{"ip":"66.132.195.37","data_as_of":"2026-10-24T05:16:00+00:00","observed":true,"total_events":7634,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"censys","confidence":"high","network_type":null,"why":["The address is in a published scanner range (censys).","Known research and commercial scanners are labelled by operator and carry no threat verdict.","Held a session open for 61s, against a median of well under a second.","Counts include 484 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload, held open","detail":"782,493 bytes sent, longest session 61s","bytes_sent":782493,"session_seconds":61,"persistent":true},"basis":"combined"},"first_seen":"2026-03-22T06:24:28","last_seen":"2026-10-24T02:49:50","events_24h":5,"events_7d":185,"interactive_sessions":484,"interactive_sessions_24h":55,"interactive_sessions_7d":348,"interactive_protocols":[{"protocol":"tls","sessions":328},{"protocol":"http","sessions":102},{"protocol":"imap","sessions":9},{"protocol":"minecraft","sessions":2},{"protocol":"redis","sessions":1},{"protocol":"mqtt","sessions":1},{"protocol":"mongodb","sessions":1}],"geo":{"country_code":"US","country_name":"United States","region":"","city":"","lat":37.751,"lon":-97.822,"asn":398324,"org":"Censys, Inc."},"source_domain":"37.195.132.66.censys-scanner.com","known_scanners":["censys","Censys"],"scanner_tag":{"key":"censys","label":"Censys","category":"research","url":"https://about.censys.io/"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":484,"first_seen":"2026-10-14T21:18:32","last_seen":"2026-10-24T02:49:50","verdicts":[{"verdict":"unknown","sessions":373},{"verdict":"scan","sessions":111}],"personas":[{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5, docker@25.0.3","sessions":38},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, discovery@igd 1.0, fortigate@7.2.1","sessions":32},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1","sessions":12},{"persona":"dovecot@2.3.7","sessions":9},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1, gitlab@19.4.2","sessions":8},{"persona":"nginx@1.18.0, wordpress@6.5.2, leaks@1, miner@cgminer 4.11.1, elasticsearch@8.11.1, winrm@Windows Server 2019, fortigate@7.2.1, docker@25.0.3","sessions":6},{"persona":"nginx@1.24.0, wordpress@6.5.2, leaks@2, miner@bfgminer 5.5.0, elasticsearch@6.8.23, winrm@Windows Server 2016, fortigate@7.0.5, gitlab@19.4.2","sessions":6},{"persona":"minecraft@Purpur 1.19.4","sessions":2},{"persona":"mqtt@1.6.9","sessions":1},{"persona":"mongodb@7.0.5","sessions":1},{"persona":"redis@7.2.4","sessions":1}],"services":[{"protocol":"tls","port":8020,"sessions":17},{"protocol":"tls","port":9479,"sessions":17},{"protocol":"tls","port":18246,"sessions":17},{"protocol":"tls","port":26189,"sessions":10},{"protocol":"tls","port":1000,"sessions":10},{"protocol":"tls","port":25980,"sessions":10},{"protocol":"tls","port":45271,"sessions":10},{"protocol":"tls","port":31524,"sessions":10},{"protocol":"tls","port":592,"sessions":10},{"protocol":"tls","port":58904,"sessions":10},{"protocol":"tls","port":33534,"sessions":10},{"protocol":"tls","port":26319,"sessions":10}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":111},{"technique_id":"T1078","technique_name":"Valid Accounts","tactic_id":"TA0001","tactic_name":"Initial Access","sessions":1}]},"top_ports":[{"port":1962,"proto":"tcp","label":"","count":62,"sessions":0},{"port":1201,"proto":"tcp","label":"","count":46,"sessions":0},{"port":44818,"proto":"tcp","label":"","count":44,"sessions":0},{"port":9090,"proto":"tcp","label":"Prometheus","count":44,"sessions":0},{"port":18244,"proto":"tcp","label":"","count":37,"sessions":0},{"port":4839,"proto":"tcp","label":"","count":37,"sessions":0},{"port":4840,"proto":"tcp","label":"","count":36,"sessions":0},{"port":18245,"proto":"tcp","label":"","count":35,"sessions":0},{"port":13000,"proto":"tcp","label":"","count":34,"sessions":0},{"port":6005,"proto":"tcp","label":"","count":33,"sessions":0},{"port":82,"proto":"tcp","label":"","count":32,"sessions":0},{"port":103,"proto":"tcp","label":"","count":31,"sessions":0},{"port":9