Universal Internet DataSet

This schema outlines the fields available in Censys BigQuery Universal Internet DataSet tables.

Hosts

Path	Type	Repeated	Docs
autonomous_system	SubRecord	No	Information about the Autonomous System of this host
autonomous_system.asn	INTEGER	No	The ASN (autonomous system number) of the host's autonomous system.
autonomous_system.bgp_prefix	STRING	No	The autonomous system's CIDR.
autonomous_system.country_code	STRING	No	The autonomous system's two-letter ISO 3166-1 alpha-2 country code (US, CN, GB, RU, ...).
autonomous_system.description	STRING	No	Brief description of the autonomous system.
autonomous_system.name	STRING	No	The friendly name of the autonomous system.
autonomous_system.organization	STRING	No	The name of the organization managning the autonomous system.
dns	SubRecord	No	Information about names that resolve to this host.
dns.names	STRING	Yes	Names that resolve to the host
dns.records	SubRecord	Yes	More information for each of the names above
dns.records.key	STRING	No
dns.records.value	SubRecord	No
dns.records.value.record_type	STRING	No
dns.records.value.resolved_at	TIMESTAMP	No
dns.reverse_dns	SubRecord	No
dns.reverse_dns.names	STRING	Yes
dns.reverse_dns.resolved_at	TIMESTAMP	No
host_identifier	SubRecord	No	Structured data about a host
host_identifier.ipv4	STRING	No
host_identifier.ipv6	STRING	No
host_identifier.name	STRING	No
ipv4_int	STRING	No
ipv6_int	STRING	No
labels	STRING	Yes
location	SubRecord	No	Location of this host
location.city	STRING	No	The English name of the detected city.
location.continent	STRING	No	The English name of the detected continent (North America, Europe, Asia, South America, Africa, Oceania, Antarctica).
location.coordinates	SubRecord	No	The estimated coordinates of the detected location.
location.coordinates.latitude	FLOAT	No
location.coordinates.longitude	FLOAT	No
location.country	STRING	No	The English name of the detected country.
location.country_code	STRING	No	The detected two-letter ISO 3166-1 alpha-2 country code (US, CN, GB, RU, ...).
location.postal_code	STRING	No	The postal code (if applicable) of the detected location.
location.province	STRING	No	The state or province name of the detected location.
location.registered_country	STRING	No	The English name of the registered country.
location.registered_country_code	STRING	No	The registered country's two-letter ISO 3166-1 alpha-2 country code (US, CN, GB, RU, ...).
location.timezone	STRING	No	The IANA time zone database name of the detected location.
operating_system	SubRecord	No	Estimated host operating system, including CPE 2.3 formatted names.
operating_system.component_uniform_resource_identifiers	STRING	Yes	URIs of software components related to the identified software.
operating_system.edition	STRING	No	Captures edition-related terms applied by the vendor to the product, deprecated in CPE 2.3, but kept for backwards compatibility with CPE 2.2.
operating_system.language	STRING	No	Valid language tag as defined by [RFC5646], and should be used to define the language supported in the user interface of the product being described.
operating_system.other	SubRecord	Yes	Other attributes describing the identified software
operating_system.other.key	STRING	No
operating_system.other.value	STRING	No
operating_system.part	STRING	No	Defines the class of this software, a for application, o for operating system, h for hardware devices.
operating_system.product	STRING	No	Identifies the most common and recognizable title or name of the product.
operating_system.source	STRING	No	Defines the source that this software information was derived from.
operating_system.sw_edition	STRING	No	Characterizes how the product is tailored to a particular market or class of end users.
operating_system.target_hw	STRING	No	Characterizes the instruction set architecture (e.g., x86) on which the product being described. Bytecode-intermediate languages, such as Java bytecode for the Java Virtual Machine or Microsoft Common Intermediate Language for the Common Language Runtime virtual machine, are be considered instruction set architectures.
operating_system.target_sw	STRING	No	Characterizes the software computing environment within which the product operates.
operating_system.uniform_resource_identifier	STRING	No	CPE uri format as defined here: https://nvlpubs.nist.gov/nistpubs/Legacy/IR/nistir7695.pdf
operating_system.update	STRING	No	Vendor-Specific alphanumeric strings characterizing the particular update, service pack, or point release of the product.
operating_system.vendor	STRING	No	Identifies the person or organization that manufactured or created the product.
operating_system.version	STRING	No	Vendor-Specific alphanumeric strings characterizing the particular release version of the product.
ports_list	INTEGER	Yes	List of every open port number on the host. Each port corresponds to the service with the same index in service_names_list
service_names_list	STRING	Yes	List of all services on the host. Each service corresponds to the port with the same index in ports_list
services	SubRecord	Yes	Services running on this host
services.amqp	SubRecord	No
services.amqp.explicit_tls	BOOLEAN	No	Connected via a TLS connection after initial handshake
services.amqp.implicit_tls	BOOLEAN	No	Connected via a TLS wrapped connection (AMQPS)
services.amqp.protocol_id	SubRecord	No
services.amqp.protocol_id.id	INTEGER	No
services.amqp.protocol_id.name	STRING	No
services.amqp.version	SubRecord	No
services.amqp.version.major	INTEGER	No
services.amqp.version.minor	INTEGER	No
services.amqp.version.revision	INTEGER	No
services.any_connect	SubRecord	No
services.any_connect.aggregate_auth_version	INTEGER	No	Version number indicated by the response for config-auth exchange
services.any_connect.auth_methods	STRING	Yes	Supported methods for users to enter credentials for this VPN
services.any_connect.groups	STRING	Yes	List of groups a user can authenticate with to use this VPN
services.any_connect.raw	STRING	No	XML content of the config-auth response
services.any_connect.response_type	STRING	No	Type of the response packet received after initializing the config-auth exchange
services.bacnet	SubRecord	No
services.bacnet.application_software_revision	STRING	No
services.bacnet.description	STRING	No
services.bacnet.firmware_revision	STRING	No
services.bacnet.instance_number	INTEGER	No
services.bacnet.location	STRING	No
services.bacnet.model_name	STRING	No
services.bacnet.object_name	STRING	No
services.bacnet.vendor_id	INTEGER	No
services.bacnet.vendor_name	STRING	No
services.banner	BYTES	No	A byte array representing raw response from a host if applicable.
services.banner_hashes	STRING	Yes
services.coap	SubRecord	No
services.coap.code	STRING	No
services.coap.message_id	INTEGER	No
services.coap.message_type	STRING	No
services.coap.payload	BYTES	No
services.coap.token	BYTES	No
services.coap.version	INTEGER	No
services.cwmp	SubRecord	No
services.cwmp.http_info	SubRecord	No
services.cwmp.http_info.body_hash	BYTES	No
services.cwmp.http_info.request	SubRecord	No
services.cwmp.http_info.request.body	BYTES	No
services.cwmp.http_info.request.headers	SubRecord	Yes
services.cwmp.http_info.request.headers.key	STRING	No
services.cwmp.http_info.request.headers.value	SubRecord	No
services.cwmp.http_info.request.headers.value.headers	BYTES	Yes
services.cwmp.http_info.request.method	STRING	No
services.cwmp.http_info.request.uri	STRING	No
services.cwmp.http_info.response	SubRecord	No
services.cwmp.http_info.response.body	BYTES	No
services.cwmp.http_info.response.body_hashes	STRING	Yes
services.cwmp.http_info.response.body_size	INTEGER	No
services.cwmp.http_info.response.favicons	SubRecord	Yes
services.cwmp.http_info.response.favicons.md5_hash	STRING	No
services.cwmp.http_info.response.favicons.name	STRING	No
services.cwmp.http_info.response.favicons.size	INTEGER	No
services.cwmp.http_info.response.headers	SubRecord	Yes
services.cwmp.http_info.response.headers.key	STRING	No
services.cwmp.http_info.response.headers.value	SubRecord	No
services.cwmp.http_info.response.headers.value.headers	BYTES	Yes
services.cwmp.http_info.response.html_tags	BYTES	Yes
services.cwmp.http_info.response.protocol	STRING	No
services.cwmp.http_info.response.status_code	INTEGER	No
services.cwmp.http_info.response.status_reason	STRING	No
services.dnp3	SubRecord	No
services.dnp3.banner	BYTES	No
services.dns	SubRecord	No
services.dns.additionals	SubRecord	Yes
services.dns.additionals.name	STRING	No
services.dns.additionals.response	STRING	No
services.dns.additionals.type	STRING	No
services.dns.answers	SubRecord	Yes
services.dns.answers.name	STRING	No
services.dns.answers.response	STRING	No
services.dns.answers.type	STRING	No
services.dns.authorities	SubRecord	Yes
services.dns.authorities.name	STRING	No
services.dns.authorities.response	STRING	No
services.dns.authorities.type	STRING	No
services.dns.edns	SubRecord	No
services.dns.edns.do	BOOLEAN	No
services.dns.edns.options	STRING	Yes
services.dns.edns.udp	INTEGER	No
services.dns.edns.version	INTEGER	No
services.dns.questions	SubRecord	Yes
services.dns.questions.name	STRING	No
services.dns.questions.response	STRING	No
services.dns.questions.type	STRING	No
services.dns.r_code	STRING	No
services.dns.resolves_correctly	BOOLEAN	No
services.dns.server_type	STRING	No
services.dns.version	STRING	No
services.elasticsearch	SubRecord	No
services.elasticsearch.http_info	SubRecord	No
services.elasticsearch.http_info.headers	SubRecord	Yes
services.elasticsearch.http_info.headers.key	STRING	No
services.elasticsearch.http_info.headers.value	SubRecord	No
services.elasticsearch.http_info.headers.value.headers	BYTES	Yes
services.elasticsearch.http_info.status	STRING	No
services.elasticsearch.http_info.status_code	INTEGER	No
services.elasticsearch.node_info	SubRecord	No
services.elasticsearch.node_info.cluster_combined_info	SubRecord	No
services.elasticsearch.node_info.cluster_combined_info.filesystem	SubRecord	No
services.elasticsearch.node_info.cluster_combined_info.filesystem.available	STRING	No	Human-friendly available size
services.elasticsearch.node_info.cluster_combined_info.filesystem.available_in_bytes	INTEGER	No	Available size in bytes
services.elasticsearch.node_info.cluster_combined_info.filesystem.free	STRING	No	Human-friendly free size
services.elasticsearch.node_info.cluster_combined_info.filesystem.free_in_bytes	INTEGER	No	Free size in bytes
services.elasticsearch.node_info.cluster_combined_info.filesystem.total	STRING	No	Human-friendly total size
services.elasticsearch.node_info.cluster_combined_info.filesystem.total_in_bytes	INTEGER	No	Total size in bytes
