{"ip":"66.132.172.204","total_events":3447,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"censys","confidence":"high","network_type":null},"first_seen":"2026-03-20T02:45:27","last_seen":"2026-06-26T13:29:25","events_24h":34,"events_7d":286,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":398324,"org":"Censys, Inc."},"source_domain":"204.172.132.66.censys-scanner.com","known_scanners":["censys","Censys"],"scanner_tag":{"key":"censys","label":"Censys","category":"research","url":"https://about.censys.io/"},"cve_matches":[{"cve_id":"CVE-2020-35476","title":"OpenTSDB <=2.4.0 - Remote Code Execution","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/q"}],"top_ports":[{"port":1962,"proto":"tcp","label":"","count":38},{"port":8883,"proto":"tcp","label":"","count":36},{"port":27017,"proto":"tcp","label":"MongoDB","count":34},{"port":18245,"proto":"tcp","label":"","count":29},{"port":1963,"proto":"tcp","label":"","count":29},{"port":9601,"proto":"tcp","label":"","count":29},{"port":44817,"proto":"tcp","label":"","count":25},{"port":20548,"proto":"tcp","label":"","count":20},{"port":18246,"proto":"tcp","label":"","count":20},{"port":11211,"proto":"tcp","label":"Memcached","count":20},{"port":6009,"proto":"tcp","label":"","count":20},{"port":4839,"proto":"tcp","label":"","count":20},{"port":502,"proto":"tcp","label":"","count":20},{"port":4841,"proto":"tcp","label":"","count":20},{"port":2762,"proto":"tcp","label":"","count":18}],"fingerprints":{"ssh_hassh":["873a5fb5fedc2d4f8638ebde4abc6cfc"],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9","t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_ja3":["7c1e207beb00684bbbe144f1b0abe1d5","35fa0a83e466acbec1cfbb9016d550ab","725543c78edf669194c11dc7a039b56e"],"ja4h":["ge11nn0400_88d30a62b7ad","ge11nn0100_4740ae6347b0","po11nn0600_ed383ed8462e","ge11nn0400_9c3956fad5da"]},"fingerprint_peers":{"t13i1909h2_9dc949149365_97f8aa674fd9":1808,"t13i131000_f57a46bbacb6_ab7e3b40a677":5575,"t13i190800_9dc949149365_97f8aa674fd9":5693,"ge11nn0100_4740ae6347b0":685,"po11nn0600_ed383ed8462e":344,"ge11nn0400_9c3956fad5da":1368,"ge11nn0400_88d30a62b7ad":7863,"873a5fb5fedc2d4f8638ebde4abc6cfc":97},"user_agents":["Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"],"timeline":[{"date":"2026-03-28","count":22},{"date":"2026-03-29","count":26},{"date":"2026-03-30","count":55},{"date":"2026-03-31","count":22},{"date":"2026-04-01","count":27},{"date":"2026-04-02","count":18},{"date":"2026-04-03","count":56},{"date":"2026-04-04","count":26},{"date":"2026-04-05","count":64},{"date":"2026-04-06","count":35},{"date":"2026-04-07","count":18},{"date":"2026-04-08","count":31},{"date":"2026-04-09","count":32},{"date":"2026-04-10","count":17},{"date":"2026-04-11","count":50},{"date":"2026-04-12","count":36},{"date":"2026-04-13","count":35},{"date":"2026-04-14","count":61},{"date":"2026-04-15","count":37},{"date":"2026-04-16","count":22},{"date":"2026-04-17","count":4},{"date":"2026-04-18","count":58},{"date":"2026-04-19","count":20},{"date":"2026-04-20","count":27},{"date":"2026-04-21","count":19},{"date":"2026-04-22","count":58},{"date":"2026-04-23","count":18},{"date":"2026-04-24","count":55},{"date":"2026-04-25","count":26},{"date":"2026-04-26","count":31},{"date":"2026-04-27","count":25},{"date":"2026-04-28","count":22},{"date":"2026-04-29","count":26},{"date":"2026-04-30","count":22},{"date":"2026-05-01","count":27},{"date":"2026-05-02","count":13},{"date":"2026-05-03","count":27},{"date":"2026-05-04","count":101},{"date":"2026-05-05","count":41},{"date":"2026-05-06","count":24},{"date":"2026-05-07","count":65},{"date":"2026-05-08","count":55},{"date":"2026-05-09","count":64},{"date":"2026-05-10","count":16},{"date":"2026-05-11","count":63},{"date":"2026-05-12","count":33},{"date":"2026-05-13","count":25},{"date":"2026-05-14","count