{"ip":"66.132.195.207","total_events":18,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"censys","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (censys).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"request","label":"Request traffic","detail":"3,359 bytes sent","bytes_sent":3359,"session_seconds":4,"persistent":false}},"first_seen":"2026-10-08T19:05:39","last_seen":"2026-10-09T00:50:08","events_24h":18,"events_7d":18,"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":398324,"org":"Censys, Inc."},"source_domain":"207.195.132.66.censys-scanner.com","known_scanners":["censys","Censys"],"scanner_tag":{"key":"censys","label":"Censys","category":"research","url":"https://about.censys.io/"},"cve_matches":[],"malware":[],"udp":null,"top_ports":[{"port":6005,"proto":"tcp","label":"","count":9},{"port":5349,"proto":"tcp","label":"","count":9}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9","t13i131000_f57a46bbacb6_ab7e3b40a677"],"tls_client_hello":"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","tls_ja3":["5af43e5eee17271a9eb37dce2ab407a8","e5c250b292fce278a62137836169e18f","725543c78edf669194c11dc7a039b56e"],"http_akin":["b11cun010_00040000_c4b2c4aa","b11cun040_00040013_608dab68","b11cun040_00040016_aa48e2c8"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":3135,"t13i1909h2_9dc949149365_97f8aa674fd9":692,"t13i131000_f57a46bbacb6_ab7e3b40a677":3020,"b11cun010_00040000_c4b2c4aa":755,"b11cun040_00040016_aa48e2c8":5972,"b11cun040_00040013_608dab68":4463},"akin_families":{},"user_agents":["Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"],"timeline":[{"date":"2026-10-08","count":9},{"date":"2026-10-09","count":9}],"recent_events":[{"timestamp":"2026-10-09T00:50:08","port":5349,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5349\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353334390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"65d977ea-b09f-46af-8154-ac7f4990a453","seq":1,"duration_ms":298,"bytes_in":181,"bytes_out":79},{"timestamp":"2026-10-09T00:50:05","port":5349,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:5349\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/qyw3__tsviz5f","summary":"","payload_hex":"474554202f717977335f5f747376697a356620485454502f312e310d0a486f73743a20<HONEYPOT>3a353334390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"17099a38-2afb-4c81-b2c6-66bd4bfed527","seq":1,"duration_ms":293,"bytes_in":177,"bytes_out":79},{"timestamp":"2026-10-09T00:50:00","port":5349,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5349\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353334390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"9a336c22-4def-4924-96d7-de594dca8bdc","seq":1,"duration_ms":283,"bytes_in":181,"bytes_out":79},{"timestamp":"2026-10-09T00:49:57","port":5349,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:5349\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/sitemap.xml","summary":"","payload_hex":"474554202f736974656d61702e786d6c20485454502f312e310d0a486f73743a20<HONEYPOT>3a353334390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"be71b37a-1bdf-4801-8a06-c3f33bd68f3f","seq":1,"duration_ms":146,"bytes_in":175,"bytes_out":79},{"timestamp":"2026-10-09T00:49:49","port":5349,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:5349\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353334390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"f74b3d9c-7d3a-4010-88fb-81d0fb782512","seq":1,"duration_ms":100,"bytes_in":181,"bytes_out":79},{"timestamp":"2026-10-09T00:49:47","port":5349,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":["h2"],"url_path":"","summary":"PRI * HTTP/2.0\r\n\r\nSM\r\n\r\n\u0000\u0000\u0018\u0004\u0000\u0000\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0000\u0000\u0004\u0000\u0000Bh\u0000\u0006\u0000\u0004\u0000\u0000\u0000\u0003\u0000\u0000\u0000\n","payload_hex":"505249202a20485454502f322e300d0a0d0a534d0d0a0d0a00001804000000000000020000000000040000426800060004000000030000000a","method":"","user_agent":"","ja3":"5af43e5eee17271a9eb37dce2ab407a8","session":"b406a9cf-b787-4176-ae8f-eb3df9bc6f0f","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":14,"enriched":{"digest":"a89d180d93c3b6d2","strings":["PRI * HTTP/2.0"]}},{"timestamp":"2026-10-09T00:49:46","port":5349,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:5349\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353334390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"2e50cb2b-7644-43b6-bcea-8d2ababffbd9","seq":1,"duration_ms":182,"bytes_in":164,"bytes_out":79},{"timestamp":"2026-10-09T00:49:38","port":5349,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:5349\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353334390d0a0d0a","method":"GET","user_agent":"","ja3":"e5c250b292fce278a62137836169e18f","session":"bbf264b4-ad33-4204-bbd3-28b34f43627e","seq":1,"duration_ms":3107,"bytes_in":44,"bytes_out":79},{"timestamp":"2026-10-09T00:48:48","port":5349,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0001\u0000\u0000!\u0012�B[�(\u001dS�=�g\\l9","payload_hex":"000100002112a4425beb281d53d53deb675c6c39","method":"","user_agent":"","ja3":"e5c250b292fce278a62137836169e18f","session":"badecb1e-36f8-4000-8cfa-c587f79d9740","seq":1,"duration_ms":1606,"bytes_in":20,"bytes_out":14,"enriched":{"digest":"036ef8bdffbb7e23","strings":["g\\l9"]}},{"timestamp":"2026-10-08T19:06:40","port":6005,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6005\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363030350d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"a170839c-dd48-4150-9f8f-b56bb8573da5","seq":1,"duration_ms":104,"bytes_in":182,"bytes_out":79}],"http_methods":[{"method":"GET","count":14}],"distinct_ports_total":2,"top_paths":[{"path":"/favicon.ico","count":6,"ports":2},{"path":"/","count":4,"ports":2},{"path":"/sitemap.xml","count":2,"ports":2},{"path":"/hcinaol9lmm","count":1,"ports":1},{"path":"/qyw3__tsviz5f","count":1,"ports":1}],"distinct_paths_total":5,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2","count":2}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:5349","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","notable":false}],"distinct_sets":3,"events_with_headers":8},"tags":[],"data_as_of":"2026-10-09T15:04:43.497869+00:00"}