{"ip":"74.207.241.211","total_events":202,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"binaryedge","confidence":"high","network_type":"CDN"},"first_seen":"2026-05-24T20:56:59","last_seen":"2026-06-13T13:26:01","events_24h":0,"events_7d":3,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"Fremont","lat":37.5625,"lon":-122.0004,"asn":63949,"org":"Akamai Connected Cloud"},"source_domain":"prod-beryllium-us-west-46.li.binaryedge.ninja","known_scanners":["binaryedge","BinaryEdge"],"scanner_tag":{"key":"binaryedge","label":"BinaryEdge","category":"commercial","url":"https://www.binaryedge.io/"},"cve_matches":[],"top_ports":[{"port":3376,"proto":"tcp","label":"","count":46},{"port":9502,"proto":"tcp","label":"","count":46},{"port":116,"proto":"tcp","label":"","count":46},{"port":943,"proto":"tcp","label":"","count":46},{"port":8983,"proto":"tcp","label":"Solr","count":8},{"port":3307,"proto":"tcp","label":"","count":3},{"port":3314,"proto":"tcp","label":"","count":3},{"port":3388,"proto":"tcp","label":"","count":3},{"port":1977,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i311000_e8f1e7e78f70_d41ae481755e","t13i3112h1_e8f1e7e78f70_d339722ba4af"],"tls_ja3":["c12b4ccd5320bbb380ca1a9df90f771d","48eb9b1182293f55c0710654b7b12fc6"],"ja4h":["ge10nn0000_000000000000","op10nn0000_000000000000","ge11nn0300_dedeb29cc523"]},"fingerprint_peers":{"t13i3112h1_e8f1e7e78f70_d339722ba4af":601,"t13i311000_e8f1e7e78f70_d41ae481755e":661,"ge10nn0000_000000000000":2179,"op10nn0000_000000000000":1250,"ge11nn0300_dedeb29cc523":608},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36"],"timeline":[{"date":"2026-05-24","count":3},{"date":"2026-05-25","count":3},{"date":"2026-05-30","count":46},{"date":"2026-06-01","count":46},{"date":"2026-06-03","count":46},{"date":"2026-06-05","count":1},{"date":"2026-06-09","count":8},{"date":"2026-06-10","count":46},{"date":"2026-06-13","count":3}],"recent_events":[{"timestamp":"2026-06-13T13:26:01","port":3388,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0000\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080000000000","method":"","user_agent":"","community_id":"1:mcQDvcyEqtBXIkzTSAme8r4k3nY=","ja3":"","session":"a05ce4e8-43f8-4f5e-9188-232220b2f496","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":14,"enriched":{"digest":"b481beafe15f409a","label":"RDP (X.224)"}},{"timestamp":"2026-06-13T13:26:01","port":3388,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0001\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080001000000","method":"","user_agent":"","community_id":"1:JSpjmO49LM1GSKYuFCcg14vOz9A=","ja3":"","session":"96d8c69b-99d2-481f-a83e-238379384660","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":14,"enriched":{"digest":"af9b397590d28773","label":"RDP (X.224)"}},{"timestamp":"2026-06-13T13:26:01","port":3388,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0002\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080002000000","method":"","user_agent":"","community_id":"1:SeP6CIhVaOHigGbCgNWhWxQjcKY=","ja3":"","session":"e47e3983-d397-44a6-89fd-fec8d13b832a","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":14,"enriched":{"digest":"4986e56a8738b201","label":"RDP (X.224)"}},{"timestamp":"2026-06-10T13:01:07","port":9502,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0001I20100\n","payload_hex":"014932303130300a","method":"","user_agent":"","community_id":"1:k6bWEg3gFOwftnz/jPM8l6rXnyE=","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"9e6e3054-fffd-4345-ade8-ea76f04990fc","seq":1,"duration_ms":152,"bytes_in":8,"bytes_out":14,"enriched":{"digest":"14b0bf5196552d7e","strings":["I20100"]}},{"timestamp":"2026-06-10T13:01:06","port":9502,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000\u0000\u0000","payload_hex":"0000000000","method":"","user_agent":"","community_id":"1:596Qu4ATuUt/snsbmN4P6t9h91g=","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"9dc8dd43-19bc-49da-a8b9-f6ed67f41398","seq":1,"duration_ms":148,"bytes_in":5,"bytes_out":14},{"timestamp":"2026-06-10T13:01:04","port":9502,"proto":"tcp","app_proto":"tls","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000,'�\u0000\u0000\u0000\u0000\u0000Cookie: mstshash=Administrator\r\n\u0001\u0000\b\u0000\u0000\u0000\u0000\u0000","payload_hex":"0300002c27e00000000000436f6f6b69653a206d737473686173683d41646d696e6973747261746f720d0a0100080000000000","method":"","user_agent":"","community_id":"1:0lQK3azbqw9P2SDp8pABj2P3qx0=","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"c1308b22-18e5-4568-9a86-f38fbb2865bd","seq":1,"duration_ms":150,"bytes_in":51,"bytes_out":14,"enriched":{"digest":"56a8af4f4fb4faa0","label":"RDP (X.224)","strings":["Cookie: mstshash=Administrator"]}},{"timestamp":"2026-06-10T13:01:02","port":9502,"proto":"tcp","app_proto":"tls","app_protocol":"dicom","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0001\u0000\u0000\u0000\u0000�\u0000\u0001\u0000\u0000ANY-SCP\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000FINDSCU\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u00151.2.840.10008.3.1.1.1 \u0000\u0000.