services.elasticsearch.node_info.cluster_combined_info.indices	SubRecord	No
services.elasticsearch.node_info.cluster_combined_info.indices.count	INTEGER	No	Total number of indices with shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.indices.docs	SubRecord	No
services.elasticsearch.node_info.cluster_combined_info.indices.docs.count	INTEGER	No	Total number of non-deleted documents across all primary shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.indices.docs.deleted	INTEGER	No	Total number of deleted documents across all primary shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.indices.store	SubRecord	No
services.elasticsearch.node_info.cluster_combined_info.indices.store.reserved_in_bytes	INTEGER	No	A prediction, in bytes, of how much larger the shard stores will eventually grow due to ongoing peer recoveries, restoring snapshots, and similar activities
services.elasticsearch.node_info.cluster_combined_info.indices.store.size_in_bytes	INTEGER	No	Total size, in bytes, of all shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.name	STRING	No
services.elasticsearch.node_info.cluster_combined_info.status	STRING	No
services.elasticsearch.node_info.cluster_combined_info.timestamp	INTEGER	No
services.elasticsearch.node_info.cluster_combined_info.uuid	STRING	No
services.elasticsearch.node_info.nodes	SubRecord	Yes
services.elasticsearch.node_info.nodes.node_data	SubRecord	No
services.elasticsearch.node_info.nodes.node_data.build_flavor	STRING	No
services.elasticsearch.node_info.nodes.node_data.build_hash	STRING	No
services.elasticsearch.node_info.nodes.node_data.build_type	STRING	No
services.elasticsearch.node_info.nodes.node_data.host	STRING	No
services.elasticsearch.node_info.nodes.node_data.ingest_processors	STRING	Yes
services.elasticsearch.node_info.nodes.node_data.ip	STRING	No
services.elasticsearch.node_info.nodes.node_data.jvm	SubRecord	No
services.elasticsearch.node_info.nodes.node_data.jvm.gc	STRING	Yes
services.elasticsearch.node_info.nodes.node_data.jvm.input_args	STRING	Yes
services.elasticsearch.node_info.nodes.node_data.jvm.memory_pools	STRING	Yes
services.elasticsearch.node_info.nodes.node_data.jvm.start_time	STRING	No
services.elasticsearch.node_info.nodes.node_data.jvm.start_time_ms	INTEGER	No
services.elasticsearch.node_info.nodes.node_data.jvm.version	STRING	No
services.elasticsearch.node_info.nodes.node_data.jvm.vm_name	STRING	No
services.elasticsearch.node_info.nodes.node_data.jvm.vm_vendor	STRING	No
services.elasticsearch.node_info.nodes.node_data.jvm.vm_version	STRING	No
services.elasticsearch.node_info.nodes.node_data.modules	SubRecord	Yes
services.elasticsearch.node_info.nodes.node_data.modules.class_name	STRING	No
services.elasticsearch.node_info.nodes.node_data.modules.desc	STRING	No
services.elasticsearch.node_info.nodes.node_data.modules.elastic_version	STRING	No
services.elasticsearch.node_info.nodes.node_data.modules.ext_plugins	STRING	Yes
services.elasticsearch.node_info.nodes.node_data.modules.has_native_ctrl	BOOLEAN	No
services.elasticsearch.node_info.nodes.node_data.modules.java_version	STRING	No
services.elasticsearch.node_info.nodes.node_data.modules.name	STRING	No
services.elasticsearch.node_info.nodes.node_data.modules.version	STRING	No
services.elasticsearch.node_info.nodes.node_data.name	STRING	No
services.elasticsearch.node_info.nodes.node_data.os	SubRecord	No
services.elasticsearch.node_info.nodes.node_data.os.allocated_proc	INTEGER	No
services.elasticsearch.node_info.nodes.node_data.os.arch	STRING	No
services.elasticsearch.node_info.nodes.node_data.os.available_proc	INTEGER	No
services.elasticsearch.node_info.nodes.node_data.os.name	STRING	No
services.elasticsearch.node_info.nodes.node_data.os.pretty_name	STRING	No
services.elasticsearch.node_info.nodes.node_data.os.refresh_interval_ms	INTEGER	No
services.elasticsearch.node_info.nodes.node_data.os.version	STRING	No
services.elasticsearch.node_info.nodes.node_data.roles	STRING	Yes
services.elasticsearch.node_info.nodes.node_data.settings	SubRecord	No
services.elasticsearch.node_info.nodes.node_data.settings.cluster_name	STRING	No
services.elasticsearch.node_info.nodes.node_data.settings.node	SubRecord	No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr	SubRecord	No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.ml	SubRecord	No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.ml.enabled	STRING	No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.ml.machine_memory	STRING	No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.ml.max_open_jobs	STRING	No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.xpack_installed	STRING	No
services.elasticsearch.node_info.nodes.node_data.settings.node.name	STRING	No
services.elasticsearch.node_info.nodes.node_data.thread_pool_list	SubRecord	Yes
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.keep_alive	STRING	No
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.max	INTEGER	No
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.min	INTEGER	No
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.queue_size	INTEGER	No
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.type	STRING	No
services.elasticsearch.node_info.nodes.node_data.total_indexing_buffer	INTEGER	No
services.elasticsearch.node_info.nodes.node_data.version	STRING	No
services.elasticsearch.node_info.nodes.node_name	STRING	No
services.elasticsearch.system_info	SubRecord	No
services.elasticsearch.system_info.cluster_uuid	STRING	No	Cluster UUID
services.elasticsearch.system_info.name	STRING	No	Cluster Name
services.elasticsearch.system_info.tagline	STRING	No	Elasticsearch identifying tagline
services.elasticsearch.system_info.version	SubRecord	No
services.elasticsearch.system_info.version.build_date	STRING	No
services.elasticsearch.system_info.version.build_flavor	STRING	No
services.elasticsearch.system_info.version.build_hash	STRING	No
services.elasticsearch.system_info.version.build_snapshot	BOOLEAN	No
services.elasticsearch.system_info.version.build_type	STRING	No
services.elasticsearch.system_info.version.lucene_version	STRING	No
services.elasticsearch.system_info.version.min_idx_compat_ver	STRING	No
services.elasticsearch.system_info.version.min_wire_compat_ver	STRING	No
services.elasticsearch.system_info.version.number	STRING	No	ES Cluster version
services.extended_service_name	STRING	No	Common name for a protocol, that describes it's use of TLS. HTTP versus HTTPS, etc
services.fortigate	SubRecord	No
services.fortigate.api_version	STRING	No
services.fortigate.build	INTEGER	No
services.fortigate.http_info	SubRecord	No
services.fortigate.http_info.headers	SubRecord	Yes
services.fortigate.http_info.headers.key	STRING	No
services.fortigate.http_info.headers.value	SubRecord	No
services.fortigate.http_info.headers.value.headers	BYTES	Yes
services.fortigate.http_info.status	STRING	No	Status message received from hitting 404 /censys.inspect.
services.fortigate.http_info.status_code	INTEGER	No	Status code received from hitting /censys.inspect.
services.fortigate.serial	STRING	No
services.fortigate.status_code	INTEGER	No
services.fortigate.status_msg	STRING	No
services.fortigate.version	STRING	No
services.fox	SubRecord	No
services.fox.app_name	STRING	No
services.fox.app_version	STRING	No
services.fox.auth_agent_type	STRING	No
services.fox.brand_id	STRING	No
services.fox.hostId	STRING	No
services.fox.host_address	STRING	No
services.fox.hostname	STRING	No
services.fox.id	INTEGER	No
services.fox.language	STRING	No
services.fox.os_name	STRING	No
services.fox.os_version	STRING	No
services.fox.station_name	STRING	No
services.fox.sys_info	STRING	No
services.fox.time_zone	STRING	No
services.fox.version	STRING	No
services.fox.vm_name	STRING	No
services.fox.vm_uuid	STRING	No
services.fox.vm_version	STRING	No
services.ftp	SubRecord	No
services.ftp.auth_ssl_response	BYTES	No
services.ftp.auth_tls_response	BYTES	No
services.ftp.banner	BYTES	No
services.ftp.implicit_tls	BOOLEAN	No
services.ftp.status_code	INTEGER	No
services.ftp.status_meaning	STRING	No
services.http	SubRecord	No
services.http.body_hash	BYTES	No
services.http.request	SubRecord	No
services.http.request.body	BYTES	No
services.http.request.headers	SubRecord	Yes
services.http.request.headers.key	STRING	No
services.http.request.headers.value	SubRecord	No
services.http.request.headers.value.headers	BYTES	Yes
services.http.request.method	STRING	No
services.http.request.uri	STRING	No
services.http.response	SubRecord	No
services.http.response.body	BYTES	No
services.http.response.body_hashes	STRING	Yes
services.http.response.body_size	INTEGER	No
services.http.response.favicons	SubRecord	Yes
services.http.response.favicons.md5_hash	STRING	No
services.http.response.favicons.name	STRING	No
services.http.response.favicons.size	INTEGER	No
services.http.response.headers	SubRecord	Yes
services.http.response.headers.key	STRING	No
services.http.response.headers.value	SubRecord	No
services.http.response.headers.value.headers	BYTES	Yes
services.http.response.html_tags	BYTES	Yes
services.http.response.protocol	STRING	No
services.http.response.status_code	INTEGER	No
services.http.response.status_reason	STRING	No
services.http.supports_http2	BOOLEAN	No
services.ike	SubRecord	No
services.ike.v1	SubRecord	No
services.ike.v1.accepted_proposal	BOOLEAN	No	Did the host accept our security proposal? When false, the host responded with an error.
services.ike.v1.notify_message_types	INTEGER	Yes	Which types of NOTIFY messages did the host send us?
services.ike.v1.supported	BOOLEAN	No	Did the host respond with a valid IKE message?
services.ike.v1.vendor_ids	BYTES	Yes	The list of Vendor ID "extensions" the host claimed to support in its handshake
services.ike.v2	SubRecord	No
services.ike.v2.accepted_proposal	BOOLEAN	No
services.ike.v2.notify_message_types	INTEGER	Yes
services.ike.v2.supported	BOOLEAN	No
services.ike.v2.vendor_ids	BYTES	Yes
services.imap	SubRecord	No
services.imap.banner	BYTES	No	The IMAP banner.
services.imap.start_tls	STRING	No	The server's response to the STARTTLS command.
services.ipmi	SubRecord	No	The IPMI scan response. All section numbers refer to https://www.intel.com/content/dam/www/public/us/en/documents/product-briefs/ipmi-second-gen-interface-spec-v2-rev1-1.pdf
services.ipmi.capabilities	SubRecord	No	The Get Channel Authentication Capabilities response (section 22.13)
services.ipmi.capabilities.auth_status	SubRecord	No	The authentication status
services.ipmi.capabilities.auth_status.anonymous_login_enabled	BOOLEAN	No	If true, the server allows anonymous login.
