Universal Internet DataSet

This schema outlines the fields available in Censys BigQuery Universal Internet DataSet tables.

Hosts

Path Type Repeated Docs
autonomous_system SubRecord No Information about the Autonomous System of this host
autonomous_system.asn INTEGER No The ASN (autonomous system number) of the host's autonomous system.
autonomous_system.bgp_prefix STRING No The autonomous system's CIDR.
autonomous_system.country_code STRING No The autonomous system's two-letter ISO 3166-1 alpha-2 country code (US, CN, GB, RU, ...).
autonomous_system.description STRING No Brief description of the autonomous system.
autonomous_system.name STRING No The friendly name of the autonomous system.
autonomous_system.organization STRING No The name of the organization managning the autonomous system.
dns SubRecord No Information about names that resolve to this host.
dns.names STRING Yes Names that resolve to the host
dns.records SubRecord Yes More information for each of the names above
dns.records.key STRING No
dns.records.value SubRecord No
dns.records.value.record_type STRING No
dns.records.value.resolved_at TIMESTAMP No
dns.reverse_dns SubRecord No
dns.reverse_dns.names STRING Yes
dns.reverse_dns.resolved_at TIMESTAMP No
host_identifier SubRecord No Structured data about a host
host_identifier.ipv4 STRING No
host_identifier.ipv6 STRING No
host_identifier.name STRING No
ipv4_int STRING No
ipv6_int STRING No
location SubRecord No Location of this host
location.city STRING No The English name of the detected city.
location.continent STRING No The English name of the detected continent (North America, Europe, Asia, South America, Africa, Oceania, Antarctica).
location.coordinates SubRecord No The estimated coordinates of the detected location.
location.coordinates.latitude FLOAT No
location.coordinates.longitude FLOAT No
location.country STRING No The English name of the detected country.
location.country_code STRING No The detected two-letter ISO 3166-1 alpha-2 country code (US, CN, GB, RU, ...).
location.postal_code STRING No The postal code (if applicable) of the detected location.
location.province STRING No The state or province name of the detected location.
location.registered_country STRING No The English name of the registered country.
location.registered_country_code STRING No The registered country's two-letter ISO 3166-1 alpha-2 country code (US, CN, GB, RU, ...).
location.timezone STRING No The IANA time zone database name of the detected location.
operating_system SubRecord No Estimated host operating system, including CPE 2.3 formatted names.
operating_system.component_uniform_resource_identifiers STRING Yes URIs of software components related to the identified software.
operating_system.edition STRING No Captures edition-related terms applied by the vendor to the product, deprecated in CPE 2.3, but kept for backwards compatibility with CPE 2.2.
operating_system.language STRING No Valid language tag as defined by [RFC5646], and should be used to define the language supported in the user interface of the product being described.
operating_system.other SubRecord Yes Other attributes describing the identified software
operating_system.other.key STRING No
operating_system.other.value STRING No
operating_system.part STRING No Defines the class of this software, a for application, o for operating system, h for hardware devices.
operating_system.product STRING No Identifies the most common and recognizable title or name of the product.
operating_system.source STRING No Defines the source that this software information was derived from.
operating_system.sw_edition STRING No Characterizes how the product is tailored to a particular market or class of end users.
operating_system.target_hw STRING No Characterizes the instruction set architecture (e.g., x86) on which the product being described. Bytecode-intermediate languages, such as Java bytecode for the Java Virtual Machine or Microsoft Common Intermediate Language for the Common Language Runtime virtual machine, are be considered instruction set architectures.
operating_system.target_sw STRING No Characterizes the software computing environment within which the product operates.
operating_system.uniform_resource_identifier STRING No CPE uri format as defined here: https://nvlpubs.nist.gov/nistpubs/Legacy/IR/nistir7695.pdf
operating_system.update STRING No Vendor-Specific alphanumeric strings characterizing the particular update, service pack, or point release of the product.
operating_system.vendor STRING No Identifies the person or organization that manufactured or created the product.
operating_system.version STRING No Vendor-Specific alphanumeric strings characterizing the particular release version of the product.
ports_list INTEGER Yes List of every open port number on the host. Each port corresponds to the service with the same index in service_names_list
service_names_list STRING Yes List of all services on the host. Each service corresponds to the port with the same index in ports_list
services SubRecord Yes Services running on this host
services.amqp SubRecord No
services.amqp.explicit_tls BOOLEAN No Connected via a TLS connection after initial handshake
services.amqp.implicit_tls BOOLEAN No Connected via a TLS wrapped connection (AMQPS)
services.amqp.protocol_id SubRecord No
services.amqp.protocol_id.id INTEGER No
services.amqp.protocol_id.name STRING No
services.amqp.version SubRecord No
services.amqp.version.major INTEGER No
services.amqp.version.minor INTEGER No
services.amqp.version.revision INTEGER No
services.any_connect SubRecord No
services.any_connect.aggregate_auth_version INTEGER No Version number indicated by the response for config-auth exchange
services.any_connect.auth_methods STRING Yes Supported methods for users to enter credentials for this VPN
services.any_connect.groups STRING Yes List of groups a user can authenticate with to use this VPN
services.any_connect.raw STRING No XML content of the config-auth response
services.any_connect.response_type STRING No Type of the response packet received after initializing the config-auth exchange
services.bacnet SubRecord No
services.bacnet.application_software_revision STRING No
services.bacnet.description STRING No
services.bacnet.firmware_revision STRING No
services.bacnet.instance_number INTEGER No
services.bacnet.location STRING No
services.bacnet.model_name STRING No
services.bacnet.object_name STRING No
services.bacnet.vendor_id INTEGER No
services.bacnet.vendor_name STRING No
services.banner BYTES No A byte array representing raw response from a host if applicable.