":68},{"date":"2026-05-15","count":115},{"date":"2026-05-16","count":8},{"date":"2026-05-17","count":8},{"date":"2026-05-18","count":10},{"date":"2026-05-19","count":26},{"date":"2026-05-20","count":43},{"date":"2026-05-21","count":43},{"date":"2026-05-22","count":8},{"date":"2026-05-23","count":41},{"date":"2026-05-24","count":28},{"date":"2026-05-25","count":33},{"date":"2026-05-26","count":28},{"date":"2026-05-27","count":16},{"date":"2026-05-28","count":17},{"date":"2026-05-29","count":42},{"date":"2026-05-30","count":18},{"date":"2026-05-31","count":49},{"date":"2026-06-01","count":44},{"date":"2026-06-02","count":39},{"date":"2026-06-03","count":49},{"date":"2026-06-04","count":26},{"date":"2026-06-05","count":25},{"date":"2026-06-06","count":34},{"date":"2026-06-07","count":56},{"date":"2026-06-08","count":17},{"date":"2026-06-09","count":18},{"date":"2026-06-11","count":16},{"date":"2026-06-13","count":13},{"date":"2026-06-14","count":15},{"date":"2026-06-15","count":20},{"date":"2026-06-16","count":61},{"date":"2026-06-17","count":8},{"date":"2026-06-18","count":57},{"date":"2026-06-19","count":42},{"date":"2026-06-20","count":26},{"date":"2026-06-21","count":24},{"date":"2026-06-22","count":80},{"date":"2026-06-23","count":40},{"date":"2026-06-24","count":26},{"date":"2026-06-25","count":46},{"date":"2026-06-26","count":26}],"recent_events":[{"timestamp":"2026-06-26T13:29:25","port":1194,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1194\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313139340d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","community_id":"1:yt5RdV2nTNi2x77QT8mHM3xrHkc=","ja3":"725543c78edf669194c11dc7a039b56e","session":"76e79c83-eba7-4143-9723-559426b4bbf9","seq":1,"duration_ms":100,"bytes_in":180,"bytes_out":79},{"timestamp":"2026-06-26T13:29:25","port":1194,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1194\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/ak9gwicwi5orjl","summary":"","payload_hex":"474554202f616b39677769637769356f726a6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a313139340d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","community_id":"1:jLNcdH9H+zKenrXaWojr7Q9dpQc=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"00ebea14-b213-4798-8abe-b29fc0cf8d2f","seq":1,"duration_ms":207,"bytes_in":177,"bytes_out":79},{"timestamp":"2026-06-26T13:29:25","port":1194,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1194\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313139340d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","community_id":"1:IVclOlxDyAQhx+HGM2U23wtGojE=","ja3":"725543c78edf669194c11dc7a039b56e","session":"d888797b-1ecf-47b4-a823-8c892981059e","seq":1,"duration_ms":101,"bytes_in":180,"bytes_out":79},{"timestamp":"2026-06-26T13:29:24","port":1194,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1194\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sitemap.xml","summary":"","payload_hex":"474554202f736974656d61702e786d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a313139340d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","community_id":"1:3VBmS/yKStyINIhS0gmNy4pGdkA=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"c41a467a-ed0c-4784-8904-07ac33c5c478","seq":1,"duration_ms":100,"bytes_in":174,"bytes_out":79},{"timestamp":"2026-06-26T13:29:14","port":1194,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:1194\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313139340d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","community_id":"1:rOY1e97iiubdJEakeMQgf05/PVM=","ja3":"725543c78edf669194c11dc7a039b56e","session":"ae46a3f6-8f3b-49e0-8d2b-0a7c856d902c","seq":1,"duration_ms":133,"bytes_in":180,"bytes_out":79},{"timestamp":"2026-06-26T13:29:14","port":1194,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2"],"url_path