{"ip":"20.55.92.10","total_events":6,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["6 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"159 bytes sent","bytes_sent":159,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-18T11:35:42","last_seen":"2026-09-29T13:56:18","events_24h":0,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Dulles","lat":39.0367,"lon":-77.4209,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":8009,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T17:03:11","last_seen":"2026-10-05T17:03:11","recent":[{"timestamp":"2026-10-05T17:03:11","port":8009,"src_port":54836,"proto":"udp","app_proto":"","app_protocol":"","summary":"MGLNDD_<HONEYPOT>_8009\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383030390a","sni":"","session":"b1df1843-5a49-4cd5-8163-e3489537b380","bytes_in":26,"source_verified":false,"enriched":{"digest":"ef2490a9ba5284a0","strings":["MGLNDD_<HONEYPOT>_8009"]}}]},"top_ports":[{"port":8086,"proto":"tcp","label":"InfluxDB","count":1},{"port":8945,"proto":"tcp","label":"","count":1},{"port":1194,"proto":"tcp","label":"OpenVPN","count":1},{"port":18245,"proto":"tcp","label":"","count":1},{"port":8008,"proto":"tcp","label":"HTTP-alt","count":1},{"port":8889,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-18","count":1},{"date":"2026-09-22","count":1},{"date":"2026-09-24","count":1},{"date":"2026-09-25","count":1},{"date":"2026-09-28","count":1},{"date":"2026-09-29","count":1}],"recent_events":[{"timestamp":"2026-09-29T13:56:18","port":8008,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8008\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383030380a","method":"","user_agent":"","ja3":"","session":"8d35c51a-3c94-48bd-8121-4e71c8e2a6a4","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":11,"enriched":{"digest":"c7734b2476b6d92a","strings":["MGLNDD_<HONEYPOT>_8008"]}},{"timestamp":"2026-09-28T21:02:12","port":8889,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8889\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383838390a","method":"","user_agent":"","ja3":"","session":"1e7922a2-9edd-48d6-b985-8fe3f42b26c4","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":11,"enriched":{"digest":"de850e283b820234","strings":["MGLNDD_<HONEYPOT>_8889"]}},{"timestamp":"2026-09-25T18:27:40","port":8945,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8945\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383934350a","method":"","user_agent":"","ja3":"","session":"69ecf998-4b89-488d-85c5-2afaa24b6560","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":11,"enriched":{"digest":"6849680bc8d35e8a","strings":["MGLNDD_<HONEYPOT>_8945"]}},{"timestamp":"2026-09-24T20:01:17","port":8086,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8086\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383038360a","method":"","user_agent":"","ja3":"","session":"368d0d8d-ecf3-4d51-acb5-94015d9a46ae","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":11,"enriched":{"digest":"d593dd6d23410c6f","strings":["MGLNDD_<HONEYPOT>_8086"]}},{"timestamp":"2026-09-22T07:10:49","port":18245,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_18245\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f31383234350a","method":"","user_agent":"","ja3":"","session":"a927a0e7-1297-4b15-ae4f-1dba7af29e7b","seq":1,"duration_ms":100,"bytes_in":28,"bytes_out":11,"enriched":{"digest":"3f43707931f767b4","strings":["MGLNDD_<HONEYPOT>_18245"]}},{"timestamp":"2026-09-18T11:35:42","port":1194,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1194\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313139340a","method":"","user_agent":"","ja3":"","session":"f90f0033-48ad-4858-8a32-f3658920ff01","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":11,"enriched":{"digest":"0b7bb21eee00c809","strings":["MGLNDD_<HONEYPOT>_1194"]}}],"http_methods":[],"distinct_ports_total":6,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T20:49:21.588883+00:00"}