services.ipmi.capabilities.auth_status.auth_each_message	BOOLEAN	No	If true, each message must be authenticated.
services.ipmi.capabilities.auth_status.has_anonymous_users	BOOLEAN	No	If true, the server has anonymous users.
services.ipmi.capabilities.auth_status.has_named_users	BOOLEAN	No	If true, the server supports named users.
services.ipmi.capabilities.auth_status.two_key_login_required	BOOLEAN	No	The KG field.
services.ipmi.capabilities.auth_status.user_auth_disabled	BOOLEAN	No	If true, user authentication is disabled.
services.ipmi.capabilities.channel_number	INTEGER	No	The response channel number
services.ipmi.capabilities.completion_code	SubRecord	No	The status code of the response
services.ipmi.capabilities.completion_code.name	STRING	No	The human-readable name of the code
services.ipmi.capabilities.completion_code.raw	INTEGER	No	The raw completion code
services.ipmi.capabilities.extended_capabilities	SubRecord	No	Extended auth capabilities (if present)
services.ipmi.capabilities.extended_capabilities.supports_ipmi_v1_5	BOOLEAN	No	True if IPMI v1.5 is supported
services.ipmi.capabilities.extended_capabilities.supports_ipmi_v2_0	BOOLEAN	No	True if IPMI v2.0 is supported
services.ipmi.capabilities.oem_data	INTEGER	No	The OEM-specific data
services.ipmi.capabilities.oem_id	BYTES	No	The 3-byte OEM identifier
services.ipmi.capabilities.supported_auth_types	SubRecord	No	The auth types supported by the server
services.ipmi.capabilities.supported_auth_types.extended	BOOLEAN	No	If true, the extended capabilities are present.
services.ipmi.capabilities.supported_auth_types.md2	BOOLEAN	No	True if the MD2 AuthType is supported.
services.ipmi.capabilities.supported_auth_types.md5	BOOLEAN	No	True if the MD5 AuthType is supported.
services.ipmi.capabilities.supported_auth_types.none	BOOLEAN	No	True if the None AuthType is supported.
services.ipmi.capabilities.supported_auth_types.oem_proprietary	BOOLEAN	No	True if the OEM Proprietary AuthType is supported
services.ipmi.capabilities.supported_auth_types.password	BOOLEAN	No	True if the Password AuthType is supported.
services.ipmi.capabilities.supported_auth_types.raw	INTEGER	No	The raw byte, with the bit mask etc
services.ipmi.command_payload	SubRecord	No	The IPMI command payload
services.ipmi.command_payload.checksum_error	BOOLEAN	No	This is set to true if the values of chk1 / chk2 do not match the command data
services.ipmi.command_payload.data	BYTES	No	The raw data. On success, this should be the value of the GetAuthenticationCapabilities resopnse
services.ipmi.command_payload.ipmi_command_number	SubRecord	No	The parsed IPMI command number
services.ipmi.command_payload.ipmi_command_number.name	STRING	No	The human-readable name of the cmd + NetFn
services.ipmi.command_payload.ipmi_command_number.raw	INTEGER	No	The raw value of the cmd value
services.ipmi.command_payload.network_function_code	SubRecord	No	The NetFn and LUN
services.ipmi.command_payload.network_function_code.logical_unit_number	SubRecord	No	The parsed LUN (logical unit number -- the lower 2 bits of raw)
services.ipmi.command_payload.network_function_code.logical_unit_number.name	STRING	No	The human-readable name of the LUN
services.ipmi.command_payload.network_function_code.logical_unit_number.raw	INTEGER	No	The value of the LUN (3 bits)
services.ipmi.command_payload.network_function_code.net_fn	SubRecord	No	The parsed NetFn value (the upper 6 bits of raw)
services.ipmi.command_payload.network_function_code.net_fn.is_request	BOOLEAN	No	True if the least-significant bit is zero
services.ipmi.command_payload.network_function_code.net_fn.is_response	BOOLEAN	No	True if the least-significant bit is one
services.ipmi.command_payload.network_function_code.net_fn.name	STRING	No	The human-readable name of the NetFn
services.ipmi.command_payload.network_function_code.net_fn.raw	INTEGER	No	The raw value of the NetFn (6 bits, least significant indicates request/response)
services.ipmi.command_payload.network_function_code.net_fn.value	INTEGER	No	The normalized value of the NetFn (i.e. raw & 0xfe, so it is always even)
services.ipmi.command_payload.network_function_code.raw	INTEGER	No	The raw value of the (NetFn << 2) \| LUN
services.ipmi.command_payload.requestor_sequence_number	INTEGER	No	The request sequence number.
services.ipmi.raw	BYTES	No	The raw data returned by the server
services.ipmi.rmcp_header	SubRecord	No	The RMCP header of the response, (section 13.1.3)
services.ipmi.rmcp_header.message_class	SubRecord	No	The class of the message.
services.ipmi.rmcp_header.message_class.class	INTEGER	No	Just the class part of the byte (lower 5 bits of raw)
services.ipmi.rmcp_header.message_class.is_ack	BOOLEAN	No	True if the message is an acknowledgment to a previous message.
services.ipmi.rmcp_header.message_class.name	STRING	No	The human-readable name of the message class
services.ipmi.rmcp_header.message_class.raw	INTEGER	No	The raw message class byte.
services.ipmi.rmcp_header.sequence_number	INTEGER	No	Sequence number of this packet in the session.
services.ipmi.rmcp_header.version	INTEGER	No	The version. This scanner supports version 6.
services.ipmi.session_header	SubRecord	No	The IPMI sesssion header of the response
services.ipmi.session_header.auth_code	BYTES	No	The 16-byte authentication code; not present if auth_type is None.
services.ipmi.session_header.auth_type	SubRecord	No	The authentication type for this request (see section 13.6)
services.ipmi.session_header.auth_type.name	STRING	No	The raw value of the auth_type
services.ipmi.session_header.auth_type.raw	INTEGER	No	The raw value of the auth_type
services.ipmi.session_header.auth_type.type	INTEGER	No	Just the auth type (reserved bits omitted)
services.ipmi.session_header.session_id	INTEGER	No	The ID of this sessiod.
services.ipmi.session_header.session_sequence_number	INTEGER	No	The session sequence number of this packet in the session
services.ipp	SubRecord	No
services.ipp.attribute_cups_version	STRING	No	The CUPS version, if any, specified in the list of attributes returned in a get-printer-attributes response or CUPS-get-printers response. Generally in the form 'x.y.z'.
services.ipp.attribute_ipp_versions	STRING	Yes	Each IPP version, if any, specified in the list of attributes returned in a get-printer-attributes response or CUPS-get-printers response. Always in the form 'x.y'.
services.ipp.attribute_printer_uris	STRING	Yes	Each printer URI, if any, specified in the list of attributes returned in a get-printer-attributes response or CUPS-get-printers response. Uses ipp(s) or http(s) scheme, followed by a hostname or IP, and then the path to a particular printer.
services.ipp.attributes	SubRecord	Yes	All IPP attributes included in any contentful responses obtained. Each has a name, list of values (potentially only one), and a tag denoting how the value should be interpreted.
services.ipp.attributes.name	STRING	No
services.ipp.attributes.value_tag	INTEGER	No
services.ipp.attributes.values	BYTES	Yes
services.ipp.cups_response	SubRecord	No
services.ipp.cups_response.body_hash	STRING	No	Hash of body stored in a UTF-8 string of the format <hash-type>:<hash-encoded>, e.g. sha256:a948904f2f0f479b8f8197694b30184b0d2ed1c1cd2a1ec0fb85d299a192a447
services.ipp.cups_response.header	SubRecord	Yes
services.ipp.cups_response.header.key	STRING	No
services.ipp.cups_response.header.value	SubRecord	No
services.ipp.cups_response.header.value.headers	BYTES	Yes
services.ipp.cups_response.status	STRING	No
services.ipp.cups_response.status_code	INTEGER	No
services.ipp.cups_version	STRING	No	The CUPS version, if any, specified in the Server header of an IPP get-attributes response.
services.ipp.major_version	INTEGER	No	Major component of IPP version listed in the Server header of a response to an IPP get-printer-attributes request.
services.ipp.minor_version	INTEGER	No	Minor component of IPP version listed in the Server header of a response to an IPP get-printer-attributes request.
services.ipp.response	SubRecord	No
services.ipp.response.body_hash	STRING	No	Hash of body stored in a UTF-8 string of the format <hash-type>:<hash-encoded>, e.g. sha256:a948904f2f0f479b8f8197694b30184b0d2ed1c1cd2a1ec0fb85d299a192a447
services.ipp.response.header	SubRecord	Yes
services.ipp.response.header.key	STRING	No
services.ipp.response.header.value	SubRecord	No
services.ipp.response.header.value.headers	BYTES	Yes
services.ipp.response.status	STRING	No
services.ipp.response.status_code	INTEGER	No
services.ipp.version_string	STRING	No	The specific IPP version returned in response to an IPP get-printer-attributes request. Always in the form 'IPP/x.y'
services.jarm	SubRecord	No	The JARM fingerprint of the service.
services.jarm.cipher_and_version_fingerprint	BYTES	No	The first 30 byte portion of the Jarm fingerprint.
services.jarm.cipher_and_version_fingerprint_hex	STRING	No	The first 30 byte portion of the Jarm fingerprint.
services.jarm.fingerprint	BYTES	No	The 62 byte Jarm fingerprint of the service.
services.jarm.fingerprint_hex	STRING	No	The 62 byte Jarm fingerprint of the service.
services.jarm.observed_at	TIMESTAMP	No	The time the service was fingerprinted
services.jarm.tls_extensions_sha256	BYTES	No	The second 32 byte portion of the Jarm fingerprint
services.jarm.tls_extensions_sha256_hex	STRING	No	The second 32 byte portion of the Jarm fingerprint
services.kubernetes	SubRecord	No
services.kubernetes.endpoints	SubRecord	Yes
services.kubernetes.endpoints.name	STRING	No
services.kubernetes.endpoints.self_link	STRING	No
services.kubernetes.endpoints.subsets	SubRecord	Yes
services.kubernetes.endpoints.subsets.addresses	SubRecord	Yes
services.kubernetes.endpoints.subsets.addresses.hostname	STRING	No
services.kubernetes.endpoints.subsets.addresses.ip	STRING	No
services.kubernetes.endpoints.subsets.addresses.node_name	STRING	No
services.kubernetes.endpoints.subsets.ports	SubRecord	Yes
services.kubernetes.endpoints.subsets.ports.name	STRING	No
services.kubernetes.endpoints.subsets.ports.port	INTEGER	No
services.kubernetes.endpoints.subsets.ports.protocol	STRING	No
services.kubernetes.kubernetes_dashboard_found	BOOLEAN	No	True if the dashboard is running and accessible
services.kubernetes.nodes	SubRecord	Yes
services.kubernetes.nodes.addresses	SubRecord	Yes
services.kubernetes.nodes.addresses.address	STRING	No	Node address, IP/URL.
