{"ip":"20.106.172.169","total_events":10,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["10 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"248 bytes sent","bytes_sent":248,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-15T20:16:23","last_seen":"2026-10-01T04:44:22","events_24h":0,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Dulles","lat":39.0367,"lon":-77.4209,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":8181,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T14:56:03","last_seen":"2026-10-05T14:56:03","recent":[{"timestamp":"2026-10-05T14:56:03","port":8181,"src_port":41262,"proto":"udp","app_proto":"","app_protocol":"","summary":"MGLNDD_<HONEYPOT>_8181\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383138310a","sni":"","session":"22d3df08-8e1e-45c1-ba28-da00612b3a47","bytes_in":26,"source_verified":false,"enriched":{"digest":"2f59c79da2fc8a42","strings":["MGLNDD_<HONEYPOT>_8181"]}}]},"top_ports":[{"port":25,"proto":"tcp","label":"SMTP","count":2},{"port":8040,"proto":"tcp","label":"","count":1},{"port":161,"proto":"tcp","label":"SNMP","count":1},{"port":80,"proto":"tcp","label":"HTTP","count":1},{"port":8008,"proto":"tcp","label":"HTTP-alt","count":1},{"port":8181,"proto":"tcp","label":"","count":1},{"port":2362,"proto":"tcp","label":"","count":1},{"port":15001,"proto":"tcp","label":"","count":1},{"port":6379,"proto":"tcp","label":"Redis","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-15","count":1},{"date":"2026-09-17","count":1},{"date":"2026-09-19","count":2},{"date":"2026-09-20","count":2},{"date":"2026-09-25","count":1},{"date":"2026-09-27","count":1},{"date":"2026-09-30","count":1},{"date":"2026-10-01","count":1}],"recent_events":[{"timestamp":"2026-10-01T04:44:22","port":15001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_15001\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f31353030310a","method":"","user_agent":"","ja3":"","session":"7cef3bed-ff73-4d6a-a06e-dfeac807e25c","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":14,"enriched":{"digest":"7ebbbbbbb1a3d25f","strings":["MGLNDD_<HONEYPOT>_15001"]}},{"timestamp":"2026-09-30T11:00:22","port":8181,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8181\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383138310a","method":"","user_agent":"","ja3":"","session":"25da20ba-34d8-4605-b333-7e4eaa033037","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":14,"enriched":{"digest":"2f59c79da2fc8a42","strings":["MGLNDD_<HONEYPOT>_8181"]}},{"timestamp":"2026-09-27T15:02:51","port":25,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_25\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f32350a","method":"","user_agent":"","ja3":"","session":"e7c309b2-242d-4b1a-b80e-15e66ecb4de5","seq":1,"duration_ms":90,"bytes_in":24,"bytes_out":40,"enriched":{"digest":"61b0e94a79290fe6","strings":["MGLNDD_<HONEYPOT>_25"]}},{"timestamp":"2026-09-25T00:38:27","port":25,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_25\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f32350a","method":"","user_agent":"","ja3":"","session":"01dbc1fe-65e0-4e33-9a64-3dd1258678ee","seq":1,"duration_ms":27,"bytes_in":23,"bytes_out":40,"enriched":{"digest":"61b0e94a79290fe6","strings":["MGLNDD_<HONEYPOT>_25"]}},{"timestamp":"2026-09-20T23:46:25","port":8040,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8040\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383034300a","method":"","user_agent":"","ja3":"","session":"1cff9916-4c42-4b93-a568-97daef3162f3","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":14,"enriched":{"digest":"5b54819c2aed193d","strings":["MGLNDD_<HONEYPOT>_8040"]}},{"timestamp":"2026-09-20T05:24:25","port":80,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_80\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f38300a","method":"","user_agent":"","ja3":"","session":"16308204-e426-493a-827e-f3bbde04e4b2","seq":1,"duration_ms":100,"bytes_in":23,"bytes_out":14,"enriched":{"digest":"0296647ad3680a85","strings":["MGLNDD_<HONEYPOT>_80"]}},{"timestamp":"2026-09-19T11:53:11","port":6379,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_6379\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f363337390a","method":"","user_agent":"","ja3":"","session":"bd32394b-f8c6-41df-b7b3-92d9f2c1c154","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":5,"enriched":{"digest":"c527d5681f7b683c","strings":["MGLNDD_<HONEYPOT>_6379"]}},{"timestamp":"2026-09-19T09:45:45","port":161,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_161\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3136310a","method":"","user_agent":"","ja3":"","session":"a75b18fb-69ab-4723-a47e-7279d2b27829","seq":1,"duration_ms":100,"bytes_in":24,"bytes_out":14,"enriched":{"digest":"70f4c7cf4e0b75fb","strings":["MGLNDD_<HONEYPOT>_161"]}},{"timestamp":"2026-09-17T08:23:20","port":8008,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8008\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383030380a","method":"","user_agent":"","ja3":"","session":"dbcc197f-2e5b-45fb-b2c0-eb2f0fc0f477","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":14,"enriched":{"digest":"c7734b2476b6d92a","strings":["MGLNDD_<HONEYPOT>_8008"]}},{"timestamp":"2026-09-15T20:16:23","port":2362,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_2362\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f323336320a","method":"","user_agent":"","ja3":"","session":"3fcdf36d-2a62-4a90-847d-7ccbfc5b8489","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":14,"enriched":{"digest":"f7431096076cbeeb","strings":["MGLNDD_<HONEYPOT>_2362"]}}],"http_methods":[],"distinct_ports_total":9,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T23:56:12.615588+00:00"}