{"ip":"199.45.155.37","total_events":308,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"censys","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (censys).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"60,618 bytes sent","bytes_sent":60618,"session_seconds":7,"persistent":false}},"first_seen":"2026-09-12T05:58:45","last_seen":"2026-09-29T23:27:10","events_24h":24,"events_7d":148,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":398722,"org":"Censys, Inc."},"source_domain":"37.155.45.199.censys-scanner.com","known_scanners":["censys","Censys"],"scanner_tag":{"key":"censys","label":"Censys","category":"research","url":"https://about.censys.io/"},"cve_matches":[],"malware":[],"top_ports":[{"port":9090,"proto":"tcp","label":"Prometheus","count":22},{"port":445,"proto":"tcp","label":"SMB","count":10},{"port":139,"proto":"tcp","label":"SMB","count":10},{"port":1912,"proto":"tcp","label":"","count":9},{"port":37215,"proto":"tcp","label":"","count":9},{"port":20547,"proto":"tcp","label":"","count":9},{"port":28015,"proto":"tcp","label":"","count":9},{"port":2181,"proto":"tcp","label":"","count":9},{"port":9042,"proto":"tcp","label":"Cassandra","count":9},{"port":502,"proto":"tcp","label":"","count":9},{"port":18246,"proto":"tcp","label":"","count":9},{"port":4840,"proto":"tcp","label":"","count":9},{"port":41795,"proto":"tcp","label":"","count":9},{"port":103,"proto":"tcp","label":"","count":9},{"port":5986,"proto":"tcp","label":"","count":9}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9","t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["7c1e207beb00684bbbe144f1b0abe1d5","35fa0a83e466acbec1cfbb9016d550ab","725543c78edf669194c11dc7a039b56e"],"http_akin":["b11cun010_00040000_c4b2c4aa","b11cun040_00040013_608dab68","b11cun040_00040016_aa48e2c8","b11cuq050_00050805_650ae0b2"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":3151,"t13i1909h2_9dc949149365_97f8aa674fd9":632,"t13i131000_f57a46bbacb6_ab7e3b40a677":4844,"b11cun010_00040000_c4b2c4aa":649,"b11cun040_00040013_608dab68":4304,"b11cun040_00040016_aa48e2c8":6203,"b11cuq050_00050805_650ae0b2":124},"akin_families":{"b11cun040_00040013_608dab68":{"head":"b11cun040_00040013_608dab68","shapes":2,"ips":4306},"b11cun040_00040016_aa48e2c8":{"head":"b11cun040_00040016_aa48e2c8","shapes":5,"ips":6200}},"user_agents":["Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"],"timeline":[{"date":"2026-09-12","count":25},{"date":"2026-09-13","count":44},{"date":"2026-09-15","count":16},{"date":"2026-09-16","count":23},{"date":"2026-09-17","count":9},{"date":"2026-09-20","count":18},{"date":"2026-09-21","count":17},{"date":"2026-09-22","count":8},{"date":"2026-09-23","count":16},{"date":"2026-09-24","count":39},{"date":"2026-09-25","count":20},{"date":"2026-09-26","count":23},{"date":"2026-09-28","count":26},{"date":"2026-09-29","count":24}],"recent_events":[{"timestamp":"2026-09-29T23:27:10","port":103,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:103\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3130330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"6e5d11be-84c2-42dc-aeca-6e36c82d1739","seq":1,"duration_ms":122,"bytes_in":179,"bytes_out":78},{"timestamp":"2026-09-29T23:27:07","port":103,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:103\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/ayvprwxj5vh","summary":"","payload_hex":"474554202f617976707277786a35766820485454502f312e310d0a486f73743a20<HONEYPOT>3a3130330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"b9192343-5f3b-4bb2-84d6-d1f2a3902b0f","seq":1,"duration_ms":189,"bytes_in":173,"bytes_out":78},{"timestamp":"2026-09-29T23:27:01","port":103,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:103\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/.well-known/security.txt","summary":"","payload_hex":"474554202f2e77656c6c2d6b6e6f776e2f73656375726974792e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a3130330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"b08d5d2c-6180-4a5a-9848-aace8e4756dd","seq":1,"duration_ms":224,"bytes_in":186,"bytes_out":78},{"timestamp":"