":"","summary":"PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n\u0000\u0000\u0018\u0004\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0004\u0000\u0000Bh\u0000\u0006\u0000\u0004\u0000\u0000\u0000\u0003\u0000\u0000\u0000\n","payload_hex":"505249202a20485454502f322e300d0a0d0a534d0d0a0d0a00001804000000000000020000000000040000426800060004000000030000000a","method":"","user_agent":"","community_id":"1:Yu3k4nv+bct1ZWjBlN51WJaPp+E=","ja3":"7c1e207beb00684bbbe144f1b0abe1d5","session":"e4c7d9e7-92dd-47c8-9786-4466eb392df7","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":14,"enriched":{"digest":"a89d180d93c3b6d2","strings":["PRI * HTTP/2.0"]}},{"timestamp":"2026-06-26T13:29:14","port":1194,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:1194\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313139340d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","community_id":"1:Ew9B1xm80fCQipU+5Vx1cCQQ/Ls=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"cf0a0193-2c81-4202-ac77-2615896d4338","seq":1,"duration_ms":101,"bytes_in":163,"bytes_out":79},{"timestamp":"2026-06-26T13:29:03","port":1194,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:1194\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313139340d0a0d0a","method":"GET","user_agent":"","community_id":"1:r02ayOqRUdq2JVcXz9KlxWJuHKE=","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"f31500c5-5049-4377-9892-9d91eb905127","seq":1,"duration_ms":3250,"bytes_in":43,"bytes_out":79},{"timestamp":"2026-06-26T13:28:53","port":1194,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u000e8L$��\"ۿc\u0000\u0000\u0000\u0000\u0000","payload_hex":"000e384c24ccdb22dbbf630000000000","method":"","user_agent":"","community_id":"1:Ea1XcfnvPZ2z12OzwM7GeXuLOMU=","ja3":"","session":"f25699f3-2905-47b5-a7bf-10e9de1570a3","seq":1,"duration_ms":100,"bytes_in":16,"bytes_out":14},{"timestamp":"2026-06-26T13:28:52","port":1194,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0000\u000e\bL$��\"ۿc\u0000\u0000\u0000\u0000\u0000","payload_hex":"000e084c24ccdb22dbbf630000000000","method":"","user_agent":"","community_id":"1:wCxUkMSnMBRhBtXXydPrnTuhO4Q=","ja3":"","session":"322cebf6-18ca-45f5-92fb-0a3848ebae66","seq":1,"duration_ms":100,"bytes_in":16,"bytes_out":14}],"http_methods":[{"method":"GET","count":2609},{"method":"POST","count":3}],"distinct_ports_total":383,"top_paths":[{"path":"/favicon.ico","count":1089,"ports":343},{"path":"/","count":762,"ports":345},{"path":"/.well-known/security.txt","count":71,"ports":70},{"path":"/robots.txt","count":69,"ports":68},{"path":"/sitemap.xml","count":67,"ports":65},{"path":"/security.txt","count":65,"ports":63},{"path":"/wiki","count":55,"ports":54},{"path":"/login","count":51,"ports":51},{"path":"/ipp","count":2,"ports":1},{"path":"/version","count":2,"ports":1},{"path":"/uol7ddlzosk0n11mv","count":1,"ports":1},{"path":"/j5jtkov4esye","count":1,"ports":1},{"path":"/pxzv5z4zgd5uskvj","count":1,"ports":1},{"path":"/9l486m2z9h1h1jx6","count":1,"ports":1},{"path":"/md8qg4tswegtrxihx","count":1,"ports":1}],"distinct_paths_total":200,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2","count":529}],"banners":[{"value":"SSH-2.0-Go","count":2}],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:1194","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","notable":false}],"distinct_sets":3,"events_with_headers":7},"tags":[{"tag_id":"CVE-2020-35476","tag_type":"cve","title":"OpenTSDB <=2.4.0 - Remote Code Execution","severity":"critical","actively_exploited":false,"match_field":"url_path","matched_pattern":"/q","reference_urls":["https://github.com/OpenTSDB/opentsdb/issues/2051","http://packetstormsecurity.com/files/170331/OpenTSDB-2.4.0-Command-Injection.html","https://nvd.nist.gov/vuln/detail/CVE-2020-35476"]}],"data_as_of":"2026-06-26T15:10:18.485854+00:00"}