{"ip":"48.216.209.252","total_events":9,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["9 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"237 bytes sent","bytes_sent":237,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-17T13:03:59","last_seen":"2026-10-01T18:50:20","events_24h":0,"events_7d":3,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Dulles","lat":39.0367,"lon":-77.4209,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":47808,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T18:43:15","last_seen":"2026-10-05T18:43:15","recent":[{"timestamp":"2026-10-05T18:43:15","port":47808,"src_port":53872,"proto":"udp","app_proto":"","app_protocol":"","summary":"MGLNDD_<HONEYPOT>_47808\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f34373830380a","sni":"","session":"bef9901a-af6d-4283-8cca-614914cae4a3","bytes_in":27,"source_verified":false,"enriched":{"digest":"80cc8e21fd37eeff","strings":["MGLNDD_<HONEYPOT>_47808"]}}]},"top_ports":[{"port":2362,"proto":"tcp","label":"","count":2},{"port":5353,"proto":"tcp","label":"","count":1},{"port":5061,"proto":"tcp","label":"SIPS","count":1},{"port":5181,"proto":"tcp","label":"","count":1},{"port":8008,"proto":"tcp","label":"HTTP-alt","count":1},{"port":18246,"proto":"tcp","label":"","count":1},{"port":8983,"proto":"tcp","label":"Solr","count":1},{"port":15001,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-17","count":1},{"date":"2026-09-19","count":1},{"date":"2026-09-22","count":1},{"date":"2026-09-24","count":1},{"date":"2026-09-26","count":2},{"date":"2026-09-29","count":2},{"date":"2026-10-01","count":1}],"recent_events":[{"timestamp":"2026-10-01T18:50:20","port":5181,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5181\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353138310a","method":"","user_agent":"","ja3":"","session":"5f3f3ab1-165d-493b-b60e-1ddfe781efa1","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":14,"enriched":{"digest":"a3e66ac6e1744520","strings":["MGLNDD_<HONEYPOT>_5181"]}},{"timestamp":"2026-09-29T17:12:12","port":8983,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8983\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383938330a","method":"","user_agent":"","ja3":"","session":"d3f60ecd-3bf6-41d1-be42-51459657f191","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":14,"enriched":{"digest":"a3295f60b8374e52","strings":["MGLNDD_<HONEYPOT>_8983"]}},{"timestamp":"2026-09-29T12:37:06","port":5353,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5353\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353335330a","method":"","user_agent":"","ja3":"","session":"4678fcdc-62db-4106-9c17-dfbf0d2fd329","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":14,"enriched":{"digest":"a0612689837e5cde","strings":["MGLNDD_<HONEYPOT>_5353"]}},{"timestamp":"2026-09-26T20:23:21","port":5061,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5061\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353036310a","method":"","user_agent":"","ja3":"","session":"bc0c9744-7c87-41c5-9f93-1bb336d9abc5","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":14,"enriched":{"digest":"2eb0e2ff18ccaaae","strings":["MGLNDD_<HONEYPOT>_5061"]}},{"timestamp":"2026-09-26T01:34:12","port":8008,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8008\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383030380a","method":"","user_agent":"","ja3":"","session":"bc45dfe0-2ede-43ca-a043-3717eb09f1a4","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":14,"enriched":{"digest":"c7734b2476b6d92a","strings":["MGLNDD_<HONEYPOT>_8008"]}},{"timestamp":"2026-09-24T21:34:51","port":18246,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_18246\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f31383234360a","method":"","user_agent":"","ja3":"","session":"0b472fb4-38ba-480f-835b-051f7a22ed43","seq":1,"duration_ms":100,"bytes_in":28,"bytes_out":14,"enriched":{"digest":"9698109cd89a1b97","strings":["MGLNDD_<HONEYPOT>_18246"]}},{"timestamp":"2026-09-22T09:05:43","port":2362,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_2362\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f323336320a","method":"","user_agent":"","ja3":"","session":"46a5d411-d5ce-4914-9a7e-652169cd3e5c","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":14,"enriched":{"digest":"f7431096076cbeeb","strings":["MGLNDD_<HONEYPOT>_2362"]}},{"timestamp":"2026-09-19T20:19:35","port":15001,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_15001\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f31353030310a","method":"","user_agent":"","ja3":"","session":"cb888d3e-508e-419f-aea6-25e56c250c3a","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":14,"enriched":{"digest":"7ebbbbbbb1a3d25f","strings":["MGLNDD_<HONEYPOT>_15001"]}},{"timestamp":"2026-09-17T13:03:59","port":2362,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_2362\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f323336320a","method":"","user_agent":"","ja3":"","session":"cdaef726-542d-40d9-9b05-ad39fca29534","seq":1,"duration_ms":101,"bytes_in":26,"bytes_out":14,"enriched":{"digest":"f7431096076cbeeb","strings":["MGLNDD_<HONEYPOT>_2362"]}}],"http_methods":[],"distinct_ports_total":8,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T23:55:54.126442+00:00"}