services.kubernetes.nodes.addresses.address_type	STRING	No	Node address type, one of Hostname, ExternalIP or InternalIP.
services.kubernetes.nodes.architecture	STRING	No	The Architecture reported by the node.
services.kubernetes.nodes.container_runtime_version	STRING	No	ContainerRuntime Version reported by the node through runtime remote API (e.g. docker://1.5.0).
services.kubernetes.nodes.images	STRING	Yes	List of container images on this node
services.kubernetes.nodes.kernel_version	STRING	No	Kernel Version reported by the node from 'uname -r' (e.g. 3.16.0-0.bpo.4-amd64).
services.kubernetes.nodes.kube_proxy_version	STRING	No	KubeProxy Version reported by the node.
services.kubernetes.nodes.kubelet_version	STRING	No	Kubelet Version reported by the node.
services.kubernetes.nodes.name	STRING	No
services.kubernetes.nodes.operating_system	STRING	No	The Operating System reported by the node.
services.kubernetes.nodes.os_image	STRING	No	OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).
services.kubernetes.pod_names	STRING	Yes
services.kubernetes.roles	SubRecord	Yes
services.kubernetes.roles.name	STRING	No
services.kubernetes.roles.rules	SubRecord	Yes	Rules set for this role.
services.kubernetes.roles.rules.api_groups	STRING	Yes	APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.
services.kubernetes.roles.rules.resources	STRING	Yes	Resources is a list of resources this rule applies to. ResourceAll represents all resources
services.kubernetes.roles.rules.verbs	STRING	Yes	Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.
services.kubernetes.version_info	SubRecord	No
services.kubernetes.version_info.build_date	STRING	No	Date version was built.
services.kubernetes.version_info.compiler	STRING	No	Go Compiler used
services.kubernetes.version_info.git_commit	STRING	No	Git commit version built from.
services.kubernetes.version_info.git_tree_state	STRING	No	State of the tree when built.
services.kubernetes.version_info.git_version	STRING	No
services.kubernetes.version_info.go_version	STRING	No	Version of GO used to build version.
services.kubernetes.version_info.major	STRING	No	Kubernetes major version
services.kubernetes.version_info.minor	STRING	No	Kubernetes minor version
services.kubernetes.version_info.platform	STRING	No	Platform compiled for
services.labels	STRING	Yes
services.ldap	SubRecord	No
services.ldap.allows_anonymous_bind	BOOLEAN	No	Ability to connect with anonymous bind (empty username and password)
services.ldap.attributes	SubRecord	Yes	All root DN attributes available via anonymous bind
services.ldap.attributes.name	STRING	No	Name of the LDAP attribute in the root DN
services.ldap.attributes.values	BYTES	Yes	Values for the respective LDAP attribute
services.ldap.resultCode	INTEGER	No	Result or error code returned by LDAP instance upon bind
services.memcached	SubRecord	No
services.memcached.ascii_binding_protocol_enabled	BOOLEAN	No	True if the server responds to the ascii version of the memcached protocol.
services.memcached.binary_binding_protocol_enabled	BOOLEAN	No	True if the server responds to the binary version of the memcached protocol.
services.memcached.responds_to_udp	BOOLEAN	No	True if the server responds UDP.
services.memcached.stats	SubRecord	Yes	Server Stats
services.memcached.stats.key	STRING	No
services.memcached.stats.value	STRING	No
services.memcached.version	STRING	No	Memcached Version
services.mms	SubRecord	No
services.mms.model	STRING	No
services.mms.revision	STRING	No
services.mms.vendor	STRING	No
services.modbus	SubRecord	No
services.modbus.exception_response	SubRecord	No
services.modbus.exception_response.exception_function	INTEGER	No
services.modbus.exception_response.exception_type	INTEGER	No
services.modbus.function	INTEGER	No
services.modbus.mei_response	SubRecord	No
services.modbus.mei_response.conformity_level	INTEGER	No
services.modbus.mei_response.more_follows	BOOLEAN	No
services.modbus.mei_response.next_object_id	INTEGER	No
services.modbus.mei_response.objects	SubRecord	Yes
services.modbus.mei_response.objects.key	STRING	No
services.modbus.mei_response.objects.value	STRING	No
services.modbus.raw_response	BYTES	No
services.modbus.unit_id	INTEGER	No
services.mongodb	SubRecord	No
services.mongodb.build_info	SubRecord	No
services.mongodb.build_info.build_environment	SubRecord	No
services.mongodb.build_info.build_environment.cc	STRING	No
services.mongodb.build_info.build_environment.cc_flags	STRING	No
services.mongodb.build_info.build_environment.cxx	STRING	No
services.mongodb.build_info.build_environment.cxx_flags	STRING	No
services.mongodb.build_info.build_environment.dist_arch	STRING	No
services.mongodb.build_info.build_environment.dist_mod	STRING	No
services.mongodb.build_info.build_environment.link_flags	STRING	No
services.mongodb.build_info.build_environment.target_arch	STRING	No
services.mongodb.build_info.build_environment.target_oS	STRING	No
services.mongodb.build_info.git_version	STRING	No	Version of mongodb server
services.mongodb.build_info.version	STRING	No	Version of mongodb server
services.mongodb.is_master	SubRecord	No
services.mongodb.is_master.is_master	BOOLEAN	No
services.mongodb.is_master.logical_session_timeout_minutes	INTEGER	No
services.mongodb.is_master.max_bson_object_size	INTEGER	No
services.mongodb.is_master.max_message_size_bytes	INTEGER	No
services.mongodb.is_master.max_wire_version	INTEGER	No
services.mongodb.is_master.max_write_batch_size	INTEGER	No
services.mongodb.is_master.min_wire_version	INTEGER	No
services.mongodb.is_master.read_only	BOOLEAN	No
services.mqtt	SubRecord	No
services.mqtt.connection_ack_raw	BYTES	No	Raw CONNACK response packet
services.mqtt.connection_ack_return	SubRecord	No
services.mqtt.connection_ack_return.raw	INTEGER	No	Raw connect status value
services.mqtt.connection_ack_return.return_value	STRING	No	Connection status
services.mqtt.subscription_ack_raw	BYTES	No	Raw SUBACK response packet
services.mqtt.subscription_ack_return	SubRecord	No
services.mqtt.subscription_ack_return.raw	INTEGER	No	Raw subscription response value
services.mqtt.subscription_ack_return.return_value	STRING	No	Subscription response
services.mqtt.topics	STRING	Yes	Topics seen
services.mssql	SubRecord	No
services.mssql.encrypt_mode	STRING	No	The negotiated ENCRYPT_MODE with the server
services.mssql.instance_name	STRING	No
services.mssql.prelogin_options	SubRecord	No
services.mssql.prelogin_options.encrypt_mode	STRING	No
services.mssql.prelogin_options.fed_auth_required	BOOLEAN	No
services.mssql.prelogin_options.instance	STRING	No
services.mssql.prelogin_options.mars	BOOLEAN	No
services.mssql.prelogin_options.nonce	BYTES	No
services.mssql.prelogin_options.server_version	SubRecord	No
services.mssql.prelogin_options.server_version.build_number	INTEGER	No
services.mssql.prelogin_options.server_version.major	INTEGER	No
services.mssql.prelogin_options.server_version.minor	INTEGER	No
services.mssql.prelogin_options.thread_id	INTEGER	No
services.mssql.prelogin_options.trace_id	BYTES	No
services.mssql.prelogin_options.unknown	SubRecord	Yes
services.mssql.prelogin_options.unknown.key	INTEGER	No
services.mssql.prelogin_options.unknown.value	BYTES	No
services.mssql.version	STRING	No
services.mysql	SubRecord	No
services.mysql.auth_plugin_data	BYTES	No	Optional plugin-specific data, whose meaning depends on the value of auth_plugin_name. Returned in the initial HandshakePacket.
services.mysql.auth_plugin_name	STRING	No	The name of the authentication plugin, returned in the initial HandshakePacket.
services.mysql.capability_flags	SubRecord	Yes	The set of capability flags the server returned in the initial HandshakePacket. Each entry corresponds to a bit being set in the flags; key names correspond to the #defines in the MySQL docs.
services.mysql.capability_flags.key	STRING	No
services.mysql.capability_flags.value	BOOLEAN	No
services.mysql.character_set	INTEGER	No	The identifier for the character set the server is using. Returned in the initial HandshakePacket.
services.mysql.connection_id	INTEGER	No	The server's internal identifier for this client's connection, sent in the initial HandshakePacket.
services.mysql.error_code	INTEGER	No	Only set if there is an error returned by the server, for example if the scanner is not on the allowed hosts list.
services.mysql.error_id	STRING	No	The friendly name for the error code as defined at https://dev.mysql.com/doc/refman/8.0/en/error-messages-server.html, or UNKNOWN
services.mysql.error_message	STRING	No	Optional string describing the error. Only set if there is an error.
services.mysql.protocol_version	INTEGER	No	8-bit unsigned integer representing the server's protocol version sent in the initial HandshakePacket from the server.
services.mysql.server_version	STRING	No	The specific server version returned in the initial HandshakePacket. Often in the form x.y.z, but not always.
services.mysql.status_flags	SubRecord	Yes	The set of status flags the server returned in the initial HandshakePacket. Each entry corresponds to a bit being set in the flags; key names correspond to the #defines in the MySQL docs.
services.mysql.status_flags.key	STRING	No
services.mysql.status_flags.value	BOOLEAN	No
services.ntp	SubRecord	No
services.ntp.get_time_header	SubRecord	No
services.ntp.get_time_header.leap_indicator	INTEGER	No
services.ntp.get_time_header.mode	INTEGER	No
services.ntp.get_time_header.origin_timestamp	SubRecord	No	DEPRECATED on 2021/01/20
services.ntp.get_time_header.origin_timestamp.fraction	INTEGER	No
services.ntp.get_time_header.origin_timestamp.seconds	INTEGER	No
services.ntp.get_time_header.poll	INTEGER	No
services.ntp.get_time_header.precision	INTEGER	No
services.ntp.get_time_header.receive_timestamp	SubRecord	No	DEPRECATED on 2021/01/20
services.ntp.get_time_header.receive_timestamp.fraction	INTEGER	No
services.ntp.get_time_header.receive_timestamp.seconds	INTEGER	No
services.ntp.get_time_header.reference_id	BYTES	No
services.ntp.get_time_header.reference_timestamp	SubRecord	No	DEPRECATED on 2021/01/20
services.ntp.get_time_header.reference_timestamp.fraction	INTEGER	No
services.ntp.get_time_header.reference_timestamp.seconds	INTEGER	No
services.ntp.get_time_header.root_delay	SubRecord	No	DEPRECATED on 2021/01/20
services.ntp.get_time_header.root_delay.fraction	INTEGER	No
services.ntp.get_time_header.root_delay.seconds	INTEGER	No
services.ntp.get_time_header.root_dispersion	SubRecord	No	DEPRECATED on 2021/01/20
services.ntp.get_time_header.root_dispersion.fraction	INTEGER	No
services.ntp.get_time_header.root_dispersion.seconds	INTEGER	No
services.ntp.get_time_header.stratum	INTEGER	No
services.ntp.get_time_header.transmit_timestamp	SubRecord	No	DEPRECATED on 2021/01/20
services.ntp.get_time_header.transmit_timestamp.fraction	INTEGER	No
services.ntp.get_time_header.transmit_timestamp.seconds	INTEGER	No
services.ntp.get_time_header.version	INTEGER	No
services.ntp.time	TIMESTAMP	No	DEPRECATED on 2021/01/20
services.observed_at	TIMESTAMP	No	A UTC timestamp denoting when this service was last observed.
