{"ip":"128.8.124.68","total_events":178,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"universities","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (universities).","Known research and commercial scanners are labelled as such, not as threats."]},"first_seen":"2026-05-29T20:51:53","last_seen":"2026-07-28T16:47:47","events_24h":2,"events_7d":24,"geo":{"country_code":"US","country_name":"United States","region":"Maryland","city":"Greenbelt","lat":39.0013,"lon":-76.888,"asn":27,"org":"University of Maryland"},"source_domain":"zmap00.umiacs.umd.edu","known_scanners":["universities"],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":62078,"proto":"tcp","label":"","count":178}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":[]},"fingerprint_peers":{},"user_agents":[],"timeline":[{"date":"2026-05-29","count":1},{"date":"2026-05-30","count":3},{"date":"2026-06-02","count":2},{"date":"2026-06-03","count":2},{"date":"2026-06-04","count":1},{"date":"2026-06-05","count":2},{"date":"2026-06-06","count":2},{"date":"2026-06-07","count":2},{"date":"2026-06-08","count":3},{"date":"2026-06-09","count":2},{"date":"2026-06-10","count":3},{"date":"2026-06-11","count":2},{"date":"2026-06-12","count":2},{"date":"2026-06-13","count":2},{"date":"2026-06-14","count":2},{"date":"2026-06-15","count":4},{"date":"2026-06-16","count":3},{"date":"2026-06-17","count":1},{"date":"2026-06-18","count":3},{"date":"2026-06-20","count":4},{"date":"2026-06-21","count":1},{"date":"2026-06-22","count":4},{"date":"2026-06-23","count":3},{"date":"2026-06-24","count":1},{"date":"2026-06-25","count":3},{"date":"2026-06-26","count":5},{"date":"2026-06-27","count":3},{"date":"2026-06-28","count":3},{"date":"2026-06-29","count":3},{"date":"2026-06-30","count":4},{"date":"2026-07-01","count":4},{"date":"2026-07-02","count":2},{"date":"2026-07-03","count":4},{"date":"2026-07-04","count":3},{"date":"2026-07-05","count":3},{"date":"2026-07-06","count":5},{"date":"2026-07-07","count":3},{"date":"2026-07-08","count":4},{"date":"2026-07-09","count":3},{"date":"2026-07-10","count":2},{"date":"2026-07-11","count":4},{"date":"2026-07-12","count":4},{"date":"2026-07-13","count":5},{"date":"2026-07-14","count":3},{"date":"2026-07-15","count":6},{"date":"2026-07-16","count":4},{"date":"2026-07-17","count":4},{"date":"2026-07-18","count":2},{"date":"2026-07-19","count":6},{"date":"2026-07-20","count":5},{"date":"2026-07-21","count":2},{"date":"2026-07-22","count":6},{"date":"2026-07-23","count":3},{"date":"2026-07-24","count":2},{"date":"2026-07-25","count":4},{"date":"2026-07-26","count":3},{"date":"2026-07-27","count":4},{"date":"2026-07-28","count":2}],"recent_events":[{"timestamp":"2026-07-28T16:47:47","port":62078,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0001O<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>Label</key>\n\t<string>lockdown-probe</string>\n\t<key>ProtocolVersion</key>\n\t<string>2</string>\n\t<key>Request</key>\n\t<string>QueryType</string>\n</dict>\n</plist>\n","payload_hex":"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","method":"","user_agent":"","community_id":"1:rV370umsHnkbQe/ATMniwo6gVkE=","ja3":"","session":"67415c56-6747-4262-80dc-2e762201d619","seq":1,"duration_ms":100,"bytes_in":339,"bytes_out":12,"enriched":{"digest":"feba376568ada340","strings":["O<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/…","<plist version=\"1.0\">","<dict>","<key>Label</key>","<string>lockdown-probe</string>","<key>ProtocolVersion</key>","<string>2</string>","<key>Request</key>","<string>QueryType</string>"],"iocs":{"urls":["http://www.apple.com/DTDs/…"],"domains":["www.apple.com"],"paths":["/www.apple.com/DTDs"]}}},{"timestamp":"2026-07-28T03:39:08","port":62078,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0001O<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>Label</key>\n\t<string>lockdown-probe</string>\n\t<key>ProtocolVersion</key>\n\t<string>2</string>\n\t<key>Request</key>\n\t<string>QueryType</string>\n</dict>\n</plist>\n","payload_hex":"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","method":"","user_agent":"","community_id":"1:IpUR2ucNPbvDK8lO7QOYZV/pK+E=","ja3":"","session":"9f1b72d0-8262-4ae0-aad0-a1101eebe60a","seq":1,"duration_ms":100,"bytes_in":339,"bytes_out":12,"enriched":{"digest":"feba376568ada340","strings":["O<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/…","<plist