Also curious if it was legit, misconfigured, or attack traffic.