2026-09-29T23:26:37","port":103,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:103\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3130330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"4ccf1596-05d7-449e-b1fb-3379c6f7858c","seq":1,"duration_ms":101,"bytes_in":179,"bytes_out":78},{"timestamp":"2026-09-29T23:26:35","port":103,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2"],"url_path":"","summary":"PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n\u0000\u0000\u0018\u0004\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0004\u0000\u0000Bh\u0000\u0006\u0000\u0004\u0000\u0000\u0000\u0003\u0000\u0000\u0000\n","payload_hex":"505249202a20485454502f322e300d0a0d0a534d0d0a0d0a00001804000000000000020000000000040000426800060004000000030000000a","method":"","user_agent":"","ja3":"7c1e207beb00684bbbe144f1b0abe1d5","session":"6f31d833-709d-4719-acd8-1e82f28ccbfa","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":13,"enriched":{"digest":"a89d180d93c3b6d2","strings":["PRI * HTTP/2.0"]}},{"timestamp":"2026-09-29T23:26:34","port":103,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:103\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3130330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"34eefa7e-64a5-4faa-86c8-d36169d92a98","seq":1,"duration_ms":241,"bytes_in":162,"bytes_out":78},{"timestamp":"2026-09-29T23:26:28","port":103,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:103\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a3130330d0a0d0a","method":"GET","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"f55042ff-1fef-4007-9f83-d607574ca080","seq":1,"duration_ms":3889,"bytes_in":42,"bytes_out":78},{"timestamp":"2026-09-29T23:26:07","port":103,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0016\u0011�\u0000\u0000\u0000\u0004\u0000�\u0002\u0001\u0000�\u0002\u0001\u0002�\u0001\n","payload_hex":"0300001611e00000000400c1020100c2020102c0010a","method":"","user_agent":"","ja3":"","session":"cfefe922-d03a-4cb7-923b-d2116691d969","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"1a42acaf9034e519","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-29T23:26:02","port":103,"proto":"tcp","app_proto":"","app_protocol":"mssql-tds","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0016\u0011�\u0000\u0000\u0000\u0001\u0000�\u0001\r�\u0002\u0000\u0001�\u0002\u0000\u0001","payload_hex":"0300001611e00000000100c0010dc2020001c1020001","method":"","user_agent":"","ja3":"","session":"0acaab37-2c7f-472c-ac48-b8b4e5cc3cd1","seq":1,"duration_ms":100,"bytes_in":22,"bytes_out":13,"enriched":{"digest":"9d3ed1c4f1f757da","label":"TPKT / COTP (ISO-TSAP)"}},{"timestamp":"2026-09-29T16:02:11","port":14000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:14000\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31343030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"7c5332ee-9b47-49b9-ad09-4b194a6b19e8","seq":1,"duration_ms":261,"bytes_in":183,"bytes_out":78}],"http_methods":[{"method":"GET","count":254},{"method":"POST","count":1}],"distinct_ports_total":36,"top_paths":[{"path":"/favicon.ico","count":99,"ports":35},{"path":"/","count":71,"ports":36},{"path":"/login","count":6,"ports":6},{"path":"/sitemap.xml","count":6,"ports":6},{"path":"/sellers.json","count":4,"ports":4},{"path":"/security.txt","count":4,"ports":4},{"path":"/robots.txt","count":4,"ports":4},{"path":"/ai/site-profile.json","count":3,"ports":3},{"path":"/wiki","count":2,"ports":2},{"path":"/app-ads.txt","count":2,"ports":2},{"path":"/api/v1/label/version/values","count":2,"ports":1},{"path":"/api/v1/label/__name__/values","count":2,"ports":1},{"path":"/.well-known/security.txt","count":2,"ports":2},{"path":"/api/v1/label/goversion/values","count":2,"ports":1},{"path":"/ads.txt","count":2,"ports":2}],"distinct_paths_total":56,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2","count":34}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:103","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","notable":false}],"distinct_sets":3,"events_with_headers":7},"tags":[],"data_as_of":"2026-09-30T09:59:29.345682+00:00"}