{"ip":"67.207.83.92","total_events":142,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"binaryedge","confidence":"high","network_type":"CDN","why":["Source IP is in a known scanner range (binaryedge).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"15,502 bytes sent","bytes_sent":15502,"session_seconds":0,"persistent":false}},"first_seen":"2026-08-29T06:10:09","last_seen":"2026-09-19T16:03:25","events_24h":0,"events_7d":12,"geo":{"country_code":"US","country_name":"United States","region":"New Jersey","city":"North Bergen","lat":40.7964,"lon":-74.0203,"asn":14061,"org":"DigitalOcean, LLC"},"source_domain":"nyc1-34.boron.do.prod.binaryedge.ninja","known_scanners":["binaryedge","BinaryEdge"],"scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"},"cve_matches":[],"malware":[],"top_ports":[{"port":5900,"proto":"tcp","label":"VNC","count":46},{"port":3323,"proto":"tcp","label":"","count":46},{"port":2252,"proto":"tcp","label":"","count":38},{"port":1800,"proto":"tcp","label":"","count":12}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i311000_e8f1e7e78f70_d41ae481755e"],"tls_client_hello":"","tls_ja3":["c12b4ccd5320bbb380ca1a9df90f771d"]},"fingerprint_peers":{"t13i311000_e8f1e7e78f70_d41ae481755e":912},"user_agents":[],"timeline":[{"date":"2026-08-29","count":38},{"date":"2026-09-01","count":46},{"date":"2026-09-07","count":46},{"date":"2026-09-19","count":12}],"recent_events":[{"timestamp":"2026-09-19T16:03:25","port":1800,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\t\u0012;Bo3�D�\u0001�si=�\u0012��\u0019�\u001a:�\u0011ɮ�<0�8��\u0000\u000f�N�\u0005�޷\u0001�v��E�D���A���\t����)k�c\u0018]V�V�_\u0005T\u000bt�\u000b��w�M=[1�\u0006���g^�\u0001�K��>�k�����H��D�`k��e\u001c��{_LP\u0015�\u001e\u000e���J","payload_hex":"0182000000012cef3ae789fe48afacf8c15071d7c3e8538ad63a17d933146f29537dbbbb9762ceb60b9bb9373e01cf76aea045b644eae1ea41c4dbee09acfbf084296bbb63185d568556c55f05540b74c40bbeb577bc4d3d5b31e1069cfdd3675ee3019b4bd7fc3eff6baf9599fbdb48908b4488606b92f5651caabb7b5f4c5015851e0e8fddc54a","method":"","user_agent":"","ja3":"","session":"69dedabe-6032-4fec-9a5e-feb1514868fa","seq":1,"duration_ms":100,"bytes_in":136,"bytes_out":12,"enriched":{"digest":"fd9b9b7985b23a32","strings":["o)S}","M=[1","{_LP"]}},{"timestamp":"2026-09-19T16:03:17","port":1800,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"batman","payload_hex":"6261746d616e","method":"","user_agent":"","ja3":"","session":"112f9d1e-ca63-4032-8f11-acebd0650e2b","seq":1,"duration_ms":100,"bytes_in":6,"bytes_out":12,"enriched":{"digest":"5c6d9edc3a951cda","strings":["batman"]}},{"timestamp":"2026-09-19T16:03:15","port":1800,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"H\u0000\u0000\u0000tj��#D�+����l�\u0019׍�\u0018�J\u001en��xu[l�E\u001d-j��xL�r�\u0015\u0010u�%�Rtg\u0005fv�]%̀\f�Ϯ\u0000��fȍD�\t�","payload_hex":"48000000746aa89e2344982bcaf0a7bb6cc519d78db618ed4a1e6ec1f978755b6cf0451d2d6aecd4784cc972c9151075e02586527467056676865d25cc800ce8cfae00b5c066c88d44c509f4","method":"","user_agent":"","ja3":"","session":"65a56e72-7bef-4aa4-9089-8e4f5993f511","seq":1,"duration_ms":100,"bytes_in":76,"bytes_out":12,"enriched":{"digest":"898fcda528e932c7","strings":["xu[l"]}},{"timestamp":"2026-09-19T16:03:14","port":1800,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"145.ll|'|'|SGFjS2VkX0Q0OTkwNjI3|'|'|WIN-JNAPIER0859|'|'|JNapier|'|'|19-02-01|'|'||'|'|Win 7 Professional SP1 x64|'|'|No|'|'|0.7d|'|'|..