:28.021055+00:00"}