{"ip":"143.110.142.175","total_events":59,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"binaryedge","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (binaryedge).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"6,547 bytes sent","bytes_sent":6547,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-26T22:32:15","last_seen":"2026-09-16T01:51:55","events_24h":0,"events_7d":0,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Santa Clara","lat":37.3486,"lon":-121.9732,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":"sfo2-5.tennessine.do.prod.binaryedge.ninja","known_scanners":["binaryedge","BinaryEdge"],"scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"},"cve_matches":[],"malware":[],"top_ports":[{"port":9030,"proto":"tcp","label":"","count":46},{"port":80,"proto":"tcp","label":"HTTP","count":12},{"port":5985,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i311000_e8f1e7e78f70_d41ae481755e"],"tls_client_hello":"","tls_ja3":["c12b4ccd5320bbb380ca1a9df90f771d"],"http_akin":["b10lun000_00000000_334359b9","b11cuq050_00040813_2619b3ac"]},"fingerprint_peers":{"t13i311000_e8f1e7e78f70_d41ae481755e":794,"b10lun000_00000000_334359b9":2216,"b11cuq050_00040813_2619b3ac":21},"akin_families":{"b10lun000_00000000_334359b9":{"head":"b10lun000_00000000_334359b9","shapes":2,"ips":2216},"b11cuq050_00040813_2619b3ac":{"head":"b11cuq050_00040813_2619b3ac","shapes":2,"ips":21}},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36"],"timeline":[{"date":"2026-08-26","count":46},{"date":"2026-09-11","count":12},{"date":"2026-09-16","count":1}],"recent_events":[{"timestamp":"2026-09-16T01:51:55","port":5985,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"content-length\":\"0\",\"host\":\"<HONEYPOT>:5985\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/wsman","summary":"","payload_hex":"504f5354202f77736d616e20485454502f312e310d0a486f73743a20<HONEYPOT>3a353938350d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f39322e302e343531352e313539205361666172692f3533372e33360d0a436f6e74656e742d4c656e6774683a20300d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"POST","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36","ja3":"","session":"ad5a9271-e608-4536-a758-d8090d959523","seq":1,"duration_ms":100,"bytes_in":245,"bytes_out":80},{"timestamp":"2026-09-11T16:44:32","port":80,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\t\u0012;Bo3�D�\u0001�si=�\u0012��\u0019�\u001a:�\u0011ɮ�<0�8��\u0000\u000f�N�\u0005�޷<oN\u0001����/��*\u001f\u000e�C\f�4]��PVf\u001a\u0011��ȣ\u0016+b��","payload_hex":"09123b426f33a244fd018673693dae12bbc619fd1a3af311c9aeda3c30bc38819e000fca4efb05c6deb73c6f4e01a28782f52f8eed2a1f0eb7430ca0345dbd805056661a11aff5c8a3162b62b1d7","method":"","user_agent":"","ja3":"","session":"ddb3ad8d-dc3e-49c8-b571-8ed26f48ede0","seq":1,"duration_ms":100,"bytes_in":78,"bytes_out":15,"enriched":{"digest":"39ac89559e81aae7","strings":[";Bo3"]}},{"timestamp":"2026-09-11T16:44:31","port":80,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"A\u0000\u0000\u0000\u0003fH�d~���g������� ��T��Z��?