services.banner_hashes STRING Yes
services.coap SubRecord No
services.coap.code STRING No
services.coap.message_id INTEGER No
services.coap.message_type STRING No
services.coap.payload BYTES No
services.coap.token BYTES No
services.coap.version INTEGER No
services.cwmp SubRecord No
services.cwmp.http_info SubRecord No
services.cwmp.http_info.body_hash BYTES No
services.cwmp.http_info.request SubRecord No
services.cwmp.http_info.request.body BYTES No
services.cwmp.http_info.request.headers SubRecord Yes
services.cwmp.http_info.request.headers.key STRING No
services.cwmp.http_info.request.headers.value SubRecord No
services.cwmp.http_info.request.headers.value.headers BYTES Yes
services.cwmp.http_info.request.method STRING No
services.cwmp.http_info.request.uri STRING No
services.cwmp.http_info.response SubRecord No
services.cwmp.http_info.response.body BYTES No
services.cwmp.http_info.response.body_hashes STRING Yes
services.cwmp.http_info.response.body_size INTEGER No
services.cwmp.http_info.response.favicons SubRecord Yes
services.cwmp.http_info.response.favicons.md5_hash STRING No
services.cwmp.http_info.response.favicons.name STRING No
services.cwmp.http_info.response.favicons.size INTEGER No
services.cwmp.http_info.response.headers SubRecord Yes
services.cwmp.http_info.response.headers.key STRING No
services.cwmp.http_info.response.headers.value SubRecord No
services.cwmp.http_info.response.headers.value.headers BYTES Yes
services.cwmp.http_info.response.html_tags BYTES Yes
services.cwmp.http_info.response.protocol STRING No
services.cwmp.http_info.response.status_code INTEGER No
services.cwmp.http_info.response.status_reason STRING No
services.dnp3 SubRecord No
services.dnp3.banner BYTES No
services.dns SubRecord No
services.dns.additionals SubRecord Yes
services.dns.additionals.name STRING No
services.dns.additionals.response STRING No
services.dns.additionals.type STRING No
services.dns.answers SubRecord Yes
services.dns.answers.name STRING No
services.dns.answers.response STRING No
services.dns.answers.type STRING No
services.dns.authorities SubRecord Yes
services.dns.authorities.name STRING No
services.dns.authorities.response STRING No
services.dns.authorities.type STRING No
services.dns.edns SubRecord No
services.dns.edns.do BOOLEAN No
services.dns.edns.options STRING Yes
services.dns.edns.udp INTEGER No
services.dns.edns.version INTEGER No
services.dns.questions SubRecord Yes
services.dns.questions.name STRING No
services.dns.questions.response STRING No
services.dns.questions.type STRING No
services.dns.r_code STRING No
services.dns.resolves_correctly BOOLEAN No
services.dns.server_type STRING No
services.dns.version STRING No
services.elasticsearch SubRecord No
services.elasticsearch.http_info SubRecord No
services.elasticsearch.http_info.headers SubRecord Yes
services.elasticsearch.http_info.headers.key STRING No
services.elasticsearch.http_info.headers.value SubRecord No
services.elasticsearch.http_info.headers.value.headers BYTES Yes
services.elasticsearch.http_info.status STRING No
services.elasticsearch.http_info.status_code INTEGER No
services.elasticsearch.node_info SubRecord No
services.elasticsearch.node_info.cluster_combined_info SubRecord No
services.elasticsearch.node_info.cluster_combined_info.filesystem SubRecord No
services.elasticsearch.node_info.cluster_combined_info.filesystem.available STRING No Human-friendly available size
services.elasticsearch.node_info.cluster_combined_info.filesystem.available_in_bytes INTEGER No Available size in bytes
services.elasticsearch.node_info.cluster_combined_info.filesystem.free STRING No Human-friendly free size
services.elasticsearch.node_info.cluster_combined_info.filesystem.free_in_bytes INTEGER No Free size in bytes
services.elasticsearch.node_info.cluster_combined_info.filesystem.total STRING No Human-friendly total size
services.elasticsearch.node_info.cluster_combined_info.filesystem.total_in_bytes INTEGER No Total size in bytes
services.elasticsearch.node_info.cluster_combined_info.indices SubRecord No
services.elasticsearch.node_info.cluster_combined_info.indices.count INTEGER No Total number of indices with shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.indices.docs SubRecord No
services.elasticsearch.node_info.cluster_combined_info.indices.docs.count INTEGER No Total number of non-deleted documents across all primary shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.indices.docs.deleted INTEGER No Total number of deleted documents across all primary shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.indices.store SubRecord No
services.elasticsearch.node_info.cluster_combined_info.indices.store.reserved_in_bytes INTEGER No A prediction, in bytes, of how much larger the shard stores will eventually grow due to ongoing peer recoveries, restoring snapshots, and similar activities
services.elasticsearch.node_info.cluster_combined_info.indices.store.size_in_bytes INTEGER No Total size, in bytes, of all shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.name STRING No
services.elasticsearch.node_info.cluster_combined_info.status STRING No
