{"ip":"66.132.172.135","data_as_of":"2026-10-25T05:01:28+00:00","observed":true,"total_events":6621,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"censys","confidence":"high","network_type":null,"why":["The address is in a published scanner range (censys).","Known research and commercial scanners are labelled by operator and carry no threat verdict.","Held a session open for 65s, against a median of well under a second.","Counts include 589 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"483,045 bytes sent, longest session 65s","bytes_sent":483045,"session_seconds":65,"persistent":true},"basis":"combined"},"first_seen":"2026-03-19T23:10:56","last_seen":"2026-10-25T01:06:13","events_24h":36,"events_7d":224,"interactive_sessions":589,"interactive_sessions_24h":122,"interactive_sessions_7d":469,"interactive_protocols":[{"protocol":"tls","sessions":411},{"protocol":"http","sessions":108},{"protocol":"stratum","sessions":7},{"protocol":"postgres","sessions":3},{"protocol":"rdp","sessions":2},{"protocol":"pop3","sessions":1},{"protocol":"telnet","sessions":1},{"protocol":"mqtt","sessions":1},{"protocol":"sunrpc","sessions":1}],"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":398324,"org":"Censys, Inc."},"source_domain":"135.172.132.66.censys-scanner.com","known_scanners":["censys","Censys"],"scanner_tag":{"key":"censys","label":"Censys","category":"research","url":"https://about.censys.io/"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":591,"first_seen":"2026-10-14T21:50:51","last_seen":"2026-10-25T01:06:13","verdicts":[{"verdict":"unknown","sessions":469},{"verdict":"scan","sessions":122}],"personas":[{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5, gitlab@19.4.2","sessions":25},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1, gitlab@19.4.2","sessions":21},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1","sessions":20},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1, docker@25.0.3","sessions":18},{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5, docker@25.0.3","sessions":12},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, discovery@igd 1.0, fortigate@7.2.1","sessions":12},{"persona":"miner@cgminer 4.11.1","sessions":7},{"persona":"postgres@12.18","sessions":3},{"persona":"rdp@Windows Server 2016","sessions":2},{"persona":"dns@dnsmasq 2.80","sessions":2},{"persona":"mqtt@2.0.15","sessions":1}],"services":[{"protocol":"tls","port":42575,"sessions":17},{"protocol":"tls","port":46685,"sessions":10},{"protocol":"tls","port":52035,"sessions":10},{"protocol":"tls","port":45160,"sessions":10},{"protocol":"tls","port":38342,"sessions":10},{"protocol":"tls","port":20819,"sessions":10},{"protocol":"tls","port":11880,"sessions":10},{"protocol":"tls","port":36746,"sessions":10},{"protocol":"tls","port":17698,"sessions":10},{"protocol":"tls","port":47956,"sessions":10},{"protocol":"tls","port":21409,"sessions":10},{"protocol":"tls","port":61158,"sessions":10}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":122},{"technique_id":"T1078","technique_name":"Valid Accounts","tactic_id":"TA0001","tactic_name":"Initial Access","sessions":1}]},"top_ports":[{"port":139,"proto":"tcp","label":"SMB","count":43,"sessions":0},{"port":1244,"proto":"tcp","label":"","count":40,"sessions":0},{"port":4840,"proto":"tcp","label":"","count":36,"sessions":0},{"port":44819,"proto":"tcp","label":"","count":32,"sessions":0},{"port":5001,"proto":"tcp","label":"","count":32,"sessions":0},{"port":57722,"proto":"tcp","label":"","count":32,"sessions":0},{"port":113,"proto":"tcp","label":"","count":30,"sessions":0},{"port":1099,"proto":"tcp","label":"","count":30,"sessions":0},{"port":2454,"proto":"tcp","label":"","count":30,"sessions":0},{"port":2,"proto":"tcp","label":"","count":29,"sessions":0},{"port":22122,"proto":"tcp","label":"","count":29,"sessions":0},{"port":44818,"proto":"tcp","label":"","count":28,"sessions":0},{"port":9142,"proto":"tcp","label":"","count":27,"sessions":0},{"port":4839,"proto":"tcp","label":"","count":27,"sessions":0},{"port":18245,"proto":"tcp","label":"","count":27,"sessions":0}],"fingerprints":{"ssh_hassh":["873a5fb5fedc2d4f8638ebde4abc6cfc"],"tls_ja4":["t13d190900_9dc949149365_97f8aa674fd9","t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9","t13i131000_f57a46bbacb6_ab7e3b40a677","