services.openvpn	SubRecord	No
services.openvpn.accepts_v1	BOOLEAN	No
services.openvpn.accepts_v2	BOOLEAN	No
services.oracle	SubRecord	No
services.oracle.accept_version	INTEGER	No	The protocol version number from the Accept packet.
services.oracle.connect_flags0	SubRecord	Yes	The first set of ConnectFlags returned in the Accept packet.
services.oracle.connect_flags0.key	STRING	No
services.oracle.connect_flags0.value	BOOLEAN	No
services.oracle.connect_flags1	SubRecord	Yes	The second set of ConnectFlags returned in the Accept packet.
services.oracle.connect_flags1.key	STRING	No
services.oracle.connect_flags1.value	BOOLEAN	No
services.oracle.did_resend	BOOLEAN	No	True if the server sent a Resend packet request in response to the client's first Connect packet.
services.oracle.global_service_options	SubRecord	Yes	Set of flags that the server returns in the Accept packet.
services.oracle.global_service_options.key	STRING	No
services.oracle.global_service_options.value	BOOLEAN	No
services.oracle.nsn_service_versions	SubRecord	Yes	A map from the native Service Negotation service names to the ReleaseVersion (in dotted-decimal format) in that service packet.
services.oracle.nsn_service_versions.key	STRING	No
services.oracle.nsn_service_versions.value	STRING	No
services.oracle.nsn_version	STRING	No	The ReleaseVersion string (in dotted-decimal format) in the root of the Native Service Negotiation packet.
services.oracle.redirect_target	SubRecord	Yes	The parsed connect descriptor returned by the server in the redirect packet, if one is sent.
services.oracle.redirect_target.Key	STRING	No
services.oracle.redirect_target.Value	STRING	No
services.oracle.redirect_target_raw	STRING	No	The connect descriptor returned by the server in the Redirect packet, if one is sent.
services.oracle.refuse_error	SubRecord	Yes	The parsed descriptor returned by the server in the Refuse packet; it is empty if the server does not return a Refuse packet. The keys are strings like 'DESCRIPTION.ERROR_STACK.ERROR.CODE
services.oracle.refuse_error.Key	STRING	No
services.oracle.refuse_error.Value	STRING	No
services.oracle.refuse_error_raw	STRING	No	The data from the Refuse packet returned by the server; it is empty if the server does not return a Refuse packet.
services.oracle.refuse_reason_app	STRING	No	The 'AppReason' returned by the server in the RefusePacket, as an 8-bit unsigned hex string.
services.oracle.refuse_reason_sys	STRING	No	The 'SysReason' returned by the server in the RefusePacket, as an 8-bit unsigned hex string.
services.oracle.refuse_version	STRING	No	The parsed DESCRIPTION.VSNNUM field from the RefuseError descriptor returned by the server in the Refuse packet, in dotted-decimal format.
services.pc_anywhere	SubRecord	No
services.pc_anywhere.name	STRING	No	Workstation Name, with padding bytes removed
services.pc_anywhere.nr	STRING	No	Full 'NR' query response
services.pc_anywhere.status	SubRecord	No
services.pc_anywhere.status.in_use	BOOLEAN	No	Workstation is In Use if true, Available if false
services.pc_anywhere.status.raw	BYTES	No	Full 'ST' query response
services.perspective	STRING	No	Perspective from which Censys saw this service.
services.pop3	SubRecord	No
services.pop3.banner	BYTES	No	The POP3 banner.
services.pop3.start_tls	BYTES	No	The server's response to the STARTTLS command.
services.port	INTEGER	No
services.postgres	SubRecord	No
services.postgres.authentication_mode	SubRecord	No
services.postgres.authentication_mode.mode	STRING	No
services.postgres.authentication_mode.payload	BYTES	No
services.postgres.protocol_error	SubRecord	Yes
services.postgres.protocol_error.key	STRING	No
services.postgres.protocol_error.value	STRING	No
services.postgres.server_parameters	SubRecord	Yes
services.postgres.server_parameters.key	STRING	No
services.postgres.server_parameters.value	STRING	No
services.postgres.startup_error	SubRecord	Yes
services.postgres.startup_error.key	STRING	No
services.postgres.startup_error.value	STRING	No
services.postgres.supported_versions	STRING	No
services.postgres.transaction_status	STRING	No
services.postgres.user_startup_error	SubRecord	Yes
services.postgres.user_startup_error.key	STRING	No
services.postgres.user_startup_error.value	STRING	No
services.pptp	SubRecord	No
services.pptp.bearer_message	SubRecord	No
services.pptp.bearer_message.code	INTEGER	No
services.pptp.bearer_message.meaning	STRING	No
services.pptp.error_message	SubRecord	No
services.pptp.error_message.code	INTEGER	No
services.pptp.error_message.meaning	STRING	No
services.pptp.firmware	SubRecord	No
services.pptp.firmware.major	INTEGER	No
services.pptp.firmware.minor	INTEGER	No
services.pptp.framing_message	SubRecord	No
services.pptp.framing_message.code	INTEGER	No
services.pptp.framing_message.meaning	STRING	No
services.pptp.hostname	STRING	No
services.pptp.maximum_channels	INTEGER	No
services.pptp.protocol	SubRecord	No
services.pptp.protocol.major	INTEGER	No
services.pptp.protocol.minor	INTEGER	No
services.pptp.result_message	SubRecord	No
services.pptp.result_message.code	INTEGER	No
services.pptp.result_message.meaning	STRING	No
services.pptp.vendor	STRING	No
services.prometheus	SubRecord	No
services.prometheus.errors	STRING	Yes	List of all errors encountered during scan.
services.prometheus.http_info	SubRecord	No
services.prometheus.http_info.headers	SubRecord	Yes
services.prometheus.http_info.headers.key	STRING	No
services.prometheus.http_info.headers.value	SubRecord	No
services.prometheus.http_info.headers.value.headers	BYTES	Yes
services.prometheus.http_info.status	STRING	No	Status message received from hitting /api/v1/targets.
services.prometheus.http_info.status_code	INTEGER	No	Status code received from hitting /api/v1/targets.
services.prometheus.response	SubRecord	No	Information Prometheus captured as well as build information.
services.prometheus.response.active_targets	SubRecord	Yes	List of active targets.
services.prometheus.response.active_targets.discovered_labels	SubRecord	No
services.prometheus.response.active_targets.discovered_labels.address	STRING	No	Address of target.
services.prometheus.response.active_targets.discovered_labels.job	STRING	No	Job of target.
services.prometheus.response.active_targets.discovered_labels.metrics_path	STRING	No	Path to metrics of target.
services.prometheus.response.active_targets.discovered_labels.scheme	STRING	No	URL scheme.
services.prometheus.response.active_targets.health	STRING	No	Whether target is up or down.
services.prometheus.response.active_targets.labels	SubRecord	No
services.prometheus.response.active_targets.labels.instance	STRING	No	Instance after relabelling has occurred.
services.prometheus.response.active_targets.labels.job	STRING	No	Job of target after relabelling has occurred.
services.prometheus.response.active_targets.last_error	STRING	No	Last error that occurred within target.
services.prometheus.response.active_targets.last_scrape	STRING	No	Last time Prometheus scraped target.
services.prometheus.response.active_targets.scrape_url	STRING	No	URL that Prometheus scraped.
services.prometheus.response.all_versions	STRING	Yes	List of the versions of everything that Prometheus finds i.e., version of Prometheus, Go, Node, cAdvisor, etc.
services.prometheus.response.config_exposed	BOOLEAN	No	True when the config endpoint is exposed.
services.prometheus.response.dropped_targets	SubRecord	Yes	List of dropped targets.
services.prometheus.response.dropped_targets.address	STRING	No	Address of target.
services.prometheus.response.dropped_targets.job	STRING	No	Job of target.
services.prometheus.response.dropped_targets.metrics_path	STRING	No	Path to metrics of target.
services.prometheus.response.dropped_targets.scheme	STRING	No	URL scheme.
services.prometheus.response.go_versions	STRING	Yes	List of the versions of Go.
services.prometheus.response.prometheus_versions	SubRecord	Yes
services.prometheus.response.prometheus_versions.go_version	STRING	No	Version of Go used to build Prometheus.
services.prometheus.response.prometheus_versions.revision	STRING	No	Revision of Prometheus.
services.prometheus.response.prometheus_versions.version	STRING	No	Version of Prometheus.