services.elasticsearch.node_info.cluster_combined_info.timestamp INTEGER No
services.elasticsearch.node_info.cluster_combined_info.uuid STRING No
services.elasticsearch.node_info.nodes SubRecord Yes
services.elasticsearch.node_info.nodes.node_data SubRecord No
services.elasticsearch.node_info.nodes.node_data.build_flavor STRING No
services.elasticsearch.node_info.nodes.node_data.build_hash STRING No
services.elasticsearch.node_info.nodes.node_data.build_type STRING No
services.elasticsearch.node_info.nodes.node_data.host STRING No
services.elasticsearch.node_info.nodes.node_data.ingest_processors STRING Yes
services.elasticsearch.node_info.nodes.node_data.ip STRING No
services.elasticsearch.node_info.nodes.node_data.jvm SubRecord No
services.elasticsearch.node_info.nodes.node_data.jvm.gc STRING Yes
services.elasticsearch.node_info.nodes.node_data.jvm.input_args STRING Yes
services.elasticsearch.node_info.nodes.node_data.jvm.memory_pools STRING Yes
services.elasticsearch.node_info.nodes.node_data.jvm.start_time STRING No
services.elasticsearch.node_info.nodes.node_data.jvm.start_time_ms INTEGER No
services.elasticsearch.node_info.nodes.node_data.jvm.version STRING No
services.elasticsearch.node_info.nodes.node_data.jvm.vm_name STRING No
services.elasticsearch.node_info.nodes.node_data.jvm.vm_vendor STRING No
services.elasticsearch.node_info.nodes.node_data.jvm.vm_version STRING No
services.elasticsearch.node_info.nodes.node_data.modules SubRecord Yes
services.elasticsearch.node_info.nodes.node_data.modules.class_name STRING No
services.elasticsearch.node_info.nodes.node_data.modules.desc STRING No
services.elasticsearch.node_info.nodes.node_data.modules.elastic_version STRING No
services.elasticsearch.node_info.nodes.node_data.modules.ext_plugins STRING Yes
services.elasticsearch.node_info.nodes.node_data.modules.has_native_ctrl BOOLEAN No
services.elasticsearch.node_info.nodes.node_data.modules.java_version STRING No
services.elasticsearch.node_info.nodes.node_data.modules.name STRING No
services.elasticsearch.node_info.nodes.node_data.modules.version STRING No
services.elasticsearch.node_info.nodes.node_data.name STRING No
services.elasticsearch.node_info.nodes.node_data.os SubRecord No
services.elasticsearch.node_info.nodes.node_data.os.allocated_proc INTEGER No
services.elasticsearch.node_info.nodes.node_data.os.arch STRING No
services.elasticsearch.node_info.nodes.node_data.os.available_proc INTEGER No
services.elasticsearch.node_info.nodes.node_data.os.name STRING No
services.elasticsearch.node_info.nodes.node_data.os.pretty_name STRING No
services.elasticsearch.node_info.nodes.node_data.os.refresh_interval_ms INTEGER No
services.elasticsearch.node_info.nodes.node_data.os.version STRING No
services.elasticsearch.node_info.nodes.node_data.roles STRING Yes
services.elasticsearch.node_info.nodes.node_data.settings SubRecord No
services.elasticsearch.node_info.nodes.node_data.settings.cluster_name STRING No
services.elasticsearch.node_info.nodes.node_data.settings.node SubRecord No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr SubRecord No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.ml SubRecord No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.ml.enabled STRING No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.ml.machine_memory STRING No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.ml.max_open_jobs STRING No
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.xpack_installed STRING No
services.elasticsearch.node_info.nodes.node_data.settings.node.name STRING No
services.elasticsearch.node_info.nodes.node_data.thread_pool_list SubRecord Yes
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.keep_alive STRING No
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.max INTEGER No
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.min INTEGER No
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.queue_size INTEGER No
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.type STRING No
services.elasticsearch.node_info.nodes.node_data.total_indexing_buffer INTEGER No
services.elasticsearch.node_info.nodes.node_data.version STRING No
services.elasticsearch.node_info.nodes.node_name STRING No
services.elasticsearch.system_info SubRecord No
services.elasticsearch.system_info.cluster_uuid STRING No Cluster UUID
services.elasticsearch.system_info.name STRING No Cluster Name
services.elasticsearch.system_info.tagline STRING No Elasticsearch identifying tagline
services.elasticsearch.system_info.version SubRecord No
services.elasticsearch.system_info.version.build_date STRING No
services.elasticsearch.system_info.version.build_flavor STRING No
services.elasticsearch.system_info.version.build_hash STRING No
services.elasticsearch.system_info.version.build_snapshot BOOLEAN No
services.elasticsearch.system_info.version.build_type STRING No
services.elasticsearch.system_info.version.lucene_version STRING No
services.elasticsearch.system_info.version.min_idx_compat_ver STRING No
services.elasticsearch.system_info.version.min_wire_compat_ver STRING No
