Successful login from anonymous account

I have a small honeypot environment and been working on making new queries for threat hunting. During this process I came across a login successful for the anonymous account. What has baffled me a bit is that it came from a remote address, but wasn't an elevated entry. 

Does anyone have some tips and tricks to deep dive into this a little better or is this something you would typically ignore?