{"ip":"20.51.195.80","total_events":8,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["8 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"207 bytes sent","bytes_sent":207,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-17T01:59:35","last_seen":"2026-10-04T14:39:07","events_24h":0,"events_7d":6,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Dulles","lat":39.0367,"lon":-77.4209,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":80,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T19:06:54","last_seen":"2026-10-05T19:06:54","recent":[{"timestamp":"2026-10-05T19:06:54","port":80,"src_port":53189,"proto":"udp","app_proto":"","app_protocol":"","summary":"MGLNDD_<HONEYPOT>_80\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f38300a","sni":"","session":"74e3c34b-fe4f-448a-bda3-1b64601f9e5e","bytes_in":24,"source_verified":false,"enriched":{"digest":"0296647ad3680a85","strings":["MGLNDD_<HONEYPOT>_80"]}}]},"top_ports":[{"port":27019,"proto":"tcp","label":"","count":1},{"port":8104,"proto":"tcp","label":"","count":1},{"port":161,"proto":"tcp","label":"SNMP","count":1},{"port":137,"proto":"tcp","label":"NetBIOS","count":1},{"port":18245,"proto":"tcp","label":"","count":1},{"port":5181,"proto":"tcp","label":"","count":1},{"port":8998,"proto":"tcp","label":"","count":1},{"port":1900,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-17","count":1},{"date":"2026-09-19","count":1},{"date":"2026-10-01","count":2},{"date":"2026-10-02","count":2},{"date":"2026-10-03","count":1},{"date":"2026-10-04","count":1}],"recent_events":[{"timestamp":"2026-10-04T14:39:07","port":161,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_161\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3136310a","method":"","user_agent":"","ja3":"","session":"ffe25845-8632-458b-93ed-f6b9651f6313","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":12,"enriched":{"digest":"70f4c7cf4e0b75fb","strings":["MGLNDD_<HONEYPOT>_161"]}},{"timestamp":"2026-10-03T15:36:17","port":1900,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1900\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313930300a","method":"","user_agent":"","ja3":"","session":"4d7a756e-68c3-4a86-87e9-d4ac5d555415","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":12,"enriched":{"digest":"b881120cd57c4aad","strings":["MGLNDD_<HONEYPOT>_1900"]}},{"timestamp":"2026-10-02T15:44:23","port":5181,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5181\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353138310a","method":"","user_agent":"","ja3":"","session":"394112c0-7281-4e5b-b1f2-c13891d95ea9","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":12,"enriched":{"digest":"a3e66ac6e1744520","strings":["MGLNDD_<HONEYPOT>_5181"]}},{"timestamp":"2026-10-02T03:02:37","port":27019,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_27019\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f32373031390a","method":"","user_agent":"","ja3":"","session":"231ea5ea-d42d-4576-8bdc-2a4997d50796","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"d4405cb98c3c5e56","strings":["MGLNDD_<HONEYPOT>_27019"]}},{"timestamp":"2026-10-01T18:17:56","port":137,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_137\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3133370a","method":"","user_agent":"","ja3":"","session":"06ef5cf3-020f-4d0b-b450-018d7101b287","seq":1,"duration_ms":101,"bytes_in":25,"bytes_out":12,"enriched":{"digest":"67c6c25f21993d93","strings":["MGLNDD_<HONEYPOT>_137"]}},{"timestamp":"2026-10-01T13:18:44","port":8104,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8104\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383130340a","method":"","user_agent":"","ja3":"","session":"b16818f7-0a49-43f4-a74a-c552980d615c","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":12,"enriched":{"digest":"e5e02ad15460eb52","strings":["MGLNDD_<HONEYPOT>_8104"]}},{"timestamp":"2026-09-19T15:44:43","port":18245,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_18245\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f31383234350a","method":"","user_agent":"","ja3":"","session":"064cf759-565a-4021-949a-abcf7ddb6454","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":12,"enriched":{"digest":"3f43707931f767b4","strings":["MGLNDD_<HONEYPOT>_18245"]}},{"timestamp":"2026-09-17T01:59:35","port":8998,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8998\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383939380a","method":"","user_agent":"","ja3":"","session":"0c33d063-fab7-4fa3-8ce8-1dcb505e83f5","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":12,"enriched":{"digest":"0f9a0d1ad2a6b0e9","strings":["MGLNDD_<HONEYPOT>_8998"]}}],"http_methods":[],"distinct_ports_total":8,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T23:10:47.788170+00:00"}