{"ip":"20.55.39.89","total_events":13,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["13 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"332 bytes sent","bytes_sent":332,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-16T23:47:24","last_seen":"2026-10-02T20:11:09","events_24h":0,"events_7d":5,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Dulles","lat":39.0367,"lon":-77.4209,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":9060,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T16:25:30","last_seen":"2026-10-05T16:25:30","recent":[{"timestamp":"2026-10-05T16:25:30","port":9060,"src_port":53180,"proto":"udp","app_proto":"","app_protocol":"","summary":"MGLNDD_<HONEYPOT>_9060\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f393036300a","sni":"","session":"3f657f51-ed42-449e-b988-dbca67299b29","bytes_in":25,"source_verified":false,"enriched":{"digest":"a132d6101589eb56","strings":["MGLNDD_<HONEYPOT>_9060"]}}]},"top_ports":[{"port":5353,"proto":"tcp","label":"","count":3},{"port":2181,"proto":"tcp","label":"","count":2},{"port":8088,"proto":"tcp","label":"Hadoop","count":2},{"port":25,"proto":"tcp","label":"SMTP","count":1},{"port":1433,"proto":"tcp","label":"MSSQL","count":1},{"port":8040,"proto":"tcp","label":"","count":1},{"port":123,"proto":"tcp","label":"NTP","count":1},{"port":771,"proto":"tcp","label":"","count":1},{"port":11211,"proto":"tcp","label":"Memcached","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-16","count":1},{"date":"2026-09-17","count":1},{"date":"2026-09-19","count":1},{"date":"2026-09-21","count":1},{"date":"2026-09-23","count":1},{"date":"2026-09-25","count":2},{"date":"2026-09-28","count":1},{"date":"2026-09-29","count":1},{"date":"2026-09-30","count":1},{"date":"2026-10-01","count":1},{"date":"2026-10-02","count":2}],"recent_events":[{"timestamp":"2026-10-02T20:11:09","port":11211,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_11211\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f31313231310a","method":"","user_agent":"","ja3":"","session":"d98bcb28-9c38-45ff-9d96-f7d12fac2e99","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":11,"enriched":{"digest":"c7d4106ac182a482","strings":["MGLNDD_<HONEYPOT>_11211"]}},{"timestamp":"2026-10-02T03:22:47","port":5353,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5353\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353335330a","method":"","user_agent":"","ja3":"","session":"6930451e-810d-41af-b63d-3df942e07948","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":11,"enriched":{"digest":"a0612689837e5cde","strings":["MGLNDD_<HONEYPOT>_5353"]}},{"timestamp":"2026-10-01T22:21:40","port":8088,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8088\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383038380a","method":"","user_agent":"","ja3":"","session":"020ff244-fa36-4518-9928-93c50b376b66","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":11,"enriched":{"digest":"9abc0a23256b9fe9","strings":["MGLNDD_<HONEYPOT>_8088"]}},{"timestamp":"2026-09-30T23:24:32","port":771,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_771\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3737310a","method":"","user_agent":"","ja3":"","session":"771d5f5e-74a4-4102-ab67-d4d127a151e5","seq":1,"duration_ms":100,"bytes_in":24,"bytes_out":11,"enriched":{"digest":"02612c44125dd412","strings":["MGLNDD_<HONEYPOT>_771"]}},{"timestamp":"2026-09-29T17:16:24","port":2181,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_2181\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f323138310a","method":"","user_agent":"","ja3":"","session":"7f258a5e-5af5-48e1-963a-c0a415b1c018","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":11,"enriched":{"digest":"a40f382094844108","strings":["MGLNDD_<HONEYPOT>_2181"]}},{"timestamp":"2026-09-28T03:05:43","port":123,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_123\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3132330a","method":"","user_agent":"","ja3":"","session":"b3b53eca-bfef-4e5b-8810-de4ef118b82c","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":11,"enriched":{"digest":"b405ee720dc0ae95","strings":["MGLNDD_<HONEYPOT>_123"]}},{"timestamp":"2026-09-25T19:24:55","port":8088,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8088\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383038380a","method":"","user_agent":"","ja3":"","session":"5f555526-12e4-4d6b-859b-1bbbbdb16b34","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":11,"enriched":{"digest":"9abc0a23256b9fe9","strings":["MGLNDD_<HONEYPOT>_8088"]}},{"timestamp":"2026-09-25T08:59:10","port":8040,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8040\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383034300a","method":"","user_agent":"","ja3":"","session":"93b4e9a0-81ca-46cc-ac12-310ee3c694cb","seq":1,"duration_ms":101,"bytes_in":26,"bytes_out":11,"enriched":{"digest":"5b54819c2aed193d","strings":["MGLNDD_<HONEYPOT>_8040"]}},{"timestamp":"2026-09-23T06:29:32","port":25,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_25\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f32350a","method":"","user_agent":"","ja3":"","session":"b306f504-759b-4272-8870-cd99fafb2a93","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":40,"enriched":{"digest":"61b0e94a79290fe6","strings":["MGLNDD_<HONEYPOT>_25"]}},{"timestamp":"2026-09-21T12:35:10","port":1433,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1433\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313433330a","method":"","user_agent":"","ja3":"","session":"88e9b14e-b552-4869-ab4f-b73c7b9113fe","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":11,"enriched":{"digest":"1cd1e6467fdbf487","strings":["MGLNDD_<HONEYPOT>_1433"]}}],"http_methods":[],"distinct_ports_total":9,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:18:12.737334+00:00"}