version=\"1.0\">","<dict>","<key>Label</key>","<string>lockdown-probe</string>","<key>ProtocolVersion</key>","<string>2</string>","<key>Request</key>","<string>QueryType</string>"],"iocs":{"urls":["http://www.apple.com/DTDs/…"],"domains":["www.apple.com"],"paths":["/www.apple.com/DTDs"]}}},{"timestamp":"2026-07-27T19:34:30","port":62078,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0001O<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>Label</key>\n\t<string>lockdown-probe</string>\n\t<key>ProtocolVersion</key>\n\t<string>2</string>\n\t<key>Request</key>\n\t<string>QueryType</string>\n</dict>\n</plist>\n","payload_hex":"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","method":"","user_agent":"","community_id":"1:qM7tuTsD7unorndoo/5DdKkn0Io=","ja3":"","session":"40a211fe-8335-4377-9e03-0ec6a5146914","seq":1,"duration_ms":100,"bytes_in":339,"bytes_out":12,"enriched":{"digest":"feba376568ada340","strings":["O<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/…","<plist version=\"1.0\">","<dict>","<key>Label</key>","<string>lockdown-probe</string>","<key>ProtocolVersion</key>","<string>2</string>","<key>Request</key>","<string>QueryType</string>"],"iocs":{"urls":["http://www.apple.com/DTDs/…"],"domains":["www.apple.com"],"paths":["/www.apple.com/DTDs"]}}},{"timestamp":"2026-07-27T17:59:38","port":62078,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0001O<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>Label</key>\n\t<string>lockdown-probe</string>\n\t<key>ProtocolVersion</key>\n\t<string>2</string>\n\t<key>Request</key>\n\t<string>QueryType</string>\n</dict>\n</plist>\n","payload_hex":"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","method":"","user_agent":"","community_id":"1:FiONMWvGlSSOSFzpIRnktkIAp/0=","ja3":"","session":"e66685c7-43ba-4cd6-8136-c73697715d01","seq":1,"duration_ms":100,"bytes_in":339,"bytes_out":12,"enriched":{"digest":"feba376568ada340","strings":["O<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/…","<plist version=\"1.0\">","<dict>","<key>Label</key>","<string>lockdown-probe</string>","<key>ProtocolVersion</key>","<string>2</string>","<key>Request</key>","<string>QueryType</string>"],"iocs":{"urls":["http://www.apple.com/DTDs/…"],"domains":["www.apple.com"],"paths":["/www.apple.com/DTDs"]}}},{"timestamp":"2026-07-27T14:18:43","port":62078,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0001O<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>Label</key>\n\t<string>lockdown-probe</string>\n\t<key>ProtocolVersion</key>\n\t<string>2</string>\n\t<key>Request</key>\n\t<string>QueryType</string>\n</dict>\n</plist>\n","payload_hex":"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","method":"","user_agent":"","community_id":"1:DsrjUPb1Eq52hChftXZti5d6cws=","ja3":"","session":"295839f9-a081-4d32-938f-b2dca3fefa54","seq":1,"duration_ms":100,"bytes_in":339,"bytes_out":12,"enriched":{"digest":"feba376568ada340","strings":["O<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/…","<plist version=\"1.0\">","<dict>","<key>Label</key>","<string>lockdown-probe</string>","<key>ProtocolVersion</key>","<string>2</string>","<key>Request</key>","<string>QueryType</string>"],"iocs":{"urls":["http://www.apple.com/DTDs/…"],"domains":["www.apple.com"],"paths":["/www.apple.com/DTDs"]}}},{"timestamp":"2026-07-27T05:07:53","port":62078,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0001O<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>Label</key>\n\t<string>lockdown-probe</string>\n\t<key>ProtocolVersion</key>\n\t<string>2</string>\n\t<key>Request</key>\n\t<string>QueryType</string>\n</dict>\n</plist>\n","payload_hex":"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","method":"","user_agent":"","community_id":"1:bbj8GMV7XI9JcyQ2D4J02UGwguw=","ja3":"","session":"bd46f056-c344-4841-b9e0-3912f3b2df4b","seq":1,"duration_ms":100,"bytes_in":339,"bytes_out":12,"enriched":{"digest":"feba376568ada340","strings":["O<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/…","<plist