services.elasticsearch.system_info.version.number STRING No ES Cluster version
services.extended_service_name STRING No Common name for a protocol, that describes it's use of TLS. HTTP versus HTTPS, etc
services.fox SubRecord No
services.fox.app_name STRING No
services.fox.app_version STRING No
services.fox.auth_agent_type STRING No
services.fox.brand_id STRING No
services.fox.hostId STRING No
services.fox.host_address STRING No
services.fox.hostname STRING No
services.fox.id INTEGER No
services.fox.language STRING No
services.fox.os_name STRING No
services.fox.os_version STRING No
services.fox.station_name STRING No
services.fox.sys_info STRING No
services.fox.time_zone STRING No
services.fox.version STRING No
services.fox.vm_name STRING No
services.fox.vm_uuid STRING No
services.fox.vm_version STRING No
services.ftp SubRecord No
services.ftp.auth_ssl_response BYTES No
services.ftp.auth_tls_response BYTES No
services.ftp.banner BYTES No
services.ftp.implicit_tls BOOLEAN No
services.ftp.status_code INTEGER No
services.ftp.status_meaning STRING No
services.http SubRecord No
services.http.body_hash BYTES No
services.http.request SubRecord No
services.http.request.body BYTES No
services.http.request.headers SubRecord Yes
services.http.request.headers.key STRING No
services.http.request.headers.value SubRecord No
services.http.request.headers.value.headers BYTES Yes
services.http.request.method STRING No
services.http.request.uri STRING No
services.http.response SubRecord No
services.http.response.body BYTES No
services.http.response.body_hashes STRING Yes
services.http.response.body_size INTEGER No
services.http.response.favicons SubRecord Yes
services.http.response.favicons.md5_hash STRING No
services.http.response.favicons.name STRING No
services.http.response.favicons.size INTEGER No
services.http.response.headers SubRecord Yes
services.http.response.headers.key STRING No
services.http.response.headers.value SubRecord No
services.http.response.headers.value.headers BYTES Yes
services.http.response.html_tags BYTES Yes
services.http.response.protocol STRING No
services.http.response.status_code INTEGER No
services.http.response.status_reason STRING No
services.http.supports_http2 BOOLEAN No
services.ike SubRecord No
services.ike.v1 SubRecord No
services.ike.v1.accepted_proposal BOOLEAN No Did the host accept our security proposal? When false, the host responded with an error.
services.ike.v1.notify_message_types INTEGER Yes Which types of NOTIFY messages did the host send us?
services.ike.v1.supported BOOLEAN No Did the host respond with a valid IKE message?
services.ike.v1.vendor_ids BYTES Yes The list of Vendor ID "extensions" the host claimed to support in its handshake
services.ike.v2 SubRecord No
services.ike.v2.accepted_proposal BOOLEAN No
services.ike.v2.notify_message_types INTEGER Yes
services.ike.v2.supported BOOLEAN No
services.ike.v2.vendor_ids BYTES Yes
services.imap SubRecord No
services.imap.banner BYTES No The IMAP banner.
services.imap.start_tls STRING No The server's response to the STARTTLS command.
services.ipmi SubRecord No The IPMI scan response. All section numbers refer to https://www.intel.com/content/dam/www/public/us/en/documents/product-briefs/ipmi-second-gen-interface-spec-v2-rev1-1.pdf
services.ipmi.capabilities SubRecord No The Get Channel Authentication Capabilities response (section 22.13)
services.ipmi.capabilities.auth_status SubRecord No The authentication status
services.ipmi.capabilities.auth_status.anonymous_login_enabled BOOLEAN No If true, the server allows anonymous login.
services.ipmi.capabilities.auth_status.auth_each_message BOOLEAN No If true, each message must be authenticated.
services.ipmi.capabilities.auth_status.has_anonymous_users BOOLEAN No If true, the server has anonymous users.
services.ipmi.capabilities.auth_status.has_named_users BOOLEAN No If true, the server supports named users.
services.ipmi.capabilities.auth_status.two_key_login_required BOOLEAN No The KG field.
services.ipmi.capabilities.auth_status.user_auth_disabled BOOLEAN No If true, user authentication is disabled.
services.ipmi.capabilities.channel_number INTEGER No The response channel number
services.ipmi.capabilities.completion_code SubRecord No The status code of the response
services.ipmi.capabilities.completion_code.name STRING No The human-readable name of the code
services.ipmi.capabilities.completion_code.raw INTEGER No The raw completion code
services.ipmi.capabilities.extended_capabilities SubRecord No Extended auth capabilities (if present)
services.ipmi.capabilities.extended_capabilities.supports_ipmi_v1_5 BOOLEAN No True if IPMI v1.5 is supported
services.ipmi.capabilities.extended_capabilities.supports_ipmi_v2_0 BOOLEAN No True if IPMI v2.0 is supported
services.ipmi.capabilities.oem_data INTEGER No The OEM-specific data
services.ipmi.capabilities.oem_id BYTES No The 3-byte OEM identifier
services.ipmi.capabilities.supported_auth_types SubRecord No The auth types supported by the server
services.ipmi.capabilities.supported_auth_types.extended BOOLEAN No If true, the extended capabilities are present.
