{"ip":"66.132.195.206","total_events":16,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"censys","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (censys).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"request","label":"Request traffic","detail":"2,322 bytes sent","bytes_sent":2322,"session_seconds":11,"persistent":false}},"first_seen":"2026-10-08T05:26:13","last_seen":"2026-10-10T21:27:46","events_24h":8,"events_7d":16,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":398324,"org":"Censys, Inc."},"source_domain":"206.195.132.66.censys-scanner.com","known_scanners":["censys","Censys"],"scanner_tag":{"key":"censys","label":"Censys","category":"research","url":"https://about.censys.io/"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":40000,"proto":"tcp","label":"","count":8},{"port":2405,"proto":"tcp","label":"","count":8}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9","t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["725543c78edf669194c11dc7a039b56e","7c1e207beb00684bbbe144f1b0abe1d5","e5c250b292fce278a62137836169e18f","5af43e5eee17271a9eb37dce2ab407a8"],"http_akin":["b11cun010_00040000_c4b2c4aa","b11cun040_00040013_608dab68","b11cun040_00040016_aa48e2c8"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":3062,"t13i1909h2_9dc949149365_97f8aa674fd9":694,"t13i131000_f57a46bbacb6_ab7e3b40a677":3083,"b11cun010_00040000_c4b2c4aa":772,"b11cun040_00040013_608dab68":4396,"b11cun040_00040016_aa48e2c8":5745},"akin_families":{},"user_agents":["Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"],"timeline":[{"date":"2026-10-08","count":8},{"date":"2026-10-10","count":8}],"recent_events":[{"timestamp":"2026-10-10T21:27:46","port":40000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:40000\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"5a7934b0-8fc6-4eb9-93b0-6403b3cee588","seq":1,"duration_ms":264,"bytes_in":182,"bytes_out":79},{"timestamp":"2026-10-10T21:27:44","port":40000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:40000\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/nxmq28hwwr4grpt9k","summary":"","payload_hex":"474554202f6e786d713238687777723467727074396b20485454502f312e310d0a486f73743a20<HONEYPOT>3a34303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"f6772fd7-bbc4-47df-b8f5-8890e0791be0","seq":1,"duration_ms":408,"bytes_in":182,"bytes_out":79},{"timestamp":"2026-10-10T21:27:40","port":40000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:40000\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"95eb9f4d-20ad-45dd-af68-3082cc2e2314","seq":1,"duration_ms":336,"bytes_in":182,"bytes_out":79},{"timestamp":"2026-10-10T21:27:35","port":40000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:40000\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sitemap.xml","summary":"","payload_hex":"474554202f736974656d61702e786d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a34303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"4a6cedc0-0f94-4c6a-ba10-ddc45786ac35","seq":1,"duration_ms":409,"bytes_in":176,"bytes_out":79},{"timestamp":"2026-10-10T21:27:01","port":40000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:40000\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"611fb861-04d6-489c-a378-15e9fa651635","seq":1,"duration_ms":207,"bytes_in":182,"bytes_out":79},{"timestamp":"2026-10-10T21:26:58","port":40000,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2"],"url_path":"","summary":"PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n\u0000\u0000\u0018\u0004\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0004\u0000\u0000Bh\u0000\u0006\u0000\u0004\u0000\u0000\u0000\u0003\u0000\u0000\u0000\n","payload_hex":"505249202a20485454502f322e300d0a0d0a534d0d0a0d0a00001804000000000000020000000000040000426800060004000000030000000a","method":"","user_agent":"","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"14230a88-295f-486c-9b38-cf16cac524ba","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":14,"enriched":{"digest":"a89d180d93c3b6d2","strings":["PRI * HTTP/2.0"]}},{"timestamp":"2026-10-10T21:26:43","port":40000,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:40000\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"676ba8bb-eb58-433c-aced-0b0524c53189","seq":1,"duration_ms":100,"bytes_in":165,"bytes_out":79},{"timestamp":"2026-10-10T21:26:39","port":40000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:40000\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34303030300d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"1fcf9fc7-47a7-41b3-80ef-fce25b772f7b","seq":1,"duration_ms":101,"bytes_in":45,"bytes_out":79},{"timestamp":"2026-10-08T05:26:42","port":2405,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2405\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323430350d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"67b39cec-9953-4441-8812-194a842cd268","seq":1,"duration_ms":167,"bytes_in":180,"bytes_out":79},{"timestamp":"2026-10-08T05:26:41","port":2405,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:2405\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/83i8fhyl_30r","summary":"","payload_hex":"474554202f383369386668796c5f33307220485454502f312e310d0a486f73743a20<HONEYPOT>3a323430350d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"a4442628-41ef-446b-a3c5-80a6ffb97b94","seq":1,"duration_ms":179,"bytes_in":175,"bytes_out":79}],"http_methods":[{"method":"GET","count":14}],"distinct_ports_total":2,"top_paths":[{"path":"/favicon.ico","count":6,"ports":2},{"path":"/","count":4,"ports":2},{"path":"/83i8fhyl_30r","count":1,"ports":1},{"path":"/robots.txt","count":1,"ports":1},{"path":"/sitemap.xml","count":1,"ports":1},{"path":"/nxmq28hwwr4grpt9k","count":1,"ports":1}],"distinct_paths_total":6,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2","count":2}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:40000","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","notable":false}],"distinct_sets":3,"events_with_headers":9},"tags":[],"data_as_of":"2026-10-11T17:29:59.904744+00:00"}