\u0001\u0000\u0000\u00000\u0000\u0000\u00111.2.840.10008.1.1@\u0000\u0000\u00111.2.840.10008.1.2P\u0000\u0000:Q\u0000\u0000\u0004\u0000\u0000@\u0000R\u0000\u0000\u001e1.2.826.0.1.3680043.2.1396.999U\u0000\u0000\fCharruaVista","payload_hex":"0100000000cd00010000414e592d53435000000000000000000046494e44534355000000000000000000000000000000000000000000000000000000000000000000000000000000000010000015312e322e3834302e31303030382e332e312e312e312000002e0100000030000011312e322e3834302e31303030382e312e3140000011312e322e3834302e31303030382e312e325000003a51000004000040005200001e312e322e3832362e302e312e333638303034332e322e313339362e3939395500000c436861727275615669737461","method":"","user_agent":"","community_id":"1:aPY8PMtJV7jt9UepmSB3pyWjjBA=","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"d5c3a969-f9b0-4bf5-b95f-0a7feaccb2b0","seq":1,"duration_ms":148,"bytes_in":211,"bytes_out":14,"enriched":{"digest":"14f9c94d13e59316","label":"DICOM","strings":["ANY-SCP","FINDSCU","1.2.840.10008.3.1.1.1","1.2.840.10008.1.1@","1.2.840.10008.1.2P","1.2.826.0.1.3680043.2.1396.999U","CharruaVista","ANY-SCPFINDSCU","1.2.840.10008.3.1.1.1 .","1.2.840.10008.1.2P:Q"]}},{"timestamp":"2026-06-10T13:01:00","port":9502,"proto":"tcp","app_proto":"tls","app_protocol":"iscsi","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0003�\u0000\u0000\u0000\u0000\u0000_@\u0000\u00017\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000InitiatorName=iqn.1991-05.com.microsoft:beio-iscsi-probe\u0000SessionType=Discovery\u0000AuthMethod=None\u0000\u0000","payload_hex":"038100000000005f40000137000000000000000100010000000000010000000100000000000000000000000000000000496e69746961746f724e616d653d69716e2e313939312d30352e636f6d2e6d6963726f736f66743a6265696f2d69736373692d70726f62650053657373696f6e547970653d446973636f7665727900417574684d6574686f643d4e6f6e650000","method":"","user_agent":"","community_id":"1:xf23UnaJutOT9xdPpFQMqyEj+gk=","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"04b53a0d-1f80-46bb-b952-2066b51fa20f","seq":1,"duration_ms":148,"bytes_in":144,"bytes_out":14,"enriched":{"digest":"482810f8d0264f72","label":"iSCSI","strings":["InitiatorName=iqn.1991-05.com.microsoft:beio-iscsi-probe","SessionType=Discovery","AuthMethod=None","InitiatorName=iqn.1991-05.com.microsoft:beio-iscsi-probeSessionType=DiscoveryAut…"],"iocs":{"domains":["iqn.1991-05.com.microsoft"]}}},{"timestamp":"2026-06-10T13:00:58","port":9502,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0004\u0000\u0000\u0000\b\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000","payload_hex":"000000010000000100000004000000080000000100000000","method":"","user_agent":"","community_id":"1:rgBomtR541+n/ewFLXvKIXIsC7E=","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"230f2d4b-a1a3-494d-8ce2-6bd618e68b30","seq":1,"duration_ms":151,"bytes_in":24,"bytes_out":14},{"timestamp":"2026-06-10T13:00:56","port":9502,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000�\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0001��\u0000\u0001none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000beio\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"009c00011a2b3c4d00010000010000000000000100000001ffff00016e6f6e650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006265696f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000","method":"","user_agent":"","community_id":"1:7ov2+l8JxCv/2Dv0/MqusMMLCBM=","ja3":"c12b4ccd5320bbb380ca1a9df90f771d","session":"be4670cc-224e-444a-86d5-a7631d0ff5b4","seq":1,"duration_ms":153,"bytes_in":156,"bytes_out":14,"enriched":{"digest":"3415c4d31123c5ba","strings":["none","beio","nonebeio"]}}],"http_methods":[{"method":"GET","count":14},{"method":"OPTIONS","count":9}],"distinct_ports_total":9,"top_paths":[{"path":"/","count":19,"ports":6},{"path":"/nice%20ports%2C/Tri%6Eity.txt%2ebak","count":4,"ports":4}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"http/1.1","count":1}],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-06-19T10:31:06.159108+00:00"}