{"ip":"66.132.195.33","data_as_of":"2026-10-23T15:55:17+00:00","observed":true,"total_events":7373,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"censys","confidence":"high","network_type":null,"why":["The address is in a published scanner range (censys).","Known research and commercial scanners are labelled by operator and carry no threat verdict.","Counts include 514 interactive session(s) as well as first-packet events.","Interactive sessions: 2 interactive session(s) tried logins, none got in."],"engagement":{"level":"payload","label":"Sustained payload","detail":"710,641 bytes sent","bytes_sent":710641,"session_seconds":32,"persistent":false},"basis":"combined"},"first_seen":"2026-03-22T04:27:34","last_seen":"2026-10-23T15:11:38","events_24h":9,"events_7d":216,"interactive_sessions":514,"interactive_sessions_24h":73,"interactive_sessions_7d":452,"interactive_protocols":[{"protocol":"tls","sessions":385},{"protocol":"http","sessions":77},{"protocol":"rdp","sessions":6},{"protocol":"kerberos","sessions":3},{"protocol":"telnet","sessions":1},{"protocol":"redis","sessions":1},{"protocol":"mqtt","sessions":1},{"protocol":"mikrotik-api","sessions":1}],"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":398324,"org":"Censys, Inc."},"source_domain":"33.195.132.66.censys-scanner.com","known_scanners":["censys","Censys"],"scanner_tag":{"key":"censys","label":"Censys","category":"research","url":"https://about.censys.io/"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":514,"first_seen":"2026-10-14T21:32:46","last_seen":"2026-10-23T15:11:38","verdicts":[{"verdict":"unknown","sessions":445},{"verdict":"scan","sessions":67},{"verdict":"credential","sessions":2}],"personas":[{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5, docker@25.0.3","sessions":27},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1, docker@25.0.3","sessions":12},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, discovery@igd 1.0, fortigate@7.2.1","sessions":12},{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5","sessions":11},{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5, gitlab@19.4.2","sessions":8},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1","sessions":7},{"persona":"rdp@Windows Server 2019","sessions":6},{"persona":"kerberos@Windows Server 2016","sessions":3},{"persona":"mikrotik@6.49.10","sessions":1},{"persona":"mqtt@1.6.9","sessions":1},{"persona":"redis@7.2.4","sessions":1}],"services":[{"protocol":"tls","port":43447,"sessions":19},{"protocol":"http","port":80,"sessions":12},{"protocol":"http","port":9200,"sessions":11},{"protocol":"tls","port":45496,"sessions":10},{"protocol":"tls","port":63679,"sessions":10},{"protocol":"tls","port":23504,"sessions":10},{"protocol":"tls","port":48963,"sessions":10},{"protocol":"tls","port":42473,"sessions":10},{"protocol":"tls","port":53971,"sessions":10},{"protocol":"tls","port":15844,"sessions":10},{"protocol":"tls","port":38728,"sessions":10},{"protocol":"tls","port":29394,"sessions":10}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":67},{"technique_id":"T1078","technique_name":"Valid Accounts","tactic_id":"TA0001","tactic_name":"Initial Access","sessions":3},{"technique_id":"T1110","technique_name":"Brute Force","tactic_id":"TA0006","tactic_name":"Credential Access","sessions":2}]},"top_ports":[{"port":4443,"proto":"tcp","label":"","count":58,"sessions":0},{"port":389,"proto":"tcp","label":"LDAP","count":45,"sessions":0},{"port":18246,"proto":"tcp","label":"","count":44,"sessions":0},{"port":4839,"proto":"tcp","label":"","count":36,"sessions":0},{"port":4840,"proto":"tcp","label":"","count":35,"sessions":0},{"port":9301,"proto":"tcp","label":"","count":34,"sessions":0},{"port":61616,"proto":"tcp","label":"ActiveMQ","count":33,"sessions":0},{"port":2053,"proto":"tcp","label":"","count":31,"sessions":0},{"port":12322,"proto":"tcp","label":"","count":31,"sessions":0},{"port":1723,"proto":"tcp","label":"PPTP","count":30,"sessions":0},{"port