services.rdp	SubRecord	No
services.rdp.certificate_info	SubRecord	No
services.rdp.certificate_info.internal_x509_chain_fps	BYTES	Yes
services.rdp.certificate_info.proprietary_rsa_key	SubRecord	No
services.rdp.certificate_info.proprietary_rsa_key.key_length	INTEGER	No
services.rdp.certificate_info.proprietary_rsa_key.magic	INTEGER	No
services.rdp.certificate_info.proprietary_rsa_key.max_bytes_datalen	INTEGER	No
services.rdp.certificate_info.proprietary_rsa_key.modulus	STRING	No
services.rdp.certificate_info.proprietary_rsa_key.modulus_bitlen	INTEGER	No
services.rdp.certificate_info.proprietary_rsa_key.public_exponent	INTEGER	No
services.rdp.certificate_info.proprietary_rsa_key.signature	STRING	No
services.rdp.connect_response	SubRecord	No
services.rdp.connect_response.connect_id	INTEGER	No
services.rdp.connect_response.domain_parameters	SubRecord	No
services.rdp.connect_response.domain_parameters.domain_protocol_version	INTEGER	No
services.rdp.connect_response.domain_parameters.max_channel_ids	INTEGER	No
services.rdp.connect_response.domain_parameters.max_mcspdu_size	INTEGER	No
services.rdp.connect_response.domain_parameters.max_provider_height	INTEGER	No
services.rdp.connect_response.domain_parameters.max_token_ids	INTEGER	No
services.rdp.connect_response.domain_parameters.max_user_id_channels	INTEGER	No
services.rdp.connect_response.domain_parameters.min_throughput	INTEGER	No
services.rdp.connect_response.domain_parameters.num_priorities	INTEGER	No
services.rdp.protocol_flags	SubRecord	No
services.rdp.protocol_flags.dynvc_graphics_pipeline	BOOLEAN	No
services.rdp.protocol_flags.extended_client_data_supported	BOOLEAN	No
services.rdp.protocol_flags.neg_resp_reserved	BOOLEAN	No
services.rdp.protocol_flags.restricted_admin_mode	BOOLEAN	No
services.rdp.protocol_flags.restricted_auth_mode	BOOLEAN	No
services.rdp.selected_security_protocol	SubRecord	No
services.rdp.selected_security_protocol.credssp	BOOLEAN	No
services.rdp.selected_security_protocol.credssp_early_auth	BOOLEAN	No
services.rdp.selected_security_protocol.error	BOOLEAN	No
services.rdp.selected_security_protocol.error_bad_flags	BOOLEAN	No
services.rdp.selected_security_protocol.error_hybrid_required	BOOLEAN	No
services.rdp.selected_security_protocol.error_ssl_cert_missing	BOOLEAN	No
services.rdp.selected_security_protocol.error_ssl_forbidden	BOOLEAN	No
services.rdp.selected_security_protocol.error_ssl_required	BOOLEAN	No
services.rdp.selected_security_protocol.error_ssl_user_auth_required	BOOLEAN	No
services.rdp.selected_security_protocol.error_unknown	BOOLEAN	No
services.rdp.selected_security_protocol.raw_value	INTEGER	No
services.rdp.selected_security_protocol.rdstls	BOOLEAN	No
services.rdp.selected_security_protocol.standard_rdp	BOOLEAN	No
services.rdp.selected_security_protocol.tls	BOOLEAN	No
services.rdp.version	SubRecord	No
services.rdp.version.major	INTEGER	No
services.rdp.version.minor	INTEGER	No
services.rdp.version.raw	INTEGER	No	Raw Version Response, Major version is stored in upper 2 bytes, minor in lower 2 bytes.
services.rdp.x224_cc_pdu_srcref	INTEGER	No
services.redis	SubRecord	No
services.redis.arch_bits	STRING	No	The architecture bits (32 or 64) the Redis server used to build.
services.redis.auth_response	STRING	No	The response from the AUTH command, if sent.
services.redis.build_id	STRING	No	The Build ID of the Redis server.
services.redis.commands	STRING	Yes	The list of commands actually sent to the server, serialized in inline format, like 'PING' or 'AUTH somePassword'.
services.redis.commands_processed	INTEGER	No	The total number of commands processed by the server.
services.redis.connections_received	INTEGER	No	The total number of connections accepted by the server.
services.redis.gcc_version	STRING	No	The version of the GCC compiler used to compile the Redis server.
services.redis.git_sha1	STRING	No	The Sha-1 Git commit hash the Redis server used.
services.redis.info_response	SubRecord	Yes	The response from the INFO command. Should be a series of key:value pairs separated by CRLFs.
services.redis.info_response.key	STRING	No
services.redis.info_response.value	STRING	No
services.redis.major	INTEGER	No	Major is the version's major number.
services.redis.mem_allocator	STRING	No	The memory allocator.
services.redis.minor	INTEGER	No	Minor is the version's major number.
services.redis.mode	STRING	No	The mode the Redis server is running (standalone or cluster), read from the the info_response (if available).
services.redis.nonexistent_response	STRING	No	The response from the NONEXISTENT command.
services.redis.os	STRING	No	The OS the Redis server is running, read from the the info_response (if available).
services.redis.patch_level	INTEGER	No	Patchlevel is the version's patchlevel number.
services.redis.ping_response	STRING	No	The response from the PING command; should either be "PONG" or an authentication error.
services.redis.quit_response	STRING	No	The response to the QUIT command.
services.redis.raw_command_output	SubRecord	Yes	The raw output returned by the server for each command sent; the indices match those of commands.
services.redis.raw_command_output.output	BYTES	No
services.redis.uptime	INTEGER	No	The number of seconds since Redis server start.
services.redis.used_memory	INTEGER	No	The total number of bytes allocated by Redis using its allocator.
services.s7	SubRecord	No
services.s7.copyright	STRING	No
services.s7.cpu_profile	STRING	No
services.s7.firmware	STRING	No
services.s7.hardware	STRING	No
services.s7.location	STRING	No
services.s7.memory_serial_number	STRING	No
services.s7.module	STRING	No
services.s7.module_id	STRING	No
services.s7.module_type	STRING	No
services.s7.oem_id	STRING	No
services.s7.plant_id	STRING	No
services.s7.reserved_for_os	STRING	No
services.s7.serial_number	STRING	No
services.s7.system	STRING	No
services.service_name	STRING	No	Name of the service running.
services.sip	SubRecord	No
services.sip.code	INTEGER	No
services.sip.server	STRING	No	Server software reported by service
services.sip.status	STRING	No
services.sip.version	STRING	No	SIP version
services.skinny	SubRecord	No
services.skinny.response	BYTES	No
services.smb	SubRecord	No
services.smb.group_name	STRING	No	Default group name
services.smb.has_ntlm	BOOLEAN	No	Server supports the NTLM authentication method
services.smb.native_os	STRING	No	Server-identified operating system
services.smb.negotiation_log	SubRecord	No
services.smb.negotiation_log.authentication_types	STRING	Yes
services.smb.negotiation_log.capabilities	INTEGER	No
services.smb.negotiation_log.dialect_revision	INTEGER	No
services.smb.negotiation_log.header_log	SubRecord	No
services.smb.negotiation_log.header_log.command	INTEGER	No
services.smb.negotiation_log.header_log.credits	INTEGER	No
services.smb.negotiation_log.header_log.flags	INTEGER	No
services.smb.negotiation_log.header_log.protocol_id	BYTES	No
services.smb.negotiation_log.header_log.status	INTEGER	No
services.smb.negotiation_log.security_mode	INTEGER	No
services.smb.negotiation_log.server_guid	BYTES	No
services.smb.negotiation_log.server_start_time	INTEGER	No
services.smb.negotiation_log.system_time	INTEGER	No
services.smb.ntlm	STRING	No	Native LAN manager
services.smb.session_setup_log	SubRecord	No
services.smb.session_setup_log.header_log	SubRecord	No
services.smb.session_setup_log.header_log.command	INTEGER	No
services.smb.session_setup_log.header_log.credits	INTEGER	No
services.smb.session_setup_log.header_log.flags	INTEGER	No
services.smb.session_setup_log.header_log.protocol_id	BYTES	No
services.smb.session_setup_log.header_log.status	INTEGER	No
services.smb.session_setup_log.negotiate_flags	INTEGER	No
services.smb.session_setup_log.setup_flags	INTEGER	No
services.smb.session_setup_log.target_name	STRING	No
services.smb.smb_capabilities	SubRecord	No	Capabilities flags for the connection. See [MS-SMB2] Sect. 2.2.4.
services.smb.smb_capabilities.smb_dfs_support	BOOLEAN	No	Server supports Distributed File System
services.smb.smb_capabilities.smb_directory_leasing_support	BOOLEAN	No	Server supports directory leasing
services.smb.smb_capabilities.smb_encryption_support	BOOLEAN	No	Server supports encryption
services.smb.smb_capabilities.smb_leasing_support	BOOLEAN	No	Server supports Leasing
services.smb.smb_capabilities.smb_multichan_support	BOOLEAN	No	Server supports multiple channels per session
services.smb.smb_capabilities.smb_multicredit_support	BOOLEAN	No	Server supports multi-credit operations
services.smb.smb_capabilities.smb_persistent_handle_support	BOOLEAN	No	Server supports persistent handles
services.smb.smb_version	SubRecord	No
services.smb.smb_version.major	INTEGER	No	Major version
services.smb.smb_version.minor	INTEGER	No	Minor version
services.smb.smb_version.revision	INTEGER	No	Protocol Revision
services.smb.smb_version.version_string	STRING	No	Full SMB Version String
services.smb.smbv1_support	BOOLEAN	No
services.smtp	SubRecord	No
services.smtp.banner	BYTES	No	The STMP banner.
services.smtp.ehlo	BYTES	No	The server's response to the EHLO command.
services.smtp.implicit_tls	BOOLEAN	No	This field is no longer used, and it always null.
services.smtp.start_tls	BYTES	No	The server's response to the STARTTLS command.
services.snmp	SubRecord	No
services.snmp.oid_interfaces	SubRecord	No	1.3.6.1.2.1.2 - Interfaces
services.snmp.oid_interfaces.num_ifaces	INTEGER	No	1.3.6.1.2.1.2.1 - Number of network interfaces
services.snmp.oid_physical	SubRecord	No	1.3.6.1.2.1.47.1.1.1.1 - Entity Physical
services.snmp.oid_physical.firmware_rev	STRING	No	1.3.6.1.2.1.47.1.1.1.1.9 - Firmware revision string
services.snmp.oid_physical.hardware_rev	STRING	No	1.3.6.1.2.1.47.1.1.1.1.8 - Hardware revision string
services.snmp.oid_physical.mfg_name	STRING	No	1.3.6.1.2.1.47.1.1.1.1.12 - Name of mfg
services.snmp.oid_physical.model_name	STRING	No	1.3.6.1.2.1.47.1.1.1.1.13 - Model name of component
services.snmp.oid_physical.name	STRING	No	1.3.6.1.2.1.47.1.1.1.1.7 - Entity name
services.snmp.oid_physical.serial_num	STRING	No	1.3.6.1.2.1.47.1.1.1.1.11 - Serial number string
services.snmp.oid_physical.software_rev	STRING	No	1.3.6.1.2.1.47.1.1.1.1.10 - Software revision string
services.snmp.oid_system	SubRecord	No	1.3.6.1.2.1.1 - System Variables
services.snmp.oid_system.contact	STRING	No	1.3.6.1.2.1.1.4 - Contact info
services.snmp.oid_system.desc	STRING	No	1.3.6.1.2.1.1.1 - Description of entity
services.snmp.oid_system.init_time	INTEGER	No	1.3.6.1.2.1.1.3 - 1/100ths of sec
services.snmp.oid_system.location	STRING	No	1.3.6.1.2.1.1.6 - Physical location
services.snmp.oid_system.name	STRING	No	1.3.6.1.2.1.1.5 - Name, usually FQDN
services.snmp.oid_system.object_id	STRING	No	1.3.6.1.2.1.1.2 - Vendor ID
services.snmp.oid_system.services	SubRecord	No	1.3.6.1.2.1.1.7 - Set of services offered by entity
services.snmp.oid_system.services.layer_1	BOOLEAN	No	Physical (e.g. repeaters)
services.snmp.oid_system.services.layer_2	BOOLEAN	No	Datalink/subnetwork (e.g. bridges)
services.snmp.oid_system.services.layer_3	BOOLEAN	No	Internet (e.g. IP gateways)
services.snmp.oid_system.services.layer_4	BOOLEAN	No	End-to-end (e.g. IP hosts)
services.snmp.oid_system.services.layer_5	BOOLEAN	No	OSI layer 5
services.snmp.oid_system.services.layer_6	BOOLEAN	No	OSI layer 6
services.snmp.oid_system.services.layer_7	BOOLEAN	No	Applications (e.g. mail relays)
services.software	SubRecord	Yes	List of software products detected on this service, including CPE 2.3 formatted names.