201,"proto":"tcp","label":"","count":31,"sessions":0},{"port":5985,"proto":"tcp","label":"","count":30,"sessions":0},{"port":4841,"proto":"tcp","label":"","count":30,"sessions":0}],"fingerprints":{"ssh_hassh":["873a5fb5fedc2d4f8638ebde4abc6cfc"],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9","t13i131000_f57a46bbacb6_ab7e3b40a677","t11i080600_dafb69683c10_583ba773bd60","t12i160700_8cdfa2d4673b_ac0d2f4ec206"],"tls_client_hello":"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","tls_ja3":["35fa0a83e466acbec1cfbb9016d550ab","725543c78edf669194c11dc7a039b56e","7c1e207beb00684bbbe144f1b0abe1d5","e5c250b292fce278a62137836169e18f","5af43e5eee17271a9eb37dce2ab407a8","62af8f57328e1a9d8cf393b15b55aa86","cb5ee0df7dce572a1bda5ba25de39d53"],"http_akin":["b11cun010_00040000_c4b2c4aa","b11cun040_00040013_608dab68","b11cun040_00040016_aa48e2c8","b11cuq050_00050805_650ae0b2"],"interactive":{"ssh_hassh":[],"tls_ja4":["t11i080600_dafb69683c10_583ba773bd60","t12i160700_8cdfa2d4673b_ac0d2f4ec206","t13i131000_f57a46bbacb6_ab7e3b40a677","t13i190800_9dc949149365_97f8aa674fd9","t13i1909h2_9dc949149365_97f8aa674fd9"],"tls_ja3":["5af43e5eee17271a9eb37dce2ab407a8","62af8f57328e1a9d8cf393b15b55aa86","725543c78edf669194c11dc7a039b56e","cb5ee0df7dce572a1bda5ba25de39d53","e5c250b292fce278a62137836169e18f"]}},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":3245,"t13i1909h2_9dc949149365_97f8aa674fd9":769,"t13i131000_f57a46bbacb6_ab7e3b40a677":3138,"t11i080600_dafb69683c10_583ba773bd60":0,"t12i160700_8cdfa2d4673b_ac0d2f4ec206":0,"873a5fb5fedc2d4f8638ebde4abc6cfc":52,"b11cun010_00040000_c4b2c4aa":925,"b11cun040_00040013_608dab68":4347,"b11cun040_00040016_aa48e2c8":5448,"b11cuq050_00050805_650ae0b2":108},"akin_families":{},"user_agents":["Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"],"timeline":[{"date":"2026-07-26","count":38,"sessions":0},{"date":"2026-07-27","count":65,"sessions":0},{"date":"2026-07-28","count":25,"sessions":0},{"date":"2026-07-29","count":30,"sessions":0},{"date":"2026-07-30","count":22,"sessions":0},{"date":"2026-07-31","count":41,"sessions":0},{"date":"2026-08-01","count":51,"sessions":0},{"date":"2026-08-02","count":39,"sessions":0},{"date":"2026-08-03","count":24,"sessions":0},{"date":"2026-08-04","count":43,"sessions":0},{"date":"2026-08-05","count":29,"sessions":0},{"date":"2026-08-06","count":8,"sessions":0},{"date":"2026-08-07","count":23,"sessions":0},{"date":"2026-08-08","count":16,"sessions":0},{"date":"2026-08-09","count":55,"sessions":0},{"date":"2026-08-10","count":41,"sessions":0},{"date":"2026-08-11","count":17,"sessions":0},{"date":"2026-08-12","count":26,"sessions":0},{"date":"2026-08-13","count":44,"sessions":0},{"date":"2026-08-14","count":45,"sessions":0},{"date":"2026-08-15","count":67,"sessions":0},{"date":"2026-08-16","count":31,"sessions":0},{"date":"2026-08-17","count":37,"sessions":0},{"date":"2026-08-18","count":33,"sessions":0},{"date":"2026-08-19","count":33,"sessions":0},{"date":"2026-08-20","count":32,"sessions":0},{"date":"2026-08-21","count":19,"sessions":0},{"date":"2026-08-22","count":32,"sessions":0},{"date":"2026-08-23","count":37,"sessions":0},{"date":"2026-08-24","count":16,"sessions":0},{"date":"2026-08-25","count":24,"sessions":0},{"date":"2026-08-26","count":35,"sessions":0},{"date":"2026-08-27","count":17,"sessions":0},{"date":"2026-08-28","count":26,"sessions":0},{"date":"2026-08-29","count":41,"sessions":0},{"date":"2026-08-30","count":55,"sessions":0},{"date":"2026-08-31","count":21,"sessions":0},{"date":"2026-09-01","count":106,"sessions":0},{"date":"2026-09-02","count":51,"sessions":0},{"date":"2026-09-03","count":26,"sessions":0},{"date":"2026-09-04","count":49,"sessions":0},{"date":"2026-09-05","count":49,"sessions":0},{"date":"2026-09-06","count":17,"sessions":0},{"date":"2026-09-07","count":74,"sessions":0},{"date":"2026-09-08","count":55,"sessions":0},{"date":"2026-09-09","count":35,"sessions":0},{"date":"2026-09-10","count":25,"sessions":0},{"date":"2026-09-11","count":29,"sessions":0},{"date":"2026-09-12","count":7,"sessions":0},{"date":"2026-09-13","