{"ip":"48.217.83.108","total_events":7,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["7 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"178 bytes sent","bytes_sent":178,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-15T20:56:01","last_seen":"2026-09-24T10:57:12","events_24h":1,"events_7d":4,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Dulles","lat":39.0367,"lon":-77.4209,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"top_ports":[{"port":8040,"proto":"tcp","label":"","count":1},{"port":8104,"proto":"tcp","label":"","count":1},{"port":5093,"proto":"tcp","label":"","count":1},{"port":500,"proto":"tcp","label":"","count":1},{"port":1414,"proto":"tcp","label":"","count":1},{"port":18246,"proto":"tcp","label":"","count":1},{"port":5632,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-15","count":1},{"date":"2026-09-17","count":2},{"date":"2026-09-19","count":1},{"date":"2026-09-22","count":2},{"date":"2026-09-24","count":1}],"recent_events":[{"timestamp":"2026-09-24T10:57:12","port":1414,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1414\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313431340a","method":"","user_agent":"","ja3":"","session":"908316e9-3c9e-42a3-aad1-fb98d5d05966","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"be2331fdf69dff81","strings":["MGLNDD_<HONEYPOT>_1414"]}},{"timestamp":"2026-09-22T21:36:36","port":5093,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5093\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353039330a","method":"","user_agent":"","ja3":"","session":"a6b69770-503e-4665-a75f-c0960a1730b9","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"986eaa946b6ab9c1","strings":["MGLNDD_<HONEYPOT>_5093"]}},{"timestamp":"2026-09-22T06:38:38","port":5632,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5632\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353633320a","method":"","user_agent":"","ja3":"","session":"d9a98eee-9441-49af-8a64-d2fe016df586","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"1afa0e8fa5e9175c","strings":["MGLNDD_<HONEYPOT>_5632"]}},{"timestamp":"2026-09-19T10:16:20","port":8104,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8104\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383130340a","method":"","user_agent":"","ja3":"","session":"9435c75c-7ce2-4653-a9d2-903f683fc8dc","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"e5e02ad15460eb52","strings":["MGLNDD_<HONEYPOT>_8104"]}},{"timestamp":"2026-09-17T13:48:47","port":18246,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_18246\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f31383234360a","method":"","user_agent":"","ja3":"","session":"6125f0ce-1a3d-4783-b6eb-bb950a92a185","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"9698109cd89a1b97","strings":["MGLNDD_<HONEYPOT>_18246"]}},{"timestamp":"2026-09-17T10:02:11","port":8040,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8040\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383034300a","method":"","user_agent":"","ja3":"","session":"09ccaf06-6417-469e-92cb-79dd1089c193","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"5b54819c2aed193d","strings":["MGLNDD_<HONEYPOT>_8040"]}},{"timestamp":"2026-09-15T20:56:01","port":500,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_500\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3530300a","method":"","user_agent":"","ja3":"","session":"0899040c-6d6b-4530-a547-e9325df21e31","seq":1,"duration_ms":100,"bytes_in":24,"bytes_out":13,"enriched":{"digest":"eda2aa2d340b3204","strings":["MGLNDD_<HONEYPOT>_500"]}}],"http_methods":[],"distinct_ports_total":7,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-24T17:23:42.611488+00:00"}