services.software.component_uniform_resource_identifiers	STRING	Yes	URIs of software components related to the identified software.
services.software.edition	STRING	No	Captures edition-related terms applied by the vendor to the product, deprecated in CPE 2.3, but kept for backwards compatibility with CPE 2.2.
services.software.language	STRING	No	Valid language tag as defined by [RFC5646], and should be used to define the language supported in the user interface of the product being described.
services.software.other	SubRecord	Yes	Other attributes describing the identified software
services.software.other.key	STRING	No
services.software.other.value	STRING	No
services.software.part	STRING	No	Defines the class of this software, a for application, o for operating system, h for hardware devices.
services.software.product	STRING	No	Identifies the most common and recognizable title or name of the product.
services.software.source	STRING	No	Defines the source that this software information was derived from.
services.software.sw_edition	STRING	No	Characterizes how the product is tailored to a particular market or class of end users.
services.software.target_hw	STRING	No	Characterizes the instruction set architecture (e.g., x86) on which the product being described. Bytecode-intermediate languages, such as Java bytecode for the Java Virtual Machine or Microsoft Common Intermediate Language for the Common Language Runtime virtual machine, are be considered instruction set architectures.
services.software.target_sw	STRING	No	Characterizes the software computing environment within which the product operates.
services.software.uniform_resource_identifier	STRING	No	CPE uri format as defined here: https://nvlpubs.nist.gov/nistpubs/Legacy/IR/nistir7695.pdf
services.software.update	STRING	No	Vendor-Specific alphanumeric strings characterizing the particular update, service pack, or point release of the product.
services.software.vendor	STRING	No	Identifies the person or organization that manufactured or created the product.
services.software.version	STRING	No	Vendor-Specific alphanumeric strings characterizing the particular release version of the product.
services.source_ip	STRING	No	The Source IP address that censys saw the service from.
services.ssdp	SubRecord	No
services.ssdp.headers	SubRecord	Yes
services.ssdp.headers.key	STRING	No
services.ssdp.headers.value	SubRecord	No
services.ssdp.headers.value.headers	BYTES	Yes
services.ssdp.upnp_url	STRING	No
services.ssh	SubRecord	No
services.ssh.algorithm_selection	SubRecord	No
services.ssh.algorithm_selection.client_to_server_alg_group	SubRecord	No
services.ssh.algorithm_selection.client_to_server_alg_group.cipher	STRING	No
services.ssh.algorithm_selection.client_to_server_alg_group.compression	STRING	No
services.ssh.algorithm_selection.client_to_server_alg_group.mac	STRING	No
services.ssh.algorithm_selection.host_key_algorithm	STRING	No
services.ssh.algorithm_selection.kex_algorithm	STRING	No
services.ssh.algorithm_selection.server_to_client_alg_group	SubRecord	No
services.ssh.algorithm_selection.server_to_client_alg_group.cipher	STRING	No
services.ssh.algorithm_selection.server_to_client_alg_group.compression	STRING	No
services.ssh.algorithm_selection.server_to_client_alg_group.mac	STRING	No
services.ssh.endpoint_id	SubRecord	No
services.ssh.endpoint_id.comment	STRING	No
services.ssh.endpoint_id.protocol_version	STRING	No
services.ssh.endpoint_id.raw	BYTES	No
services.ssh.endpoint_id.software_version	STRING	No
services.ssh.hassh_fingerprint	STRING	No
services.ssh.kex_init_message	SubRecord	No
services.ssh.kex_init_message.client_to_server_ciphers	STRING	Yes	A list of ssh cipher algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-16 for standard values.
services.ssh.kex_init_message.client_to_server_compression	STRING	Yes	A list of ssh compression algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-20 for standard values.
services.ssh.kex_init_message.client_to_server_languages	STRING	Yes	A name-list of language tags in order of preference. As Defined in https://www.ietf.org/rfc/rfc3066.txt.
services.ssh.kex_init_message.client_to_server_macs	STRING	Yes	A list of ssh MAC algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-18 for standard values.
services.ssh.kex_init_message.first_kex_follows	BOOLEAN	No
services.ssh.kex_init_message.host_key_algorithms	STRING	Yes	Asymmetric key algorithms for the host key supported by the client.
services.ssh.kex_init_message.kex_algorithms	STRING	Yes	Key exchange algorithms used in the handshake.
services.ssh.kex_init_message.server_to_client_ciphers	STRING	Yes	A list of ssh cipher algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-16 for standard values.
services.ssh.kex_init_message.server_to_client_compression	STRING	Yes	A list of ssh compression algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-20 for standard values.
services.ssh.kex_init_message.server_to_client_languages	STRING	Yes	A name-list of language tags in order of preference. As Defined in https://www.ietf.org/rfc/rfc3066.txt.
services.ssh.kex_init_message.server_to_client_macs	STRING	Yes	A list of ssh MAC algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-18 for standard values.
services.ssh.server_host_key	SubRecord	No
services.ssh.server_host_key.certkey_public_key	STRING	No
services.ssh.server_host_key.dsa_public_key	SubRecord	No
services.ssh.server_host_key.dsa_public_key.g	BYTES	No
services.ssh.server_host_key.dsa_public_key.p	BYTES	No
services.ssh.server_host_key.dsa_public_key.q	BYTES	No
services.ssh.server_host_key.dsa_public_key.y	BYTES	No
services.ssh.server_host_key.ecdsa_public_key	SubRecord	No
services.ssh.server_host_key.ecdsa_public_key.b	BYTES	No
services.ssh.server_host_key.ecdsa_public_key.curve	STRING	No
services.ssh.server_host_key.ecdsa_public_key.gx	BYTES	No
services.ssh.server_host_key.ecdsa_public_key.gy	BYTES	No
services.ssh.server_host_key.ecdsa_public_key.length	INTEGER	No
services.ssh.server_host_key.ecdsa_public_key.n	BYTES	No
services.ssh.server_host_key.ecdsa_public_key.p	BYTES	No
services.ssh.server_host_key.ecdsa_public_key.pub	BYTES	No
services.ssh.server_host_key.ecdsa_public_key.x	BYTES	No
services.ssh.server_host_key.ecdsa_public_key.y	BYTES	No
services.ssh.server_host_key.ed25519_public_key	SubRecord	No
services.ssh.server_host_key.ed25519_public_key.public_bytes	BYTES	No
services.ssh.server_host_key.fingerprint_sha256	STRING	No
services.ssh.server_host_key.rsa_public_key	SubRecord	No
services.ssh.server_host_key.rsa_public_key.exponent	BYTES	No
services.ssh.server_host_key.rsa_public_key.length	INTEGER	No
services.ssh.server_host_key.rsa_public_key.modulus	BYTES	No
services.team_viewer	SubRecord	No
services.team_viewer.response	BYTES	No
services.telnet	SubRecord	No
services.telnet.banner	BYTES	No
services.telnet.do	SubRecord	Yes
services.telnet.do.key	INTEGER	No
services.telnet.do.value	STRING	No
services.telnet.dont	SubRecord	Yes
services.telnet.dont.key	INTEGER	No
services.telnet.dont.value	STRING	No
services.telnet.will	SubRecord	Yes
services.telnet.will.key	INTEGER	No
services.telnet.will.value	STRING	No
services.telnet.wont	SubRecord	Yes
services.telnet.wont.key	INTEGER	No
services.telnet.wont.value	STRING	No
services.tls	SubRecord	No	Information about tls handshake done with this host.
services.tls.certificates	SubRecord	No	Certificate and certificate chain details.
services.tls.certificates.chain	SubRecord	Yes	Certificate chain information.
services.tls.certificates.chain.fingerprint	STRING	No	SHA 256 fingerprint of the certificate in the certificate chain.
services.tls.certificates.chain.issuer_dn	STRING	No	Distinguished name of the entity that has signed and issued the certificate.
services.tls.certificates.chain.subject_dn	STRING	No	Distinguished name of the entity that the certificate belongs to.
services.tls.certificates.chain_fps_sha_256	BYTES	Yes	DEPRECATED (04/30/2021) - Use `chain` instead.
services.tls.certificates.leaf_data	SubRecord	No	The TBS Certificate information.
services.tls.certificates.leaf_data.fingerprint	STRING	No	SHA256 fingerprint of the TBS certificate.
services.tls.certificates.leaf_data.issuer	SubRecord	No	Issuer distinguished name attributes.
services.tls.certificates.leaf_data.issuer.common_name	STRING	Yes
services.tls.certificates.leaf_data.issuer.country	STRING	Yes
services.tls.certificates.leaf_data.issuer.domain_component	STRING	Yes
services.tls.certificates.leaf_data.issuer.email_address	STRING	Yes
services.tls.certificates.leaf_data.issuer.jurisdiction_country	STRING	Yes
services.tls.certificates.leaf_data.issuer.jurisdiction_locality	STRING	Yes
services.tls.certificates.leaf_data.issuer.jurisdiction_province	STRING	Yes
services.tls.certificates.leaf_data.issuer.locality	STRING	Yes
services.tls.certificates.leaf_data.issuer.organization	STRING	Yes
services.tls.certificates.leaf_data.issuer.organization_id	STRING	Yes
services.tls.certificates.leaf_data.issuer.organizational_unit	STRING	Yes
services.tls.certificates.leaf_data.issuer.postal_code	STRING	Yes
services.tls.certificates.leaf_data.issuer.province	STRING	Yes
services.tls.certificates.leaf_data.issuer.serial_number	STRING	Yes
services.tls.certificates.leaf_data.issuer.street_address	STRING	Yes
services.tls.certificates.leaf_data.issuer_dn	STRING	No	Distinguished name of the entity that has signed and issued the certificate.
services.tls.certificates.leaf_data.names	STRING	Yes	Common names for the entity.
services.tls.certificates.leaf_data.pubkey_algorithm	STRING	No	Algorithm used to create the public key.