count":61,"sessions":0},{"date":"2026-09-14","count":30,"sessions":0},{"date":"2026-09-15","count":25,"sessions":0},{"date":"2026-09-17","count":63,"sessions":0},{"date":"2026-09-19","count":46,"sessions":0},{"date":"2026-09-20","count":25,"sessions":0},{"date":"2026-09-21","count":42,"sessions":0},{"date":"2026-09-22","count":73,"sessions":0},{"date":"2026-09-23","count":50,"sessions":0},{"date":"2026-09-24","count":23,"sessions":0},{"date":"2026-09-25","count":49,"sessions":0},{"date":"2026-09-26","count":33,"sessions":0},{"date":"2026-09-27","count":32,"sessions":0},{"date":"2026-09-28","count":16,"sessions":0},{"date":"2026-09-29","count":28,"sessions":0},{"date":"2026-09-30","count":33,"sessions":0},{"date":"2026-10-01","count":24,"sessions":0},{"date":"2026-10-02","count":36,"sessions":0},{"date":"2026-10-03","count":46,"sessions":0},{"date":"2026-10-04","count":30,"sessions":0},{"date":"2026-10-05","count":34,"sessions":0},{"date":"2026-10-06","count":32,"sessions":0},{"date":"2026-10-08","count":57,"sessions":0},{"date":"2026-10-09","count":48,"sessions":0},{"date":"2026-10-10","count":31,"sessions":0},{"date":"2026-10-11","count":18,"sessions":0},{"date":"2026-10-12","count":38,"sessions":0},{"date":"2026-10-13","count":48,"sessions":0},{"date":"2026-10-14","count":59,"sessions":16},{"date":"2026-10-15","count":23,"sessions":83},{"date":"2026-10-16","count":26,"sessions":27},{"date":"2026-10-17","count":16,"sessions":22},{"date":"2026-10-18","count":49,"sessions":11},{"date":"2026-10-19","count":34,"sessions":137},{"date":"2026-10-20","count":34,"sessions":66},{"date":"2026-10-21","count":33,"sessions":37},{"date":"2026-10-22","count":22,"sessions":20},{"date":"2026-10-23","count":5,"sessions":21},{"date":"2026-10-24","count":0,"sessions":44}],"recent_events":[{"timestamp":"2026-10-24T02:49:29","port":9479,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9479\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"1.3","alpn":[],"url_path":"/zb8g9gs9o82rvyj","summary":"","payload_hex":"474554202f7a623867396773396f38327276796a20485454502f312e310d0a486f73743a203c484f4e4559504f543e3a393437390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"cc27ae97-bd44-437a-a536-ec03a104116b-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-24T02:49:27","port":9479,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9479\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a203c484f4e4559504f543e3a393437390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"f8f6de3e-d33f-4531-aece-216c8e69c65c-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-24T02:49:25","port":9479,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9479\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"1.3","alpn":[],"url_path":"/phpinfo.php","summary":"","payload_hex":"474554202f706870696e666f2e70687020485454502f312e310d0a486f73743a203c484f4e4559504f543e3a393437390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"289939ed-6873-405a-b4cd-7a3ddc56038f-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-24T02:48:50","port":9479,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9479\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"1.3","alpn":[],"url_path":"/wp-json/","summary":"","payload_hex":"474554202f77702d6a736f6e2f3f5f6669656c64733d6e616d652c6465736372697074696f6e2c686f6d652c676d745f6f66667365742c74696d657a6f6e655f737472696e672c6e616d6573706163657320485454502f312e310d0a486f73743a203c484f4e4559504f543e3a393437390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"99e18139-0f0a-4fec-a6f9-059b19fa0515-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-24T02:48:23","port":9479,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9479\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"474554202f66617669636f6e2e69636f20485454502f312e310d0a486f73743a203c484f4e4559504f543e3a393437390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"a87ec15d-daac-4faf-abec-04b0dfa8e4a7-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-24T02:48:20","port":9479,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9479\