services.ipmi.capabilities.supported_auth_types.md2 BOOLEAN No True if the MD2 AuthType is supported.
services.ipmi.capabilities.supported_auth_types.md5 BOOLEAN No True if the MD5 AuthType is supported.
services.ipmi.capabilities.supported_auth_types.none BOOLEAN No True if the None AuthType is supported.
services.ipmi.capabilities.supported_auth_types.oem_proprietary BOOLEAN No True if the OEM Proprietary AuthType is supported
services.ipmi.capabilities.supported_auth_types.password BOOLEAN No True if the Password AuthType is supported.
services.ipmi.capabilities.supported_auth_types.raw INTEGER No The raw byte, with the bit mask etc
services.ipmi.command_payload SubRecord No The IPMI command payload
services.ipmi.command_payload.checksum_error BOOLEAN No This is set to true if the values of chk1 / chk2 do not match the command data
services.ipmi.command_payload.data BYTES No The raw data. On success, this should be the value of the GetAuthenticationCapabilities resopnse
services.ipmi.command_payload.ipmi_command_number SubRecord No The parsed IPMI command number
services.ipmi.command_payload.ipmi_command_number.name STRING No The human-readable name of the cmd + NetFn
services.ipmi.command_payload.ipmi_command_number.raw INTEGER No The raw value of the cmd value
services.ipmi.command_payload.network_function_code SubRecord No The NetFn and LUN
services.ipmi.command_payload.network_function_code.logical_unit_number SubRecord No The parsed LUN (logical unit number -- the lower 2 bits of raw)
services.ipmi.command_payload.network_function_code.logical_unit_number.name STRING No The human-readable name of the LUN
services.ipmi.command_payload.network_function_code.logical_unit_number.raw INTEGER No The value of the LUN (3 bits)
services.ipmi.command_payload.network_function_code.net_fn SubRecord No The parsed NetFn value (the upper 6 bits of raw)
services.ipmi.command_payload.network_function_code.net_fn.is_request BOOLEAN No True if the least-significant bit is zero
services.ipmi.command_payload.network_function_code.net_fn.is_response BOOLEAN No True if the least-significant bit is one
services.ipmi.command_payload.network_function_code.net_fn.name STRING No The human-readable name of the NetFn
services.ipmi.command_payload.network_function_code.net_fn.raw INTEGER No The raw value of the NetFn (6 bits, least significant indicates request/response)
services.ipmi.command_payload.network_function_code.net_fn.value INTEGER No The normalized value of the NetFn (i.e. raw & 0xfe, so it is always even)
services.ipmi.command_payload.network_function_code.raw INTEGER No The raw value of the (NetFn << 2) | LUN
services.ipmi.command_payload.requestor_sequence_number INTEGER No The request sequence number.
services.ipmi.raw BYTES No The raw data returned by the server
services.ipmi.rmcp_header SubRecord No The RMCP header of the response, (section 13.1.3)
services.ipmi.rmcp_header.message_class SubRecord No The class of the message.
services.ipmi.rmcp_header.message_class.class INTEGER No Just the class part of the byte (lower 5 bits of raw)
services.ipmi.rmcp_header.message_class.is_ack BOOLEAN No True if the message is an acknowledgment to a previous message.
services.ipmi.rmcp_header.message_class.name STRING No The human-readable name of the message class
services.ipmi.rmcp_header.message_class.raw INTEGER No The raw message class byte.
services.ipmi.rmcp_header.sequence_number INTEGER No Sequence number of this packet in the session.
services.ipmi.rmcp_header.version INTEGER No The version. This scanner supports version 6.
services.ipmi.session_header SubRecord No The IPMI sesssion header of the response
services.ipmi.session_header.auth_code BYTES No The 16-byte authentication code; not present if auth_type is None.
services.ipmi.session_header.auth_type SubRecord No The authentication type for this request (see section 13.6)
services.ipmi.session_header.auth_type.name STRING No The raw value of the auth_type
services.ipmi.session_header.auth_type.raw INTEGER No The raw value of the auth_type
services.ipmi.session_header.auth_type.type INTEGER No Just the auth type (reserved bits omitted)
services.ipmi.session_header.session_id INTEGER No The ID of this sessiod.
services.ipmi.session_header.session_sequence_number INTEGER No The session sequence number of this packet in the session
services.ipp SubRecord No
services.ipp.attribute_cups_version STRING No The CUPS version, if any, specified in the list of attributes returned in a get-printer-attributes response or CUPS-get-printers response. Generally in the form 'x.y.z'.
services.ipp.attribute_ipp_versions STRING Yes Each IPP version, if any, specified in the list of attributes returned in a get-printer-attributes response or CUPS-get-printers response. Always in the form 'x.y'.
services.ipp.attribute_printer_uris STRING Yes Each printer URI, if any, specified in the list of attributes returned in a get-printer-attributes response or CUPS-get-printers response. Uses ipp(s) or http(s) scheme, followed by a hostname or IP, and then the path to a particular printer.
services.ipp.attributes SubRecord Yes All IPP attributes included in any contentful responses obtained. Each has a name, list of values (potentially only one), and a tag denoting how the value should be interpreted.