":22922,"proto":"tcp","label":"","count":30,"sessions":0},{"port":445,"proto":"tcp","label":"SMB","count":29,"sessions":0},{"port":102,"proto":"tcp","label":"","count":28,"sessions":0},{"port":1961,"proto":"tcp","label":"","count":28,"sessions":0},{"port":2455,"proto":"tcp","label":"","count":28,"sessions":0}],"fingerprints":{"ssh_hassh":["873a5fb5fedc2d4f8638ebde4abc6cfc"],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9","t13i131000_f57a46bbacb6_ab7e3b40a677","t11i080600_dafb69683c10_583ba773bd60","t12i160700_8cdfa2d4673b_ac0d2f4ec206"],"tls_client_hello":"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","tls_ja3":["35fa0a83e466acbec1cfbb9016d550ab","725543c78edf669194c11dc7a039b56e","e5c250b292fce278a62137836169e18f","5af43e5eee17271a9eb37dce2ab407a8","62af8f57328e1a9d8cf393b15b55aa86","cb5ee0df7dce572a1bda5ba25de39d53"],"http_akin":["b11cun010_00040000_c4b2c4aa","b11cun040_00040013_608dab68","b00cun000_00000000_334359b9","b11cun040_00040016_aa48e2c8"],"interactive":{"ssh_hassh":[],"tls_ja4":["t11i080600_dafb69683c10_583ba773bd60","t12i160700_8cdfa2d4673b_ac0d2f4ec206","t13i131000_f57a46bbacb6_ab7e3b40a677","t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9"],"tls_ja3":["5af43e5eee17271a9eb37dce2ab407a8","62af8f57328e1a9d8cf393b15b55aa86","725543c78edf669194c11dc7a039b56e","cb5ee0df7dce572a1bda5ba25de39d53","e5c250b292fce278a62137836169e18f"]}},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":3247,"t13i1909h2_9dc949149365_97f8aa674fd9":767,"t13i131000_f57a46bbacb6_ab7e3b40a677":3134,"t11i080600_dafb69683c10_583ba773bd60":0,"t12i160700_8cdfa2d4673b_ac0d2f4ec206":0,"873a5fb5fedc2d4f8638ebde4abc6cfc":56,"b11cun010_00040000_c4b2c4aa":919,"b11cun040_00040013_608dab68":4345,"b11cun040_00040016_aa48e2c8":5370,"b00cun000_00000000_334359b9":392},"akin_families":{},"user_agents":["Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"],"timeline":[{"date":"2026-07-26","count":24,"sessions":0},{"date":"2026-07-27","count":49,"sessions":0},{"date":"2026-07-28","count":48,"sessions":0},{"date":"2026-07-29","count":47,"sessions":0},{"date":"2026-07-30","count":46,"sessions":0},{"date":"2026-07-31","count":16,"sessions":0},{"date":"2026-08-01","count":45,"sessions":0},{"date":"2026-08-02","count":31,"sessions":0},{"date":"2026-08-03","count":33,"sessions":0},{"date":"2026-08-04","count":9,"sessions":0},{"date":"2026-08-05","count":39,"sessions":0},{"date":"2026-08-06","count":29,"sessions":0},{"date":"2026-08-07","count":18,"sessions":0},{"date":"2026-08-08","count":64,"sessions":0},{"date":"2026-08-09","count":25,"sessions":0},{"date":"2026-08-10","count":39,"sessions":0},{"date":"2026-08-11","count":50,"sessions":0},{"date":"2026-08-12","count":18,"sessions":0},{"date":"2026-08-13","count":25,"sessions":0},{"date":"2026-08-14","count":26,"sessions":0},{"date":"2026-08-15","count":25,"sessions":0},{"date":"2026-08-16","count":59,"sessions":0},{"date":"2026-08-17","count":33,"sessions":0},{"date":"2026-08-18","count":79,"sessions":0},{"date":"2026-08-19","count":72,"sessions":0},{"date":"2026-08-20","count":26,"sessions":0},{"date":"2026-08-21","count":7,"sessions":0},{"date":"2026-08-22","count":43,"sessions":0},{"date":"2026-08-23","count":76,"sessions":0},{"date":"2026-08-24","count":17,"sessions":0},{"date":"2026-08-25","count":38,"sessions":0},{"date":"2026-08-26","count":22,"sessions":0},{"date":"2026-08-27","count":9,"sessions":0},{"date":"2026-08-28","count":24,"sessions":0},{"date":"2026-08-29","count":38,"sessions":0},{"date":"2026-08-30","count":37,"sessions":0},{"date":"2026-08-31","count":49,"sessions":0},{"date":"2026-09-01","count":69,"sessions":0},{"date":"2026-09-02","count":33,"sessions":0},{"date":"2026-09-03","count":17,"sessions":0},{"date":"2026-09-04","count":8,"sessions":0},{"date":"2026-09-05","count":25,"sessions":0},{"date":"2026-09-06","count":9,"sessions":0},{"date":"2026-09-07","count":36,"sessions":0},{"date":"2026-09-08","count":32,"sessions":0},{"date":"2026-09-09