t12d3411h9_a634f799a498_52c4d8bb91c9","t12d3511h9_66c735deec94_52c4d8bb91c9","t12d6911hq_ea0618708e31_52c4d8bb91c9","t12d6912h9_ea0618708e31_1da015a32102","t12d6912hq_ea0618708e31_1da015a32102"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e","ae2a25e9a0c2e9ecb596d03efbf0201f","e5c250b292fce278a62137836169e18f","5af43e5eee17271a9eb37dce2ab407a8","013c30c8ce44c8b27e9ceb2a14db7283","03a3ad27040f733ee5c9915e0903d028","1289771a3fce256d5fb4cb5c95b43ee6","a96dc3876784813c57d302241e620acd","db8d4ad49cb378fa370b43a61a9b06b6"],"http_akin":["b11cun010_00040000_c4b2c4aa","b11cun040_00040013_608dab68","b00cun000_00000000_334359b9","b11cun040_00040016_aa48e2c8"],"interactive":{"ssh_hassh":[],"tls_ja4":["t12d3411h9_a634f799a498_52c4d8bb91c9","t12d3511h9_66c735deec94_52c4d8bb91c9","t12d6911hq_ea0618708e31_52c4d8bb91c9","t12d6912h9_ea0618708e31_1da015a32102","t12d6912hq_ea0618708e31_1da015a32102"],"tls_ja3":["013c30c8ce44c8b27e9ceb2a14db7283","03a3ad27040f733ee5c9915e0903d028","1289771a3fce256d5fb4cb5c95b43ee6","a96dc3876784813c57d302241e620acd","db8d4ad49cb378fa370b43a61a9b06b6"]}},"fingerprint_peers":{"t13d190900_9dc949149365_97f8aa674fd9":35,"t13i190800_9dc949149365_97f8aa674fd9":3264,"t13i1909h2_9dc949149365_97f8aa674fd9":785,"t13i131000_f57a46bbacb6_ab7e3b40a677":3149,"t12d3411h9_a634f799a498_52c4d8bb91c9":0,"t12d3511h9_66c735deec94_52c4d8bb91c9":0,"t12d6911hq_ea0618708e31_52c4d8bb91c9":0,"t12d6912h9_ea0618708e31_1da015a32102":0,"t12d6912hq_ea0618708e31_1da015a32102":0,"873a5fb5fedc2d4f8638ebde4abc6cfc":49,"b11cun010_00040000_c4b2c4aa":936,"b11cun040_00040013_608dab68":4331,"b00cun000_00000000_334359b9":395,"b11cun040_00040016_aa48e2c8":5523},"akin_families":{},"user_agents":["Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"],"timeline":[{"date":"2026-09-18","count":9,"sessions":0},{"date":"2026-09-19","count":63,"sessions":0},{"date":"2026-09-20","count":42,"sessions":0},{"date":"2026-09-21","count":41,"sessions":0},{"date":"2026-09-22","count":39,"sessions":0},{"date":"2026-09-23","count":38,"sessions":0},{"date":"2026-09-25","count":57,"sessions":0},{"date":"2026-09-26","count":64,"sessions":0},{"date":"2026-09-27","count":41,"sessions":0},{"date":"2026-09-28","count":41,"sessions":0},{"date":"2026-09-29","count":48,"sessions":0},{"date":"2026-09-30","count":58,"sessions":0},{"date":"2026-10-01","count":72,"sessions":0},{"date":"2026-10-02","count":40,"sessions":0},{"date":"2026-10-03","count":38,"sessions":0},{"date":"2026-10-04","count":16,"sessions":0},{"date":"2026-10-05","count":51,"sessions":0},{"date":"2026-10-06","count":52,"sessions":0},{"date":"2026-10-07","count":33,"sessions":0},{"date":"2026-10-08","count":52,"sessions":0},{"date":"2026-10-09","count":54,"sessions":0},{"date":"2026-10-10","count":48,"sessions":0},{"date":"2026-10-11","count":16,"sessions":0},{"date":"2026-10-12","count":39,"sessions":0},{"date":"2026-10-13","count":31,"sessions":0},{"date":"2026-10-14","count":40,"sessions":7},{"date":"2026-10-15","count":24,"sessions":50},{"date":"2026-10-16","count":48,"sessions":20},{"date":"2026-10-17","count":59,"sessions":43},{"date":"2026-10-18","count":31,"sessions":59},{"date":"2026-10-19","count":41,"sessions":66},{"date":"2026-10-20","count":49,"sessions":54},{"date":"2026-10-21","count":24,"sessions":74},{"date":"2026-10-22","count":26,"sessions":29},{"date":"2026-10-23","count":32,"sessions":65},{"date":"2026-10-24","count":36,"sessions":112},{"date":"2026-10-25","count":0,"sessions":10}],"recent_events":[{"timestamp":"2026-10-24T20:08:11","port":43053,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:43053\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34333035330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"fe6e6251-864c-4f94-b3ac-b3c67e91d39a","seq":1,"duration_ms":102,"bytes_in":182,"bytes_out":79},{"timestamp":"2026-10-24T20:08:10","port":43053,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:43053\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/q6o97ptpg","summary":"","payload_hex":"474554202f71366f39377074706720485454502f312e310d0a486f73743a20<HONEYPOT>3a34333035330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"d754a62a-1d31-4178-87e1-5382101d1766","seq":1,"duration_ms":178,"bytes_in":174,"bytes_out":79},{"timestamp":"2026-10-24T20:08:06","port":43053,