services.ipp.attributes.name STRING No
services.ipp.attributes.value_tag INTEGER No
services.ipp.attributes.values BYTES Yes
services.ipp.cups_response SubRecord No
services.ipp.cups_response.body_hash STRING No Hash of body stored in a UTF-8 string of the format <hash-type>:<hash-encoded>, e.g. sha256:a948904f2f0f479b8f8197694b30184b0d2ed1c1cd2a1ec0fb85d299a192a447
services.ipp.cups_response.header SubRecord Yes
services.ipp.cups_response.header.key STRING No
services.ipp.cups_response.header.value SubRecord No
services.ipp.cups_response.header.value.headers BYTES Yes
services.ipp.cups_response.status STRING No
services.ipp.cups_response.status_code INTEGER No
services.ipp.cups_version STRING No The CUPS version, if any, specified in the Server header of an IPP get-attributes response.
services.ipp.major_version INTEGER No Major component of IPP version listed in the Server header of a response to an IPP get-printer-attributes request.
services.ipp.minor_version INTEGER No Minor component of IPP version listed in the Server header of a response to an IPP get-printer-attributes request.
services.ipp.response SubRecord No
services.ipp.response.body_hash STRING No Hash of body stored in a UTF-8 string of the format <hash-type>:<hash-encoded>, e.g. sha256:a948904f2f0f479b8f8197694b30184b0d2ed1c1cd2a1ec0fb85d299a192a447
services.ipp.response.header SubRecord Yes
services.ipp.response.header.key STRING No
services.ipp.response.header.value SubRecord No
services.ipp.response.header.value.headers BYTES Yes
services.ipp.response.status STRING No
services.ipp.response.status_code INTEGER No
services.ipp.version_string STRING No The specific IPP version returned in response to an IPP get-printer-attributes request. Always in the form 'IPP/x.y'
services.jarm SubRecord No The JARM fingerprint of the service.
services.jarm.cipher_and_version_fingerprint BYTES No The first 30 byte portion of the Jarm fingerprint.
services.jarm.cipher_and_version_fingerprint_hex STRING No The first 30 byte portion of the Jarm fingerprint.
services.jarm.fingerprint BYTES No The 62 byte Jarm fingerprint of the service.
services.jarm.fingerprint_hex STRING No The 62 byte Jarm fingerprint of the service.
services.jarm.observed_at TIMESTAMP No The time the service was fingerprinted
services.jarm.tls_extensions_sha256 BYTES No The second 32 byte portion of the Jarm fingerprint
services.jarm.tls_extensions_sha256_hex STRING No The second 32 byte portion of the Jarm fingerprint
services.kubernetes SubRecord No
services.kubernetes.endpoints SubRecord Yes
services.kubernetes.endpoints.name STRING No
services.kubernetes.endpoints.self_link STRING No
services.kubernetes.endpoints.subsets SubRecord Yes
services.kubernetes.endpoints.subsets.addresses SubRecord Yes
services.kubernetes.endpoints.subsets.addresses.hostname STRING No
services.kubernetes.endpoints.subsets.addresses.ip STRING No
services.kubernetes.endpoints.subsets.addresses.node_name STRING No
services.kubernetes.endpoints.subsets.ports SubRecord Yes
services.kubernetes.endpoints.subsets.ports.name STRING No
services.kubernetes.endpoints.subsets.ports.port INTEGER No
services.kubernetes.endpoints.subsets.ports.protocol STRING No
services.kubernetes.kubernetes_dashboard_found BOOLEAN No True if the dashboard is running and accessible
services.kubernetes.nodes SubRecord Yes
services.kubernetes.nodes.addresses SubRecord Yes
services.kubernetes.nodes.addresses.address STRING No Node address, IP/URL.
services.kubernetes.nodes.addresses.address_type STRING No Node address type, one of Hostname, ExternalIP or InternalIP.
services.kubernetes.nodes.architecture STRING No The Architecture reported by the node.
services.kubernetes.nodes.container_runtime_version STRING No ContainerRuntime Version reported by the node through runtime remote API (e.g. docker://1.5.0).
services.kubernetes.nodes.images STRING Yes List of container images on this node
services.kubernetes.nodes.kernel_version STRING No Kernel Version reported by the node from 'uname -r' (e.g. 3.16.0-0.bpo.4-amd64).
services.kubernetes.nodes.kube_proxy_version STRING No KubeProxy Version reported by the node.
services.kubernetes.nodes.kubelet_version STRING No Kubelet Version reported by the node.
services.kubernetes.nodes.name STRING No
services.kubernetes.nodes.operating_system STRING No The Operating System reported by the node.
services.kubernetes.nodes.os_image STRING No OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).
services.kubernetes.pod_names STRING Yes
services.kubernetes.roles SubRecord Yes
services.kubernetes.roles.name STRING No
services.kubernetes.roles.rules SubRecord Yes Rules set for this role.
services.kubernetes.roles.rules.api_groups STRING Yes APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.
services.kubernetes.roles.rules.resources STRING Yes Resources is a list of resources this rule applies to. ResourceAll represents all resources
services.kubernetes.roles.rules.verbs STRING Yes Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.
services.kubernetes.version_info SubRecord No
services.kubernetes.version_info.build_date STRING No Date version was built.
services.kubernetes.version_info.compiler STRING No Go Compiler used
services.kubernetes.version_info.git_commit STRING No Git commit version built from.