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"1.3","alpn":[],"url_path":"/wp-content/uploads/2024/03/cropped-favicon-32x32.png","summary":"","payload_hex":"474554202f77702d636f6e74656e742f75706c6f6164732f323032342f30332f63726f707065642d66617669636f6e2d33327833322e706e6720485454502f312e310d0a486f73743a203c484f4e4559504f543e3a393437390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a436f6e6e656374696f6e3a20636c6f73650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"725543c78edf669194c11dc7a039b56e","session":"34780e70-c75e-4321-bcfa-1331c5881b8b-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-24T02:48:08","port":9479,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:9479\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e3a393437390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"bf420647-9f9b-43a9-bc5c-2d17a19ecbf7-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-24T02:47:51","port":9479,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"host\":\"<HONEYPOT>:9479\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e3a393437390d0a0d0a","method":"GET","user_agent":"","ja3":"","session":"672be42f-8193-4ece-a693-9bf6762be88b-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-24T02:13:19","port":17309,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:17309\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"1.3","alpn":[],"url_path":"/login","summary":"","payload_hex":"474554202f6c6f67696e20485454502f312e310d0a486f73743a203c484f4e4559504f543e3a31373330390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570743a202a2f2a0d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"41bb16c3-c4b9-459d-bfb9-bc273305cc61-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true},{"timestamp":"2026-10-24T02:13:13","port":17309,"proto":"tcp","app_proto":"http","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"gzip\",\"host\":\"<HONEYPOT>:17309\",\"user-agent\":\"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)\"}","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"1.3","alpn":[],"url_path":"/wp-json/","summary":"","payload_hex":"474554202f77702d6a736f6e2f3f5f6669656c64733d6e616d652c6465736372697074696f6e2c686f6d652c676d745f6f66667365742c74696d657a6f6e655f737472696e672c6e616d6573706163657320485454502f312e310d0a486f73743a203c484f4e4559504f543e3a31373330390d0a557365722d4167656e743a204d6f7a696c6c612f352e302028636f6d70617469626c653b2043656e737973496e73706563742f312e313b202b68747470733a2f2f61626f75742e63656e7379732e696f2f290d0a4163636570742d456e636f64696e673a20677a69700d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","ja3":"e5c250b292fce278a62137836169e18f","session":"ba5d497e-3d07-4470-999b-5b55d5eb21c7-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"interactive":true}],"http_methods":[{"method":"GET","count":6365},{"method":"PRI","count":31},{"method":"POST","count":10}],"distinct_ports_total":831,"top_paths":[{"path":"/favicon.ico","count":2585,"ports":752},{"path":"/","count":1875,"ports":753},{"path":"/sitemap.xml","count":154,"ports":150},{"path":"/security.txt","count":145,"ports":141},{"path":"/login","count":144,"ports":135},{"path":"/.well-known/security.txt","count":139,"ports":136},{"path":"/wiki","count":132,"ports":127},{"path":"/robots.txt","count":126,"ports":122},{"path":"*","count":31,"ports":31},{"path":"/app-ads.txt","count":25,"ports":21},{"path":"/ai/site-profile.json","count":21,"ports":19},{"path":"/sellers.json","count":20,"ports":17},{"path":"/ads.txt","count":18,"ports":18},{"path":"/wp-json/","count":16,"ports":16},{"path":"/wp-content/uploads/2024/03/cropped-favicon-32x32.png","count":16,"ports":16}],"distinct_paths_total":204,"top_snis":[],"top_hosts":[],"top_alpns":[{"value":"h2","count":1033}],"banners":[{"value":"SSH-2.0-Go","count":1}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Host","value":"<HONEYPOT>:9479","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)","notable":false}],"distinct_sets":4,"events_with_headers":10},"tags":[{"tag_id":"logins","tag_type":"interactive","label":"logins","title":"Tried logins","sessions":1}]}