{"ip":"40.76.248.252","total_events":102,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"strechoid","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (strechoid).","Known research and commercial scanners are labelled as such, not as threats."]},"first_seen":"2026-02-20T05:38:11","last_seen":"2026-07-11T00:27:01","events_24h":0,"events_7d":7,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Washington","lat":38.7095,"lon":-78.1539,"asn":8075,"org":"Microsoft Corporation"},"source_domain":"azpdeg9jpzos.stretchoid.com","known_scanners":["strechoid","Stretchoid"],"scanner_tag":{"key":"stretchoid","label":"Stretchoid","category":"commercial","url":"https://stretchoid.com"},"cve_matches":[],"malware":[],"top_ports":[{"port":17990,"proto":"tcp","label":"","count":5},{"port":8983,"proto":"tcp","label":"Solr","count":4},{"port":9060,"proto":"tcp","label":"","count":4},{"port":4333,"proto":"tcp","label":"","count":4},{"port":4443,"proto":"tcp","label":"","count":4},{"port":8889,"proto":"tcp","label":"","count":3},{"port":2375,"proto":"tcp","label":"Docker","count":3},{"port":2362,"proto":"tcp","label":"","count":3},{"port":3790,"proto":"tcp","label":"","count":3},{"port":8222,"proto":"tcp","label":"","count":3},{"port":3391,"proto":"tcp","label":"","count":3},{"port":8091,"proto":"tcp","label":"","count":3},{"port":8980,"proto":"tcp","label":"","count":2},{"port":8088,"proto":"tcp","label":"Hadoop","count":2},{"port":8333,"proto":"tcp","label":"Bitcoin","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-04-14","count":2},{"date":"2026-04-16","count":2},{"date":"2026-04-18","count":2},{"date":"2026-04-21","count":2},{"date":"2026-04-24","count":2},{"date":"2026-05-03","count":2},{"date":"2026-05-08","count":1},{"date":"2026-05-09","count":1},{"date":"2026-05-10","count":2},{"date":"2026-05-11","count":1},{"date":"2026-05-15","count":2},{"date":"2026-05-18","count":1},{"date":"2026-05-19","count":1},{"date":"2026-05-23","count":1},{"date":"2026-05-25","count":1},{"date":"2026-05-27","count":1},{"date":"2026-05-28","count":4},{"date":"2026-05-30","count":1},{"date":"2026-06-03","count":1},{"date":"2026-06-04","count":2},{"date":"2026-06-06","count":1},{"date":"2026-06-07","count":1},{"date":"2026-06-12","count":1},{"date":"2026-06-14","count":2},{"date":"2026-06-20","count":1},{"date":"2026-06-22","count":1},{"date":"2026-06-25","count":1},{"date":"2026-06-27","count":2},{"date":"2026-06-28","count":1},{"date":"2026-06-29","count":1},{"date":"2026-06-30","count":2},{"date":"2026-07-01","count":1},{"date":"2026-07-02","count":1},{"date":"2026-07-03","count":1},{"date":"2026-07-06","count":4},{"date":"2026-07-07","count":1},{"date":"2026-07-09","count":1},{"date":"2026-07-11","count":1}],"recent_events":[{"timestamp":"2026-07-11T00:27:01","port":137,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_137\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3133370a","method":"","user_agent":"","community_id":"1:5LIB4ejBveFuJ7Wn3l3Zrp1GSXo=","ja3":"","session":"417618bd-1e6c-4050-96f0-a29cbc81ad78","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"67c6c25f21993d93","strings":["MGLNDD_<HONEYPOT>_137"]}},{"timestamp":"2026-07-09T01:06:03","port":8983,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8983\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383938330a","method":"","user_agent":"","community_id":"1:+Lvspbk8WpUfERuCT6Qvc0jKPiQ=","ja3":"","session":"f2a22f74-fe0f-4627-b72d-9ffc6aa4a363","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":13,"enriched":{"digest":"a3295f60b8374e52","strings":["MGLNDD_<HONEYPOT>_8983"]}},{"timestamp":"2026-07-07T11:11:28","port":8040,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8040\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383034300a","method":"","user_agent":"","community_id":"1:FnZJdsOMbp4ZGIYKEKy+U0dUC5Q=","ja3":"","session":"cecae9c1-6ecb-4e67-a703-d587df7a3b4a","seq":1,"duration_ms":101,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"5b54819c2aed193d","strings":["MGLNDD_<HONEYPOT>_8040"]}},{"timestamp":"2026-07-06T07:37:10","port":15001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_15001\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f31353030310a","method":"","user_agent":"","community_id":"1:x1iLVNZONg/zMd4sD84Ovs0fco0=","ja3":"","session":"86d81798-c91e-4a0a-9f11-5db79373876d","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"7ebbbbbbb1a3d25f","strings":["MGLNDD_<HONEYPOT>_15001"]}},{"timestamp":"2026-07-06T04:44:19","port":3790,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_3790\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f333739300a","method":"","user_agent":"","community_id":"1:TjuQzaeSEDk8A5FW/jVoUZg97Rk=","ja3":"","session":"0358ef35-0959-4a2c-9351-cb31875670ab","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"63555966e1b6b47f","strings":["MGLNDD_<HONEYPOT>_3790"]}},{"timestamp":"2026-07-06T03:48:02","port":2375,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_2375\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f323337350a","method":"","user_agent":"","community_id":"1:LK1AFiffCUeZuS6UpAh3fqpQKxY=","ja3":"","session":"c67ae9ab-b409-4c9f-b94d-b59f3ab82624","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"26b4401efba6dd21","strings":["MGLNDD_<HONEYPOT>_2375"]}},{"timestamp":"2026-07-06T02:24:54","port":3391,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_3391\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f333339310a","method":"","user_agent":"","community_id":"1:CvJm9iZQF51+ZDQm6Nc9GaWAl6Q=","ja3":"","session":"84d37bc0-e49b-4097-b680-2ce9a09f1a63","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"953a681d6807fcf2","strings":["MGLNDD_<HONEYPOT>_3391"]}},{"timestamp":"2026-07-03T12:22:35","port":8983,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8983\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383938330a","method":"","user_agent":"","community_id":"1:Eg0i7z3VlDoFtd1L0t/k7osNLQQ=","ja3":"","session":"d977a2fe-b8ab-403e-a531-4363b62816bc","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"a3295f60b8374e52","strings":["MGLNDD_<HONEYPOT>_8983"]}},{"timestamp":"2026-07-02T00:51:48","port":8983,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8983\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383938330a","method":"","user_agent":"","community_id":"1:XF24K2ckM6+GqVtcUXiMeof+UV8=","ja3":"","session":"b71faf9f-a47e-4f05-b97a-c3128df05d83","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"a3295f60b8374e52","strings":["MGLNDD_<HONEYPOT>_8983"]}},{"timestamp":"2026-07-01T06:32:03","port":1414,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1414\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313431340a","method":"","user_agent":"","community_id":"1:yzlTJhNDjzDlMSGR9iewukW7sG8=","ja3":"","session":"9e696c3c-1ba8-40b7-a5f5-71495a25745d","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"be2331fdf69dff81","strings":["MGLNDD_<HONEYPOT>_1414"]}}],"http_methods":[],"distinct_ports_total":51,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-12T04:14:47.454688+00:00"}