services.kubernetes.version_info.git_tree_state STRING No State of the tree when built.
services.kubernetes.version_info.git_version STRING No
services.kubernetes.version_info.go_version STRING No Version of GO used to build version.
services.kubernetes.version_info.major STRING No Kubernetes major version
services.kubernetes.version_info.minor STRING No Kubernetes minor version
services.kubernetes.version_info.platform STRING No Platform compiled for
services.ldap SubRecord No
services.ldap.allows_anonymous_bind BOOLEAN No Ability to connect with anonymous bind (empty username and password)
services.ldap.attributes SubRecord Yes All root DN attributes available via anonymous bind
services.ldap.attributes.name STRING No Name of the LDAP attribute in the root DN
services.ldap.attributes.values BYTES Yes Values for the respective LDAP attribute
services.ldap.resultCode INTEGER No Result or error code returned by LDAP instance upon bind
services.memcached SubRecord No
services.memcached.ascii_binding_protocol_enabled BOOLEAN No True if the server responds to the ascii version of the memcached protocol.
services.memcached.binary_binding_protocol_enabled BOOLEAN No True if the server responds to the binary version of the memcached protocol.
services.memcached.responds_to_udp BOOLEAN No True if the server responds UDP.
services.memcached.stats SubRecord Yes Server Stats
services.memcached.stats.key STRING No
services.memcached.stats.value STRING No
services.memcached.version STRING No Memcached Version
services.mms SubRecord No
services.mms.model STRING No
services.mms.revision STRING No
services.mms.vendor STRING No
services.modbus SubRecord No
services.modbus.exception_response SubRecord No
services.modbus.exception_response.exception_function INTEGER No
services.modbus.exception_response.exception_type INTEGER No
services.modbus.function INTEGER No
services.modbus.mei_response SubRecord No
services.modbus.mei_response.conformity_level INTEGER No
services.modbus.mei_response.more_follows BOOLEAN No
services.modbus.mei_response.next_object_id INTEGER No
services.modbus.mei_response.objects SubRecord Yes
services.modbus.mei_response.objects.key STRING No
services.modbus.mei_response.objects.value STRING No
services.modbus.raw_response BYTES No
services.modbus.unit_id INTEGER No
services.mongodb SubRecord No
services.mongodb.build_info SubRecord No
services.mongodb.build_info.build_environment SubRecord No
services.mongodb.build_info.build_environment.cc STRING No
services.mongodb.build_info.build_environment.cc_flags STRING No
services.mongodb.build_info.build_environment.cxx STRING No
services.mongodb.build_info.build_environment.cxx_flags STRING No
services.mongodb.build_info.build_environment.dist_arch STRING No
services.mongodb.build_info.build_environment.dist_mod STRING No
services.mongodb.build_info.build_environment.link_flags STRING No
services.mongodb.build_info.build_environment.target_arch STRING No
services.mongodb.build_info.build_environment.target_oS STRING No
services.mongodb.build_info.git_version STRING No Version of mongodb server
services.mongodb.build_info.version STRING No Version of mongodb server
services.mongodb.is_master SubRecord No
services.mongodb.is_master.is_master BOOLEAN No
services.mongodb.is_master.logical_session_timeout_minutes INTEGER No
services.mongodb.is_master.max_bson_object_size INTEGER No
services.mongodb.is_master.max_message_size_bytes INTEGER No
services.mongodb.is_master.max_wire_version INTEGER No
services.mongodb.is_master.max_write_batch_size INTEGER No
services.mongodb.is_master.min_wire_version INTEGER No
services.mongodb.is_master.read_only BOOLEAN No
services.mqtt SubRecord No
services.mqtt.connection_ack_raw BYTES No Raw CONNACK response packet
services.mqtt.connection_ack_return SubRecord No
services.mqtt.connection_ack_return.raw INTEGER No Raw connect status value
services.mqtt.connection_ack_return.return_value STRING No Connection status
services.mqtt.subscription_ack_raw BYTES No Raw SUBACK response packet
services.mqtt.subscription_ack_return SubRecord No
services.mqtt.subscription_ack_return.raw INTEGER No Raw subscription response value
services.mqtt.subscription_ack_return.return_value STRING No Subscription response
services.mqtt.topics STRING Yes Topics seen
services.mssql SubRecord No
services.mssql.encrypt_mode STRING No The negotiated ENCRYPT_MODE with the server
services.mssql.instance_name STRING No
services.mssql.prelogin_options SubRecord No
services.mssql.prelogin_options.encrypt_mode STRING No
services.mssql.prelogin_options.fed_auth_required BOOLEAN No
services.mssql.prelogin_options.instance STRING No
services.mssql.prelogin_options.mars BOOLEAN No
services.mssql.prelogin_options.nonce BYTES No
services.mssql.prelogin_options.server_version SubRecord No
services.mssql.prelogin_options.server_version.build_number INTEGER No
services.mssql.prelogin_options.server_version.major INTEGER No
services.mssql.prelogin_options.server_version.minor INTEGER No
services.mssql.prelogin_options.thread_id INTEGER No
services.mssql.prelogin_options.trace_id BYTES No
services.mssql.prelogin_options.unknown SubRecord Yes
services.mssql.prelogin_options.unknown.key INTEGER No
services.mssql.prelogin_options.unknown.value BYTES No
services.mssql.version STRING No
services.mysql SubRecord No
services.mysql.auth_plugin_data BYTES No Optional plugin-specific data, whose meaning depends on the value of auth_plugin_name. Returned in the initial HandshakePacket.