services.tls.certificates.leaf_data.pubkey_bit_size	INTEGER	No	Size of the public key.
services.tls.certificates.leaf_data.public_key	SubRecord	No	Subject public key information.
services.tls.certificates.leaf_data.public_key.dsa	SubRecord	No
services.tls.certificates.leaf_data.public_key.dsa.g	BYTES	No
services.tls.certificates.leaf_data.public_key.dsa.p	BYTES	No
services.tls.certificates.leaf_data.public_key.dsa.q	BYTES	No
services.tls.certificates.leaf_data.public_key.dsa.y	BYTES	No
services.tls.certificates.leaf_data.public_key.ecdsa	SubRecord	No
services.tls.certificates.leaf_data.public_key.ecdsa.b	BYTES	No
services.tls.certificates.leaf_data.public_key.ecdsa.curve	STRING	No
services.tls.certificates.leaf_data.public_key.ecdsa.gx	BYTES	No
services.tls.certificates.leaf_data.public_key.ecdsa.gy	BYTES	No
services.tls.certificates.leaf_data.public_key.ecdsa.length	INTEGER	No
services.tls.certificates.leaf_data.public_key.ecdsa.n	BYTES	No
services.tls.certificates.leaf_data.public_key.ecdsa.p	BYTES	No
services.tls.certificates.leaf_data.public_key.ecdsa.pub	BYTES	No
services.tls.certificates.leaf_data.public_key.ecdsa.x	BYTES	No
services.tls.certificates.leaf_data.public_key.ecdsa.y	BYTES	No
services.tls.certificates.leaf_data.public_key.fingerprint	STRING	No
services.tls.certificates.leaf_data.public_key.key_algorithm	STRING	No
services.tls.certificates.leaf_data.public_key.rsa	SubRecord	No
services.tls.certificates.leaf_data.public_key.rsa.exponent	BYTES	No
services.tls.certificates.leaf_data.public_key.rsa.length	INTEGER	No
services.tls.certificates.leaf_data.public_key.rsa.modulus	BYTES	No
services.tls.certificates.leaf_data.signature	SubRecord	No	Certificate signature information.
services.tls.certificates.leaf_data.signature.self_signed	BOOLEAN	No	Denotes if the certificate was self signed.
services.tls.certificates.leaf_data.signature.signature_algorithm	STRING	No	Cryptographic algorithm used by the CA to sign this certificate.
services.tls.certificates.leaf_data.subject	SubRecord	No	Subject distinguished name attributes.
services.tls.certificates.leaf_data.subject.common_name	STRING	Yes
services.tls.certificates.leaf_data.subject.country	STRING	Yes
services.tls.certificates.leaf_data.subject.domain_component	STRING	Yes
services.tls.certificates.leaf_data.subject.email_address	STRING	Yes
services.tls.certificates.leaf_data.subject.jurisdiction_country	STRING	Yes
services.tls.certificates.leaf_data.subject.jurisdiction_locality	STRING	Yes
services.tls.certificates.leaf_data.subject.jurisdiction_province	STRING	Yes
services.tls.certificates.leaf_data.subject.locality	STRING	Yes
services.tls.certificates.leaf_data.subject.organization	STRING	Yes
services.tls.certificates.leaf_data.subject.organization_id	STRING	Yes
services.tls.certificates.leaf_data.subject.organizational_unit	STRING	Yes
services.tls.certificates.leaf_data.subject.postal_code	STRING	Yes
services.tls.certificates.leaf_data.subject.province	STRING	Yes
services.tls.certificates.leaf_data.subject.serial_number	STRING	Yes
services.tls.certificates.leaf_data.subject.street_address	STRING	Yes
services.tls.certificates.leaf_data.subject_dn	STRING	No	Distinguished name of the entity associated with the public key.
services.tls.certificates.leaf_data.tbs_fingerprint	STRING	No	Fingerprint of the TBS certificate.
services.tls.certificates.leaf_fp_sha_256	BYTES	No	SHA 256 fingerprint of the TBS certificate.
services.tls.cipher_selected	STRING	No	Cipher suite chosen for the exchange.
services.tls.ja3s	BYTES	No	The JA3S fingerprint for this service.
services.tls.server_key_exchange	SubRecord	No	DEPRECATED (05/03/2021)
services.tls.server_key_exchange.dh_params	SubRecord	No	Diffie-Hellman key exchange parameters used.
services.tls.server_key_exchange.dh_params.group	SubRecord	No	Diffie-Hellman group details.
services.tls.server_key_exchange.dh_params.group.g	BYTES	No
services.tls.server_key_exchange.dh_params.group.p	BYTES	No
services.tls.server_key_exchange.dh_params.public_key	BYTES	No
services.tls.server_key_exchange.ec_params	SubRecord	No	Elliptic-Curve key exchange parameters used.
services.tls.server_key_exchange.ec_params.named_curve	INTEGER	No	Elliptic-Curve ID value.
services.tls.server_key_exchange.ec_params.public_key	BYTES	No
services.tls.server_key_exchange.rsa_params	SubRecord	No	DEPRECATED (05/10/2021) - Can be found in the public key RSA details.
services.tls.server_key_exchange.rsa_params.public_key	SubRecord	No
services.tls.server_key_exchange.rsa_params.public_key.e	BYTES	No
services.tls.server_key_exchange.rsa_params.public_key.n	BYTES	No
services.tls.server_key_exchange.signature	STRING	No	DEPRECATED (05/10/2021)
services.tls.session_ticket	SubRecord	No	The new session ticket sent by the server to the client.
services.tls.session_ticket.length	INTEGER	No
services.tls.session_ticket.lifetime_hint	INTEGER	No	Hint from server about how long the session ticket should be stored.
services.tls.version_selected	STRING	No	Certificate version v1(0), v2(1), v3(2).
services.transport	STRING	No	Transport protocol used to contact this service.
services.transport_fingerprint	SubRecord	No	Metadata collected about the transport protocol connection to this service.
services.transport_fingerprint.id	INTEGER	No
services.transport_fingerprint.os	STRING	No
services.transport_fingerprint.quic	SubRecord	No
services.transport_fingerprint.quic.versions	INTEGER	Yes	Raw versions presented in the QUIC version negotiation packet, if any.
services.transport_fingerprint.raw	STRING	No
services.truncated	BOOLEAN	No	If true, the banner is limited to 100 bytes and there is no nested service message
services.unknown	SubRecord	No
services.unknown.banner	BYTES	No	A byte array representing raw response from a host
services.unknown.transport	STRING	No
services.upnp	SubRecord	No
services.upnp.devices	SubRecord	Yes
services.upnp.devices.device_type	STRING	No
services.upnp.devices.friendly_name	STRING	No
services.upnp.devices.id	INTEGER	No	Censys-generated IDs representing a device tree
services.upnp.devices.manufacturer	STRING	No
services.upnp.devices.manufacturer_url	STRING	No
services.upnp.devices.model_description	STRING	No
services.upnp.devices.model_name	STRING	No
services.upnp.devices.model_number	STRING	No
services.upnp.devices.model_url	STRING	No
services.upnp.devices.parent_id	INTEGER	No
services.upnp.devices.presentation_url	STRING	No
services.upnp.devices.serial_number	STRING	No
services.upnp.devices.service_list	SubRecord	Yes
services.upnp.devices.service_list.control_url	STRING	No
services.upnp.devices.service_list.event_sub_url	STRING	No
services.upnp.devices.service_list.scpd_url	STRING	No
services.upnp.devices.service_list.service_id	STRING	No
services.upnp.devices.service_list.service_type	STRING	No
services.upnp.devices.udn	STRING	No
services.upnp.devices.upc	STRING	No
services.upnp.endpoint	STRING	No
services.upnp.headers	SubRecord	Yes
services.upnp.headers.key	STRING	No
services.upnp.headers.value	SubRecord	No
services.upnp.headers.value.headers	BYTES	Yes
services.upnp.spec	SubRecord	No
services.upnp.spec.major	STRING	No
services.upnp.spec.minor	STRING	No
services.vnc	SubRecord	No
services.vnc.connection_failed_reason	BYTES	No	If server terminates handshake, the reason offered (if any)
services.vnc.desktop_name	BYTES	No	Desktop name provided by the server, capped at 255 bytes
services.vnc.pixel_encoding	SubRecord	No
services.vnc.pixel_encoding.name	BYTES	No
services.vnc.pixel_encoding.value	INTEGER	No
services.vnc.screen_info	SubRecord	No
services.vnc.screen_info.height	INTEGER	No
services.vnc.screen_info.name_len	INTEGER	No
services.vnc.screen_info.pixel_format	SubRecord	No
services.vnc.screen_info.pixel_format.big_endian	BOOLEAN	No	If pixel RGB data are in big-endian
services.vnc.screen_info.pixel_format.bits_per_pixel	INTEGER	No	How many bits in a single full pixel datum. Valid values are: 8, 16, 32
services.vnc.screen_info.pixel_format.blue_max	INTEGER	No	Max value of blue pixel
services.vnc.screen_info.pixel_format.blue_shift	INTEGER	No	How many bits to right shift a pixel datum to get blue bits in lsb
services.vnc.screen_info.pixel_format.depth	INTEGER	No	Color depth
services.vnc.screen_info.pixel_format.green_max	INTEGER	No	Max value of green pixel
services.vnc.screen_info.pixel_format.green_shift	INTEGER	No	How many bits to right shift a pixel datum to get green bits in lsb
services.vnc.screen_info.pixel_format.padding1	INTEGER	No
services.vnc.screen_info.pixel_format.padding2	INTEGER	No
services.vnc.screen_info.pixel_format.padding3	INTEGER	No
services.vnc.screen_info.pixel_format.red_max	INTEGER	No	Max value of red pixel
services.vnc.screen_info.pixel_format.red_shift	INTEGER	No	How many bits to right shift a pixel datum to get red bits in lsb
services.vnc.screen_info.pixel_format.true_color	BOOLEAN	No	If false, color maps are used
services.vnc.screen_info.width	INTEGER	No
services.vnc.security_types	SubRecord	Yes	server-specified security options
services.vnc.security_types.name	BYTES	No
services.vnc.security_types.value	INTEGER	No
services.vnc.version	BYTES	No
services.x11	SubRecord	No
services.x11.refusal_reason	STRING	No
services.x11.requires_authentication	BOOLEAN	No
services.x11.roots	SubRecord	Yes
services.x11.roots.windows	SubRecord	Yes
services.x11.roots.windows.application_class	STRING	No
services.x11.roots.windows.application_name	STRING	No
services.x11.roots.windows.window_title	STRING	No
services.x11.vendor	STRING	No
services.x11.version	STRING	No
snapshot_date	TIMESTAMP	No	Date the snapshot was generated