version=\"1.0\">","<dict>","<key>Label</key>","<string>lockdown-probe</string>","<key>ProtocolVersion</key>","<string>2</string>","<key>Request</key>","<string>QueryType</string>"],"iocs":{"urls":["http://www.apple.com/DTDs/…"],"domains":["www.apple.com"],"paths":["/www.apple.com/DTDs"]}}},{"timestamp":"2026-07-26T21:43:22","port":62078,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0001O<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>Label</key>\n\t<string>lockdown-probe</string>\n\t<key>ProtocolVersion</key>\n\t<string>2</string>\n\t<key>Request</key>\n\t<string>QueryType</string>\n</dict>\n</plist>\n","payload_hex":"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","method":"","user_agent":"","community_id":"1:uGcXzRRUHlYXzZD+rzh6YfD287w=","ja3":"","session":"1b10efbd-1f5c-4a66-972e-154fd619a514","seq":1,"duration_ms":100,"bytes_in":339,"bytes_out":12,"enriched":{"digest":"feba376568ada340","strings":["O<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/…","<plist version=\"1.0\">","<dict>","<key>Label</key>","<string>lockdown-probe</string>","<key>ProtocolVersion</key>","<string>2</string>","<key>Request</key>","<string>QueryType</string>"],"iocs":{"urls":["http://www.apple.com/DTDs/…"],"domains":["www.apple.com"],"paths":["/www.apple.com/DTDs"]}}},{"timestamp":"2026-07-26T09:49:20","port":62078,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0001O<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>Label</key>\n\t<string>lockdown-probe</string>\n\t<key>ProtocolVersion</key>\n\t<string>2</string>\n\t<key>Request</key>\n\t<string>QueryType</string>\n</dict>\n</plist>\n","payload_hex":"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","method":"","user_agent":"","community_id":"1:v+MQr9HkSlXbk5HA6dGa3qbs4V0=","ja3":"","session":"b4ef640d-3cee-4b40-821a-75c728e3e2aa","seq":1,"duration_ms":100,"bytes_in":339,"bytes_out":12,"enriched":{"digest":"feba376568ada340","strings":["O<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/…","<plist version=\"1.0\">","<dict>","<key>Label</key>","<string>lockdown-probe</string>","<key>ProtocolVersion</key>","<string>2</string>","<key>Request</key>","<string>QueryType</string>"],"iocs":{"urls":["http://www.apple.com/DTDs/…"],"domains":["www.apple.com"],"paths":["/www.apple.com/DTDs"]}}},{"timestamp":"2026-07-26T07:50:35","port":62078,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0001O<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>Label</key>\n\t<string>lockdown-probe</string>\n\t<key>ProtocolVersion</key>\n\t<string>2</string>\n\t<key>Request</key>\n\t<string>QueryType</string>\n</dict>\n</plist>\n","payload_hex":"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","method":"","user_agent":"","community_id":"1:JwlDne2CSKd0SNjVKGwn738y4XA=","ja3":"","session":"a9adbe04-e7bb-4081-b90f-887811488808","seq":1,"duration_ms":100,"bytes_in":339,"bytes_out":12,"enriched":{"digest":"feba376568ada340","strings":["O<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/…","<plist version=\"1.0\">","<dict>","<key>Label</key>","<string>lockdown-probe</string>","<key>ProtocolVersion</key>","<string>2</string>","<key>Request</key>","<string>QueryType</string>"],"iocs":{"urls":["http://www.apple.com/DTDs/…"],"domains":["www.apple.com"],"paths":["/www.apple.com/DTDs"]}}},{"timestamp":"2026-07-25T22:35:38","port":62078,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u0000\u0001O<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>Label</key>\n\t<string>lockdown-probe</string>\n\t<key>ProtocolVersion</key>\n\t<string>2</string>\n\t<key>Request</key>\n\t<string>QueryType</string>\n</dict>\n</plist>\n","payload_hex":"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","method":"","user_agent":"","community_id":"1:37SpKpKeTLSNB/3o+SJPNxmMoxE=","ja3":"","session":"1206194f-9a8a-4f0a-a31e-a6a361e082fa","seq":1,"duration_ms":101,"bytes_in":339,"bytes_out":12,"enriched":{"digest":"feba376568ada340","strings":["O<?xml version=\"1.0\" encoding=\"UTF-8\"?>","<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/…","<plist version=\"1.0\">","<dict>","<key>Label</key>","<string>lockdown-probe</string>","<key>ProtocolVersion</key>","<string>2</string>","<key>Request</key>","<string>QueryType</string>"],"iocs":{"urls":["http://www.apple.com/DTDs/…"],"domains":["www.apple.com"],"paths":["/www.apple.com/DTDs"]}}}],"http_methods":[],"distinct_ports_total":1,"top_paths":[],"distinct_paths_total":0,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-07-28T22:09:20.896600+00:00"}