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:43053\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34333035330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"e147c100-5041-47c5-825f-4e18abae0f9e","seq":1,"duration_ms":726,"bytes_in":182,"bytes_out":79},{"timestamp":"2026-10-24T20:08:03","port":43053,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:43053\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/app-ads.txt","summary":"","payload_hex":"474554202f6170702d6164732e74787420485454502f312e310d0a486f73743a20<HONEYPOT>3a34333035330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"04f5fa2c-db5a-4915-bf62-b4dd0a278352","seq":1,"duration_ms":217,"bytes_in":176,"bytes_out":79},{"timestamp":"2026-10-24T20:06:43","port":43053,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:43053\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34333035330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"5ec9ff74-c1a2-4463-990b-b311d6a03ac3","seq":1,"duration_ms":173,"bytes_in":182,"bytes_out":79},{"timestamp":"2026-10-24T20:06:32","port":43053,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:43053\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34333035330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"155427d5-c11d-4772-aeed-b3629856872e","seq":1,"duration_ms":287,"bytes_in":165,"bytes_out":79},{"timestamp":"2026-10-24T20:06:14","port":43053,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:43053\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34333035330d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"3b5f3861-6ca3-4efa-87ea-7d3686da4c35","seq":1,"duration_ms":100,"bytes_in":45,"bytes_out":79},{"timestamp":"2026-10-24T14:09:04","port":31321,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:31321\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"1.3","alpn":[],"url_path":"/78ifo1053ugx_8163","summary":"","payload_hex":"474554202f373869666f313035337567785f3831363320485454502f312e310d0a486f73743a203c484f4e4559504f543e3a33313332310d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"b8c6d14d-ac84-4956-bb73-0c8763497234-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-24T14:09:00","port":31321,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:31321\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a203c484f4e4559504f543e3a33313332310d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"79f0076d-fa10-4430-b486-97db478e902f-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-24T14:08:57","port":31321,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:31321\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"1.3","alpn":[],"url_path":"/info.php","summary":"","payload_hex":"474554202f696e666f2e70687020485454502f312e310d0a486f73743a203c484f4e4559504f543e3a33313332310d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"bc923039-a5c7-4879-a527-0a0ef6e0efd4-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true}],"http_methods":[{"method":"GET","count":5539},{"method":"PRI","count":47},{"method":"POST","count":4}],"distinct_ports_total":742,"top_paths":[{"path":"/favicon.ico","count":2298,"ports":684},{"path":"/","count":1611,"ports":689},{"path":"/wiki","count":123,"ports":119},{"path":"/.well-known/security.txt","count":123,"ports":117},{"path":"/security.txt","count":122,"ports":120},{"path":"/login","count":120,"ports":113},{"path":"/sitemap.xml","count":118,"ports":117},{"path":"/robots.txt","count":113,"ports":109},{"path":"*","count":47,"ports":47},{"path":"/app-ads.txt","count":20,"ports":20},{"path":"/ads.txt","count":17,"ports":16},{"path":"/ai/site-profile.json","count":17,"ports":14},{"path":"/sellers.json","count":16,"ports":16},{"path":"/wp-json/","count":16,"ports":16},{"path":"/wp-content/uploads/2024/03/cropped-favicon-32x32.png","count":16,"ports":16}],"distinct_paths_total":208,"top_snis":[{"value":"pihole.chicago.vpnigo.de","count":2}],"top_hosts":[{"value":"pihole.chicago.vpnigo.de","count":2}],"top_alpns":[{"value":"h2","count":987}],"banners":[{"value":"SSH-2.0-Go","count":1}],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:43053","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","notable":false}],"distinct_sets":3,"events_with_headers":10},"tags":[{"tag_id":"logins","tag_type":"interactive","label":"logins","title":"Tried logins","sessions":1}]}