{"ip":"165.22.4.206","total_events":161,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"binaryedge","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (binaryedge).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"15,887 bytes sent","bytes_sent":15887,"session_seconds":1,"persistent":false}},"first_seen":"2026-08-25T21:18:46","last_seen":"2026-09-12T22:12:10","events_24h":0,"events_7d":0,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"North Bergen","lat":40.7964,"lon":-74.0203,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":"nyc1-36.boron.do.prod.binaryedge.ninja","known_scanners":["binaryedge","BinaryEdge"],"scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"},"cve_matches":[],"malware":[],"top_ports":[{"port":8082,"proto":"tcp","label":"","count":47},{"port":2082,"proto":"tcp","label":"","count":46},{"port":8140,"proto":"tcp","label":"","count":46},{"port":10134,"proto":"tcp","label":"","count":12},{"port":28017,"proto":"tcp","label":"","count":9},{"port":21,"proto":"tcp","label":"FTP","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i311000_e8f1e7e78f70_d41ae481755e"],"tls_client_hello":"","tls_ja3":["c12b4ccd5320bbb380ca1a9df90f771d"],"http_akin":[]},"fingerprint_peers":{"t13i311000_e8f1e7e78f70_d41ae481755e":880},"akin_families":{},"user_agents":[],"timeline":[{"date":"2026-08-25","count":47},{"date":"2026-08-29","count":46},{"date":"2026-09-01","count":58},{"date":"2026-09-02","count":9},{"date":"2026-09-12","count":1}],"recent_events":[{"timestamp":"2026-09-12T22:12:10","port":21,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"e3d08f37-3889-4f37-ace9-8b4cb83ac042","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":34},{"timestamp":"2026-09-02T11:07:06","port":28017,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"caabaf99-db66-4e11-8c3c-25f479d43d13","seq":1,"duration_ms":189,"bytes_in":4,"bytes_out":12},{"timestamp":"2026-09-02T11:07:02","port":28017,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"HELP\r\n","payload_hex":"48454c500d0a","method":"","user_agent":"","ja3":"","session":"e5fd1a1c-7974-469f-990a-914b46c05370","seq":1,"duration_ms":101,"bytes_in":6,"bytes_out":12,"enriched":{"digest":"d6616dd899abc961","strings":["HELP"]}},{"timestamp":"2026-09-02T11:07:00","port":28017,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\f\u0000\u0000\u0010\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"000c000010000000000000000000","method":"","user_agent":"","ja3":"","session":"0398c9ae-f100-43e3-bde4-e607aa1d3948","seq":1,"duration_ms":100,"bytes_in":14,"bytes_out":12},{"timestamp":"2026-09-02T11:06:59","port":28017,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u001e\u0000\u0006\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0007version\u0004bind\u0000\u0000\u0010\u0000\u0003","payload_hex":"001e0006010000010000000000000776657273696f6e0462696e640000100003","method":"","user_agent":"","ja3":"","session":"ab04358b-5830-40a5-9b74-7d206e7c78e5","seq":1,"duration_ms":100,"bytes_in":32,"bytes_out":12,"enriched":{"digest":"75f479f7d331db45","strings":["version","bind"]}},{"timestamp":"2026-09-02T11:06:57","port":28017,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000(r�\u001d\u0013\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0001��\u0000\u0001�|\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"8000002872fe1d130000000000000002000186a00001977c0000000000000000000000000000000000000000","method":"","user_agent":"","ja3":"","session":"078018f5-946c-4437-a5c3-1a459bae3a3b","seq":1,"duration_ms":100,"bytes_in":44,"bytes_out":12},{"timestamp":"2026-09-02T11:06:55","port":28017,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"OPTIONS / RTSP/1.0\r\n\r\n","payload_hex":"4f5054494f4e53202f20525453502f312e300d0a0d0a","method":"","user_agent":"","ja3":"","session":"69510a68-f9cc-458d-b1ee-7d68fef0f336","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":77,"enriched":{"digest":"b6bc3f9a3eb2980d","label":"HTTP","strings":["OPTIONS / RTSP/1.0"]}},{"timestamp":"2026-09-02T11:06:53","port":28017,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"4f5054494f4e53202f20485454502f312e300d0a0d0a","method":"OPTIONS","user_agent":"","ja3":"","session":"615509f7-5a27-4a6e-8469-df4b4980de39","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":77},{"timestamp":"2026-09-02T11:06:51","port":28017,"proto":"tcp","app_proto":"","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e300d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"53aff7d3-388a-4477-a81a-3950fa67c177","seq":1,"duration_ms":100,"bytes_in":18,"bytes_out":77},{"timestamp":"2026-09-02T11:06:50","port":28017,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n\r\n","payload_hex":"0d0a0d0a","method":"","user_agent":"","ja3":"","session":"355f2802-7db0-4124-ab91-57cb29195ed0","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":12}],"http_methods":[{"method":"GET","count":12},{"method":"OPTIONS","count":7}],"distinct_ports_total":6,"top_paths":[{"path":"/","count":15,"ports":5},{"path":"/nice%20ports%2C/Tri%6Eity.txt%2ebak","count":4,"ports":3}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-23T08:50:38.496426+00:00"}