{"ip":"138.246.253.24","total_events":92,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"universities","confidence":"high","network_type":null},"first_seen":"2026-02-18T13:41:43","last_seen":"2026-06-17T07:49:35","events_24h":0,"events_7d":9,"geo":{"country_code":"DE","country_name":"Germany","region":"Bavaria","city":"Munich","lat":48.1732,"lon":11.5706,"asn":12816,"org":"Leibniz-Rechenzentrum"},"source_domain":"planetlab24.gino-research.net.in.tum.de","known_scanners":["universities"],"scanner_tag":null,"cve_matches":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":92}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i191000_9dc949149365_be53661681a4"],"tls_ja3":["f7e86b32bc0db5b6a594afac7cfc570c"],"ja4h":["ge11nn0200_3ed38b250d3d"]},"fingerprint_peers":{"t13i191000_9dc949149365_be53661681a4":2,"ge11nn0200_3ed38b250d3d":1564},"user_agents":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36"],"timeline":[{"date":"2026-03-24","count":1},{"date":"2026-03-25","count":2},{"date":"2026-03-31","count":1},{"date":"2026-04-01","count":2},{"date":"2026-04-08","count":3},{"date":"2026-04-15","count":3},{"date":"2026-04-21","count":2},{"date":"2026-04-22","count":1},{"date":"2026-04-28","count":2},{"date":"2026-04-29","count":1},{"date":"2026-05-05","count":7},{"date":"2026-05-06","count":2},{"date":"2026-05-12","count":8},{"date":"2026-05-13","count":1},{"date":"2026-05-20","count":8},{"date":"2026-05-26","count":1},{"date":"2026-05-27","count":7},{"date":"2026-06-02","count":7},{"date":"2026-06-03","count":2},{"date":"2026-06-09","count":6},{"date":"2026-06-10","count":3},{"date":"2026-06-16","count":2},{"date":"2026-06-17","count":7}],"recent_events":[{"timestamp":"2026-06-17T07:49:35","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130332e302e353036302e313334205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36","community_id":"1:cqV656GoaIFhlBCnT2jTFR/Dy+s=","ja3":"f7e86b32bc0db5b6a594afac7cfc570c","session":"e8f052c9-74b7-4fc8-b467-ab7ecdff3ed3","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":79},{"timestamp":"2026-06-17T07:49:19","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130332e302e353036302e313334205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36","community_id":"1:AFETRr0ffS0N+5khv62pz26ykXw=","ja3":"f7e86b32bc0db5b6a594afac7cfc570c","session":"ee5c6f27-e532-4195-93d7-d6ee675f7d61","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":79},{"timestamp":"2026-06-17T07:49:11","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130332e302e353036302e313334205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36","community_id":"1:0A57Yscpf533HTfRWVnOleAjOkI=","ja3":"f7e86b32bc0db5b6a594afac7cfc570c","session":"cb67f484-12fe-4225-a047-8c13f30e4f78","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":79},{"timestamp":"2026-06-17T07:49:07","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130332e302e353036302e313334205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36","community_id":"1:LDaSkfnJKuPIlA2jBunFO6v6kxo=","ja3":"f7e86b32bc0db5b6a594afac7cfc570c","session":"5737ea8f-d50b-4e6e-bde0-833042c73fee","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":79},{"timestamp":"2026-06-17T07:49:05","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130332e302e353036302e313334205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36","community_id":"1:3NBb/wVOnH4bbGmEXU5KB5pm96o=","ja3":"f7e86b32bc0db5b6a594afac7cfc570c","session":"9168fd6a-463a-43bd-8f1c-aee670d1937b","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":79},{"timestamp":"2026-06-17T07:49:04","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130332e302e353036302e313334205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36","community_id":"1:NNH5EHH5U+vKdTk3moKI6TC1lug=","ja3":"f7e86b32bc0db5b6a594afac7cfc570c","session":"d19bd219-9405-49e0-8e8b-0eeb72ed8395","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":79},{"timestamp":"2026-06-17T05:50:30","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130332e302e353036302e313334205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36","community_id":"1:PX38PWCEFECLj9r3j//TLbhnXuE=","ja3":"f7e86b32bc0db5b6a594afac7cfc570c","session":"8ef87754-d310-4ac4-a892-bac513629ffe","seq":1,"duration_ms":101,"bytes_in":179,"bytes_out":79},{"timestamp":"2026-06-16T16:40:24","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130332e302e353036302e313334205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36","community_id":"1:LdKnvTJVd8UKMoJerjNwIhOjQB8=","ja3":"f7e86b32bc0db5b6a594afac7cfc570c","session":"fc45c881-5fae-4ccd-b15b-f7ba0133c4e4","seq":1,"duration_ms":100,"bytes_in":178,"bytes_out":79},{"timestamp":"2026-06-16T15:52:37","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130332e302e353036302e313334205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36","community_id":"1:+HZq/MCQ0vPu8VbwVWtlFmSe7d4=","ja3":"f7e86b32bc0db5b6a594afac7cfc570c","session":"a7ce405b-b904-4e76-91b3-16384bfb2b97","seq":1,"duration_ms":100,"bytes_in":178,"bytes_out":79},{"timestamp":"2026-06-10T12:54:08","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/robots.txt","summary":"","payload_hex":"474554202f726f626f74732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>0d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e542031302e303b2057696e36343b2078363429204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3130332e302e353036302e313334205361666172692f3533372e33360d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36","community_id":"1:yea4MirLb/zlXGTgwf8/SXhQtXk=","ja3":"f7e86b32bc0db5b6a594afac7cfc570c","session":"329a1f9e-f033-4c21-aadd-8a3b6536d04d","seq":1,"duration_ms":100,"bytes_in":178,"bytes_out":79}],"http_methods":[{"method":"GET","count":92}],"distinct_ports_total":1,"top_paths":[{"path":"/robots.txt","count":92,"ports":1}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Host","User-Agent"],"representative":[{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.5060.134 Safari/537.36","notable":false}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-06-22T04:29:53.969081+00:00"}