{"ip":"48.217.83.204","total_events":8,"verdict":{"verdict":"probing","label":"Low-level probing","detail":null,"confidence":"low","network_type":"CDN","why":["8 event(s), fewer than 10 distinct ports, no exploit payloads.","Not in any known-scanner range."],"engagement":{"level":"request","label":"Request traffic","detail":"206 bytes sent","bytes_sent":206,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-21T11:48:43","last_seen":"2026-10-05T09:36:00","events_24h":1,"events_7d":3,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Dulles","lat":39.0367,"lon":-77.4209,"asn":8075,"org":"Microsoft Corporation"},"source_domain":null,"known_scanners":[],"scanner_tag":{"key":"peeringdb:as8075","label":"Microsoft","category":"cdn","url":"https://www.peeringdb.com/asn/8075"},"cve_matches":[],"malware":[],"udp":{"source_verified":false,"window_days":90,"events":1,"protocols":[{"protocol":"udp","events":1}],"ports":[{"port":161,"events":1}],"dns_questions":[],"quic_clients":[],"first_seen":"2026-10-05T17:34:58","last_seen":"2026-10-05T17:34:58","recent":[{"timestamp":"2026-10-05T17:34:58","port":161,"src_port":47253,"proto":"udp","app_proto":"","app_protocol":"","summary":"MGLNDD_<HONEYPOT>_161\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f3136310a","sni":"","session":"94c7ae4e-b4c9-42db-b7c1-ccb0f5dd9258","bytes_in":25,"source_verified":false,"enriched":{"digest":"70f4c7cf4e0b75fb","strings":["MGLNDD_<HONEYPOT>_161"]}}]},"top_ports":[{"port":5093,"proto":"tcp","label":"","count":2},{"port":25,"proto":"tcp","label":"SMTP","count":1},{"port":8008,"proto":"tcp","label":"HTTP-alt","count":1},{"port":2181,"proto":"tcp","label":"","count":1},{"port":9999,"proto":"tcp","label":"","count":1},{"port":1900,"proto":"tcp","label":"","count":1},{"port":9529,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_client_hello":"","tls_ja3":[],"http_akin":[]},"fingerprint_peers":{},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-09-21","count":2},{"date":"2026-09-22","count":1},{"date":"2026-09-25","count":1},{"date":"2026-09-26","count":1},{"date":"2026-10-02","count":1},{"date":"2026-10-04","count":1},{"date":"2026-10-05","count":1}],"recent_events":[{"timestamp":"2026-10-05T09:36:00","port":1900,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_1900\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f313930300a","method":"","user_agent":"","ja3":"","session":"9ac615cb-a5e1-4ec7-8ec6-308f43cc235d","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":13,"enriched":{"digest":"b881120cd57c4aad","strings":["MGLNDD_<HONEYPOT>_1900"]}},{"timestamp":"2026-10-04T03:43:36","port":5093,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5093\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353039330a","method":"","user_agent":"","ja3":"","session":"58c7b967-8a28-4ffb-ae1e-7ea6e2af4c45","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"986eaa946b6ab9c1","strings":["MGLNDD_<HONEYPOT>_5093"]}},{"timestamp":"2026-10-02T04:36:57","port":8008,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_8008\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f383030380a","method":"","user_agent":"","ja3":"","session":"5a7690e6-6105-42ed-9707-96d68d439be4","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"c7734b2476b6d92a","strings":["MGLNDD_<HONEYPOT>_8008"]}},{"timestamp":"2026-09-26T06:27:17","port":5093,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_5093\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f353039330a","method":"","user_agent":"","ja3":"","session":"144ae3eb-e35b-41e4-bd7c-523fb15afa1f","seq":1,"duration_ms":100,"bytes_in":26,"bytes_out":13,"enriched":{"digest":"986eaa946b6ab9c1","strings":["MGLNDD_<HONEYPOT>_5093"]}},{"timestamp":"2026-09-25T07:52:13","port":9999,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_9999\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f393939390a","method":"","user_agent":"","ja3":"","session":"30689b2e-5503-436c-8a41-f1e4ddbaf9ec","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":13,"enriched":{"digest":"d4bd826f7438193d","strings":["MGLNDD_<HONEYPOT>_9999"]}},{"timestamp":"2026-09-22T01:30:38","port":9529,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_9529\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f393532390a","method":"","user_agent":"","ja3":"","session":"aab6e0e8-26d5-4236-b808-1f6d57bcabfb","seq":1,"duration_ms":100,"bytes_in":27,"bytes_out":13,"enriched":{"digest":"b4354cbb0f562919","strings":["MGLNDD_<HONEYPOT>_9529"]}},{"timestamp":"2026-09-21T22:22:53","port":2181,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_2181\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f323138310a","method":"","user_agent":"","ja3":"","session":"0ed79b12-42d8-48b1-a5c9-d570d99791a9","seq":1,"duration_ms":100,"bytes_in":25,"bytes_out":13,"enriched":{"digest":"a40f382094844108","strings":["MGLNDD_<HONEYPOT>_2181"]}},{"timestamp":"2026-09-21T11:48:43","port":25,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"MGLNDD_<HONEYPOT>_25\n","payload_hex":"4d474c4e44445f<HONEYPOT>5f32350a","method":"","user_agent":"","ja3":"","session":"bd881105-b8a8-40f3-a0c1-3e6ab46b74fe","seq":1,"duration_ms":54,"bytes_in":23,"bytes_out":40,"enriched":{"digest":"61b0e94a79290fe6","strings":["MGLNDD_<HONEYPOT>_25"]}}],"http_methods":[],"distinct_ports_total":7,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-10-05T19:36:27.210162+00:00"}