","count":25,"sessions":0},{"date":"2026-09-10","count":33,"sessions":0},{"date":"2026-09-11","count":41,"sessions":0},{"date":"2026-09-12","count":31,"sessions":0},{"date":"2026-09-13","count":37,"sessions":0},{"date":"2026-09-14","count":16,"sessions":0},{"date":"2026-09-15","count":32,"sessions":0},{"date":"2026-09-16","count":35,"sessions":0},{"date":"2026-09-17","count":6,"sessions":0},{"date":"2026-09-18","count":23,"sessions":0},{"date":"2026-09-19","count":32,"sessions":0},{"date":"2026-09-20","count":16,"sessions":0},{"date":"2026-09-21","count":16,"sessions":0},{"date":"2026-09-22","count":34,"sessions":0},{"date":"2026-09-23","count":40,"sessions":0},{"date":"2026-09-24","count":23,"sessions":0},{"date":"2026-09-25","count":16,"sessions":0},{"date":"2026-09-26","count":26,"sessions":0},{"date":"2026-09-27","count":33,"sessions":0},{"date":"2026-09-28","count":28,"sessions":0},{"date":"2026-09-29","count":65,"sessions":0},{"date":"2026-09-30","count":10,"sessions":0},{"date":"2026-10-01","count":33,"sessions":0},{"date":"2026-10-02","count":24,"sessions":0},{"date":"2026-10-03","count":40,"sessions":0},{"date":"2026-10-04","count":31,"sessions":0},{"date":"2026-10-05","count":45,"sessions":0},{"date":"2026-10-06","count":81,"sessions":0},{"date":"2026-10-07","count":32,"sessions":0},{"date":"2026-10-08","count":15,"sessions":0},{"date":"2026-10-09","count":68,"sessions":0},{"date":"2026-10-10","count":3,"sessions":0},{"date":"2026-10-11","count":38,"sessions":0},{"date":"2026-10-12","count":40,"sessions":0},{"date":"2026-10-14","count":39,"sessions":12},{"date":"2026-10-15","count":78,"sessions":10},{"date":"2026-10-16","count":8,"sessions":58},{"date":"2026-10-17","count":20,"sessions":64},{"date":"2026-10-18","count":50,"sessions":58},{"date":"2026-10-19","count":24,"sessions":128},{"date":"2026-10-20","count":33,"sessions":43},{"date":"2026-10-21","count":72,"sessions":33},{"date":"2026-10-22","count":8,"sessions":63},{"date":"2026-10-23","count":9,"sessions":45}],"recent_events":[{"timestamp":"2026-10-23T07:58:57","port":17451,"proto":"tcp","app_proto":"","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0010\u0012\u0000\u0004MQTT\u0004\u0000\u0000\n\u0000\u0006CENSYS","payload_hex":"101200044d5154540400000a000643454e535953","method":"","user_agent":"","ja3":"","session":"bf39e693-3478-49fc-9fad-8c639a9c1425","seq":1,"duration_ms":100,"bytes_in":20,"bytes_out":13,"enriched":{"digest":"a32bced17cf3ac64","label":"MQTT","strings":["MQTT","CENSYS"]}},{"timestamp":"2026-10-23T07:57:16","port":17451,"proto":"tcp","app_proto":"tls","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0000\u0000\u0000c\u0000\u0000\u0000_{\"code\":106,\"flag\":0,\"language\":\"JAVA\",\"opaque\":0,\"serializeTypeCurrentRPC\":\"JSON\",\"version\":0}","payload_hex":"000000630000005f7b22636f6465223a3130362c22666c6167223a302c226c616e6775616765223a224a415641222c226f7061717565223a302c2273657269616c697a655479706543757272656e74525043223a224a534f4e222c2276657273696f6e223a307d","method":"","user_agent":"","ja3":"e5c250b292fce278a62137836169e18f","session":"06d840e8-cef1-48e8-8290-be7fcd45960d","seq":1,"duration_ms":4784,"bytes_in":103,"bytes_out":13,"enriched":{"digest":"782e1949a2d541e2","strings":["_{\"code\":106,\"flag\":0,\"language\":\"JAVA\",\"opaque\":0,\"serializeTypeCurrentRPC\":\"JS…","c_{\"code\":106,\"flag\":0,\"language\":\"JAVA\",\"opaque\":0,\"serializeTypeCurrentRPC\":\"J…"]}},{"timestamp":"2026-10-23T05:00:24","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nQUIT\r\n","payload_hex":"2a310d0a24340d0a515549540d0a","method":"","user_agent":"","ja3":"","session":"be51990a-2c8c-4ce4-93cb-a41a68ff433c-7","seq":7,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"c8eec36f8388dba0","label":"Redis (RESP)","strings":["QUIT"]},"interactive":true},{"timestamp":"2026-10-23T05:00:24","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$11\r\nNONEXISTENT\r\n","payload_hex":"2a310d0a2431310d0a4e4f4e4558495354454e540d0a","method":"","user_agent":"","ja3":"","session":"be51990a-2c8c-4ce4-93cb-a41a68ff433c-5","seq":5,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"6a74b11849fd84cf","label":"Redis (RESP)","strings":["NONEXISTENT"]},"interactive":true},{"timestamp":"2026-10-23T05:00:23","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nINFO\r\n","payload_hex":"2a310d0a24340d0a494e464f0d0a","method":"","user_agent":"","ja3":"","session":"be51990a-2c8c-4ce4-93cb-a41a68ff433c-3","seq":3,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"2c31890b53b348f2","label":"Redis (RESP)","strings":["INFO"]},"interactive":true},{"timestamp":"2026-10-23T05:00:23","port":6379,"proto":"tcp","app_proto":"redis","app_protocol":"redis","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"*1\r\n$4\r\nPING\r\n","payload_hex":"2a310d0a24340d0a50494e470d0a","method":"","user_agent":"","ja3":"","session":"be51990a-2c8c-4ce4-93cb-a41a68ff433c-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"3311f70e8081417b","label":"Redis (RESP)","strings":["PING"]},"interactive":true},{"timestamp":"2026-10-23T00:25:13","port":6003,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6003\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363030330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"56788b2e-29a7-4bf5-a87f-8fde1e307fbd","seq":1,"duration_ms":219,"bytes_in":181,"bytes_out":78},{"timestamp":"2026-10-23T00:25:10","port":6003,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:6003\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/en49vdh81tb","summary":"","payload_hex":"474554202f656e34397664683831746220485454502f312e310d0a486f73743a20<HONEYPOT>3a363030330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"eb153dc4-adbc-48b4-8a03-e46692fa2501","seq":1,"duration_ms":116,"bytes_in":175,"bytes_out":78},{"timestamp":"2026-10-23T00:25:08","port":6003,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:6003\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363030330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"3c5d943d-c395-41da-b639-9d8291618bee","seq":1,"duration_ms":728,"bytes_in":181,"bytes_out":78},{"timestamp":"2026-10-23T00:25:03","port":6003,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:6003\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/ai/site-profile.json","summary":"","payload_hex":"474554202f61692f736974652d70726f66696c652e6a736f6e20485454502f312e310d0a486f73743a20<HONEYPOT>3a363030330d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"aca43cd3-582b-467e-a217-0dec1a18c163","seq":1,"duration_ms":234,"bytes_in":184,"bytes_out":78}],"http_methods":[{"method":"GET","count":6106},{"method":"PRI","count":37},{"method":"POST","count":8}],"distinct_ports_total":838,"top_paths":[{"path":"/favicon.ico","count":2494,"ports":735},{"path":"/","count":1805,"ports":741},{"path":"/sitemap.xml","count":143,"ports":137},{"path":"/.well-known/security.txt","count":142,"ports":138},{"path":"/security.txt","count":140,"ports":134},{"path":"/login","count":129,"ports":124},{"path":"/robots.txt","count":129,"ports":122},{"path":"/wiki","count":128,"ports":124},{"path":"*","count":37,"ports":34},{"path":"/sellers.json","count":23,"ports":20},{"path":"/ads.txt","count":19,"ports":19},{"path":"/ai/site-profile.json","count":18,"ports":17},{"path":"/app-ads.txt","count":18,"ports":18},{"path":"/version","count":10,"ports":2},{"path":"/wp-json/","count":8,"ports":8}],"distinct_paths_total":207,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2","count":1002}],"banners":[{"value":"SSH-2.0-Go","count":1}],"credentials":[],"header_profile":{"signature":["Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Connection","value":"close","notable":false},{"name":"Host","value":"<HONEYPOT>:6003","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","notable":false}],"distinct_sets":2,"events_with_headers":4},"tags":[{"tag_id":"logins","tag_type":"interactive","label":"logins","title":"Tried logins","sessions":3}]}