|'|'|AA==|'|'|112.inf|'|'|SGFjS2VkDQoxOTIuMTY4LjkyLjIyMjo1NTUyDQpEZXNrdG9wDQpjbGllbnRhLmV4ZQ0KRmFsc2UNCkZhbHNlDQpUcnVlDQpGYWxzZQ==12.act|'|'|AA==","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"c0bd4609-b1db-4c1e-a9c6-28fc61345339","seq":1,"duration_ms":101,"bytes_in":280,"bytes_out":12,"enriched":{"digest":"9d2b2bbf7f0fce75","strings":["145.ll|'|'|SGFjS2VkX0Q0OTkwNjI3|'|'|WIN-JNAPIER0859|'|'|JNapier|'|'|19-02-01|'|'…"],"iocs":{"domains":["145.ll"]}}},{"timestamp":"2026-09-19T16:03:12","port":1800,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"Gh0st�\u0000\u0000\u0000�\u0000\u0000\u0000x�KS``�����\u0006Č@�Q���\tH\u0007�\u0016�e&�*\u0004$&g+\u00182���00��rc\u0000\u0001\u0011��\u001f\\`&��K7�\u0019�n\f9�n\f;�\u000f3��sch�^�4'J����0Ñh]&��ΗS�A4L?2=�Ē�\u000b@�`\fT\u001f��]\nr\u000b\u0003#��\u0002~\u0006�\u0003+\u0018m�=�tC,C�L<<==\\�\u0019�\u0000� \u0002\u0000T�+\\","payload_hex":"4768307374ad000000e0000000789c4b53606098c3c0c0c006c48c40bc51968181094807a716956526a72a042426672b183294f6b03030aca87263000111a0821f5c602683c74b378619e56e0c39956e0c3b840f33ace8736368a85ecf34274a97a982e330c391685d2690f8ce9753cb41344c3f323de1c492860b40f5600c541faeaf5d0a720b0323a3dc027e0686032b186dc23dfd74432c43fd4c3c3c3d3d5c9d198800e520020054f52b5c","method":"","user_agent":"","ja3":"","session":"555dccbc-5046-4bfa-a959-11d28509d61d","seq":1,"duration_ms":100,"bytes_in":173,"bytes_out":12,"enriched":{"digest":"424a73c6483ebe99","strings":["Gh0st","KS``","$&g+","A4L?2=","tC,C","L<<==\\"]}},{"timestamp":"2026-09-19T16:03:11","port":1800,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MARK|'|'|user|'|'|2013-11-22|'|'||'|'|Win XP|'|'|No|'|'|0.6.4|'|'|..|'|'||'|'|[endof]","payload_hex":"6c767c277c277c56484a76616d467558304d304e6b593252546b3d7c277c277c4d41524b7c277c277c757365727c277c277c323031332d31312d32327c277c277c7c277c277c57696e2058507c277c277c4e6f7c277c277c302e362e347c277c277c2e2e7c277c277c7c277c277c5b656e646f665d","method":"","user_agent":"","ja3":"","session":"f59bb9c8-faee-4118-bb45-56405f4acdfd","seq":1,"duration_ms":100,"bytes_in":117,"bytes_out":12,"enriched":{"digest":"048dd147840ff571","strings":["lv|'|'|VHJvamFuX0M0NkY2RTk=|'|'|MARK|'|'|user|'|'|2013-11-22|'|'||'|'|Win XP|'|'…"]}},{"timestamp":"2026-09-19T16:03:09","port":1800,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"HELP\r\n","payload_hex":"48454c500d0a","method":"","user_agent":"","ja3":"","session":"d6e97b53-d460-448f-82cd-9a503bc47c35","seq":1,"duration_ms":100,"bytes_in":6,"bytes_out":12,"enriched":{"digest":"d6616dd899abc961","strings":["HELP"]}}],"http_methods":[{"method":"GET","count":9},{"method":"OPTIONS","count":5}],"distinct_ports_total":4,"top_paths":[{"path":"/","count":11,"ports":4},{"path":"/nice%20ports%2C/Tri%6Eity.txt%2ebak","count":3,"ports":3}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-09-22T04:39:25.500816+00:00"}