���t0\\���X��J��ȜlМ���\u0012��ˏ��\u0016�J�<��`","payload_hex":"41000000036648bb647e8efc9467d2dbfcee8dff9820b1be54a49a5a9aa03f90e0f274305cedaeac5898de4aecf2c89c6cd09cc0e098128fe7cb8fa1a316f14aa93cbdda60","method":"","user_agent":"","ja3":"","session":"c0a9544a-3bd6-4c99-b7a7-e5fe111338f1","seq":1,"duration_ms":100,"bytes_in":69,"bytes_out":15},{"timestamp":"2026-09-11T16:44:29","port":80,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����E�����������������������������������\u0004�\u0012�0�����������������������&�\u0001�\u000f���\u0006�����!���\u0002�&�\f�\u0001���\n�\u0003���������+�\u0012�\u0002���\u0003�\u0002��� �#�������������������","payload_hex":"bdff9eff45ff9effbdff9effa4ff86ffc4ffbeffc7ffdbffeeffd9ffedffa4ff9dffcfffd8ffe5ff04ff12ff30ffb1ffbdffe7ffe2ffddffdcffdeffc8ffccffbefff8ff26ff01ff0ffff5ff06fffffff7ff21ffdeff02ff26ff0cff01fff5ff0aff03ffb1ffe4ffdefff0ff2bff12ff02fff8ff03ff02fffaff20ff23ffcbffc1ff9effcdffbaffc3ffc9ff91ffadff","method":"","user_agent":"","ja3":"","session":"727e7a97-7ea9-41e2-82df-1ede81cf3c63","seq":1,"duration_ms":100,"bytes_in":144,"bytes_out":15},{"timestamp":"2026-09-11T16:44:27","port":80,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0001�\u0000\u0000\u0000\u0001,�:���H����Pq���S��:\u0017�3\u0014o)S}���bζ\u000b��7>\u0001�v��E�D���A���\t����)k�c\u0018]V�V�_\u0005T\u000bt�\u000b��w�M=[1�\u0006���g^�\u0001�K��>�k�����H��D�`k��e\u001c��{_LP\u0015�\u001e\u000e���J","payload_hex":"0182000000012cef3ae789fe48afacf8c15071d7c3e8538ad63a17d933146f29537dbbbb9762ceb60b9bb9373e01cf76aea045b644eae1ea41c4dbee09acfbf084296bbb63185d568556c55f05540b74c40bbeb577bc4d3d5b31e1069cfdd3675ee3019b4bd7fc3eff6baf9599fbdb48908b4488606b92f5651caabb7b5f4c5015851e0e8fddc54a","method":"","user_agent":"","ja3":"","session":"951100f9-3913-4b4d-98fd-d3d93498b9dd","seq":1,"duration_ms":101,"bytes_in":136,"bytes_out":15,"enriched":{"digest":"fd9b9b7985b23a32","strings":["o)S}","M=[1","{_LP"]}},{"timestamp":"2026-09-11T16:44:24","port":80,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"batman","payload_hex":"6261746d616e","method":"","user_agent":"","ja3":"","session":"1e7e78b6-8296-46ea-ad3e-33050f18b8c1","seq":1,"duration_ms":100,"bytes_in":6,"bytes_out":15,"enriched":{"digest":"5c6d9edc3a951cda","strings":["batman"]}},{"timestamp":"2026-09-11T16:44:22","port":80,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u001b�հ]�ē�0�X�ڱ׬�n\u001d�\u001e\u001a3*��\u001d'��k���\nG\u0001�\u0001W\u001c�z\u001bOe�\u0005�aFCy\u0015sA\u0003\u0016����C�p�*�\u0019���b�v\u0007G�/��&o\u0006\u0015�@J\u0001z\u000e��3iBQ�Q\u0010�\u000f\u0007\u001c۔�b2M\"�� ��\u0001\u0012�Z�&e�\f�\rX'�\u0005�ͤGH\u0000/~s;`(&)�K_\u0002\u0002��\u0000\u0010���Y7���\u000bn��*#�L\r����\u0007�sz\u001cs�W��\b/��0*�\u0004~3E]�M�ؑ\b��Ց��ь��(�����\"eUY�E:I2_���\u001c\\�~�\nc~��rZ�/U���f�fic^.