Scan-Info
worker-1 to worker-4.scan.athorion.io) appeared in your logs. This is a non-intrusive measurement of your publicly reachable services, similar to Shodan or Censys. No attacks are performed.
What we do
athorion runs a continuous, outside-in measurement of the public attack surface. Every check is passive and non-intrusive:
- TCP connect to common ports and reading the service banner
- TLS handshake to read the certificate and protocol version
- a single, benign HTTPS GET request for the response headers
- public DNS and certificate-transparency lookups (not against your host)
We never run exploits, intrusion attempts, authentication attempts, vulnerability exploitation or load tests. Version-based CVE hints come only from the observed banner, never from active testing.
From these addresses
Operated in a data centre in Germany. The measurement rate is capped, and private or reserved ranges (RFC 1918, loopback, CGNAT, multicast) are never scanned.
Opt-out
Don't want to be measured? Email us the affected IP ranges or domains at [email protected]. We add them to our global do-not-scan list within 24 hours.
Please state the ranges in CIDR notation (e.g. 203.0.113.0/24) or the affected domains. A brief confirmation that the range is yours helps us process the request.
Operator
Deep dynamics and technologies GmbH
Goldbergweg 81, 60599 Frankfurt am Main, Germany
Email: [email protected]
Legal basis for the measurement: legitimate interest in IT security and security research (Art. 6(1)(f) GDPR). More in our privacy policy and legal notice.