Real-time scanning of IP addresses

The method for providing real-time scanning of IP addresses, the method comprising:

• receiving, at a server device, an input comprising at least request details for generating a request to scan one or more IP addresses of an internet protocol;
• generating one or more work orders based on the request details;
• processing the one or more work orders, the processing comprising communicating with one or more computing devices identified by the one or more work orders;
• receiving device information from the one or more computing devices, the device information identifying a device type for each of the one or more computing devices;
• providing the device information to a plurality of analyzer components of the server device, wherein the plurality of analyzer components are configured to execute against the internet protocol in real-time;
• providing, by the plurality of analyzer components, the device type for the one or more computing devices to a machine learning model, wherein the machine learning model uses the device type to select one or more payloads for the one or more computing devices;
• providing the selected one or more payloads to the one or more computing devices, wherein the each of the one or more payloads is configured to solicit a response from the identified device type;
• and
• based on the one or more payloads, receiving one or more responses from the one or more computing devices.

A computer-readable media not consisting of a propagated data signal, the computer-readable media storing computer executable instructions that when executed cause a computing system to perform a method for providing real-time scanning of IP addresses, the method comprising:

• receiving, at a server device, an input comprising at least request details for generating a request to scan one or more IP addresses of an internet protocol;
• generating one or more work orders based on the request details;
• processing the one or more work orders, the processing comprising:
• accessing the one or more work orders to determine communication criteria;
• identifying one or more computing devices associated with the communication criteria;
• and
• transmitting a communication request to the identified one or more computing devices;
• receiving one or more communication responses to the communication request, the one or more communication responses comprising device information, the device information comprising internet protocol information for the internet protocol;
• determining a device type of the one or more computing devices using the received internet protocol information;
• identifying an expected response for the device type;
• providing the device information to a plurality of analyzer components of the system, wherein the plurality of analyzer components are configured to execute against the internet protocol in real-time;
• providing, by the plurality of analyzer components, the device type for the one or more computing devices to a machine learning model, wherein the machine learning model uses the device type to select at least one payload for the one or more computing devices, the at least one payload comprising at least one of:
• commands corresponding to the expected response;
• and
• detection data to detect malicious content, wherein the detection data is generated using reverse engineering techniques on known malicious content;
• providing the selected at least one payload to the one or more computing devices;
• based on the one or more payloads, receiving one or more responses from the one or more computing devices;
• determining whether the received one or more responses includes an expected string;
• and
• when the one or more responses is determined to not include the expected string, marking the device information associated with the one or more responses as malicious.