���yQ&�\u0003`��\u0013\u001f�\u0007�\f��7�A��7p��3�\u001a㏠\u001bLI&�R\u001emE\u0011�\r�����T�<Rm-<��\b�����\u001b\u0013�\u0017�:z��y���\u0006M\u0018/�\u0019e��>�\u0003\u0003�v�%ѳ*{\n\b�\u0001\u0002}QB�7\u0002��b�F\\\u0011w�H����!��<�Y��娅1��2�\u000b�s��\nsN��S\b;|�d\u0010s�\\i�Vq�ͫ]M��6\u0010��֒���\"\n��?���\u0011)�9��:\u0002\u001f����!�\u000b�v�9\u0014��\u0015;q�V���\u0011�x���Fv���_�!\u0010��C/��\u000f��\u0004������0��5�D","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"6f94783b-1eca-44f7-a9f2-38ad1bc7b1e5","seq":1,"duration_ms":100,"bytes_in":518,"bytes_out":15,"enriched":{"digest":"2d739036b122bcbb","strings":["aFCy","3iBQ","b2M\"","/~s;`(&","~3E]","\"eUY","E:I2_","fic^.","<Rm-<","GH/~s;`(&"]}},{"timestamp":"2026-09-11T16:44:20","port":80,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"HELP\r\n","payload_hex":"48454c500d0a","method":"","user_agent":"","ja3":"","session":"3721e32e-2278-4755-9f4e-587eb6d237c4","seq":1,"duration_ms":100,"bytes_in":6,"bytes_out":15,"enriched":{"digest":"d6616dd899abc961","strings":["HELP"]}},{"timestamp":"2026-09-11T16:44:19","port":80,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"H\u0000\u0000\u0000tj��#D�+����l�\u0019׍�\u0018�J\u001en��xu[l�E\u001d-j��xL�r�\u0015\u0010u�%�Rtg\u0005fv�]%̀\f�Ϯ\u0000��fȍD�\t�","payload_hex":"48000000746aa89e2344982bcaf0a7bb6cc519d78db618ed4a1e6ec1f978755b6cf0451d2d6aecd4784cc972c9151075e02586527467056676865d25cc800ce8cfae00b5c066c88d44c509f4","method":"","user_agent":"","ja3":"","session":"be8199e4-94af-4781-ba14-3b8f652e0340","seq":1,"duration_ms":101,"bytes_in":76,"bytes_out":15,"enriched":{"digest":"898fcda528e932c7","strings":["xu[l"]}},{"timestamp":"2026-09-11T16:44:17","port":80,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"145.ll|'|'|SGFjS2VkX0Q0OTkwNjI3|'|'|WIN-JNAPIER0859|'|'|JNapier|'|'|19-02-01|'|'||'|'|Win 7 Professional SP1 x64|'|'|No|'|'|0.7d|'|'|..|'|'|AA==|'|'|112.inf|'|'|SGFjS2VkDQoxOTIuMTY4LjkyLjIyMjo1NTUyDQpEZXNrdG9wDQpjbGllbnRhLmV4ZQ0KRmFsc2UNCkZhbHNlDQpUcnVlDQpGYWxzZQ==12.act|'|'|AA==","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"8b556b9e-d1a5-4c28-9600-7fc9c512c818","seq":1,"duration_ms":100,"bytes_in":280,"bytes_out":15,"enriched":{"digest":"9d2b2bbf7f0fce75","strings":["145.ll|'|'|SGFjS2VkX0Q0OTkwNjI3|'|'|WIN-JNAPIER0859|'|'|JNapier|'|'|19-02-01|'|'…"],"iocs":{"domains":["145.ll"]}}}],"http_methods":[{"method":"GET","count":4},{"method":"OPTIONS","count":2},{"method":"POST","count":1}],"distinct_ports_total":3,"top_paths":[{"path":"/","count":5,"ports":2},{"path":"/wsman","count":1,"ports":1},{"path":"/nice%20ports%2C/Tri%6Eity.txt%2ebak","count":1,"ports":1}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Content-Length","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Content-Length","value":"0","notable":false},{"name":"Host","value":"<HONEYPOT>:5985","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":1},"tags":[],"data_as_of":"2026-09-30T16:10:46.067230+00:00"}