services.mysql.auth_plugin_name STRING No The name of the authentication plugin, returned in the initial HandshakePacket.
services.mysql.capability_flags SubRecord Yes The set of capability flags the server returned in the initial HandshakePacket. Each entry corresponds to a bit being set in the flags; key names correspond to the #defines in the MySQL docs.
services.mysql.capability_flags.key STRING No
services.mysql.capability_flags.value BOOLEAN No
services.mysql.character_set INTEGER No The identifier for the character set the server is using. Returned in the initial HandshakePacket.
services.mysql.connection_id INTEGER No The server's internal identifier for this client's connection, sent in the initial HandshakePacket.
services.mysql.error_code INTEGER No Only set if there is an error returned by the server, for example if the scanner is not on the allowed hosts list.
services.mysql.error_id STRING No The friendly name for the error code as defined at https://dev.mysql.com/doc/refman/8.0/en/error-messages-server.html, or UNKNOWN
services.mysql.error_message STRING No Optional string describing the error. Only set if there is an error.
services.mysql.protocol_version INTEGER No 8-bit unsigned integer representing the server's protocol version sent in the initial HandshakePacket from the server.
services.mysql.server_version STRING No The specific server version returned in the initial HandshakePacket. Often in the form x.y.z, but not always.
services.mysql.status_flags SubRecord Yes The set of status flags the server returned in the initial HandshakePacket. Each entry corresponds to a bit being set in the flags; key names correspond to the #defines in the MySQL docs.
services.mysql.status_flags.key STRING No
services.mysql.status_flags.value BOOLEAN No
services.ntp SubRecord No
services.ntp.get_time_header SubRecord No
services.ntp.get_time_header.leap_indicator INTEGER No
services.ntp.get_time_header.mode INTEGER No
services.ntp.get_time_header.origin_timestamp SubRecord No DEPRECATED on 2021/01/20
services.ntp.get_time_header.origin_timestamp.fraction INTEGER No
services.ntp.get_time_header.origin_timestamp.seconds INTEGER No
services.ntp.get_time_header.poll INTEGER No
services.ntp.get_time_header.precision INTEGER No
services.ntp.get_time_header.receive_timestamp SubRecord No DEPRECATED on 2021/01/20
services.ntp.get_time_header.receive_timestamp.fraction INTEGER No
services.ntp.get_time_header.receive_timestamp.seconds INTEGER No
services.ntp.get_time_header.reference_id BYTES No
services.ntp.get_time_header.reference_timestamp SubRecord No DEPRECATED on 2021/01/20
services.ntp.get_time_header.reference_timestamp.fraction INTEGER No
services.ntp.get_time_header.reference_timestamp.seconds INTEGER No
services.ntp.get_time_header.root_delay SubRecord No DEPRECATED on 2021/01/20
services.ntp.get_time_header.root_delay.fraction INTEGER No
services.ntp.get_time_header.root_delay.seconds INTEGER No
services.ntp.get_time_header.root_dispersion SubRecord No DEPRECATED on 2021/01/20
services.ntp.get_time_header.root_dispersion.fraction INTEGER No
services.ntp.get_time_header.root_dispersion.seconds INTEGER No
services.ntp.get_time_header.stratum INTEGER No
services.ntp.get_time_header.transmit_timestamp SubRecord No DEPRECATED on 2021/01/20
services.ntp.get_time_header.transmit_timestamp.fraction INTEGER No
services.ntp.get_time_header.transmit_timestamp.seconds INTEGER No
services.ntp.get_time_header.version INTEGER No
services.ntp.time TIMESTAMP No DEPRECATED on 2021/01/20
services.observed_at TIMESTAMP No A UTC timestamp denoting when this service was last observed.
services.openvpn SubRecord No
services.openvpn.accepts_v1 BOOLEAN No
services.openvpn.accepts_v2 BOOLEAN No
services.oracle SubRecord No
services.oracle.accept_version INTEGER No The protocol version number from the Accept packet.
services.oracle.connect_flags0 SubRecord Yes The first set of ConnectFlags returned in the Accept packet.
services.oracle.connect_flags0.key STRING No
services.oracle.connect_flags0.value BOOLEAN No
services.oracle.connect_flags1 SubRecord Yes The second set of ConnectFlags returned in the Accept packet.
services.oracle.connect_flags1.key STRING No
services.oracle.connect_flags1.value BOOLEAN No
services.oracle.did_resend BOOLEAN No True if the server sent a Resend packet request in response to the client's first Connect packet.
services.oracle.global_service_options SubRecord Yes Set of flags that the server returns in the Accept packet.
services.oracle.global_service_options.key STRING No
services.oracle.global_service_options.value BOOLEAN No
services.oracle.nsn_service_versions SubRecord Yes A map from the native Service Negotation service names to the ReleaseVersion (in dotted-decimal format) in that service packet.
services.oracle.nsn_service_versions.key STRING No
services.oracle.nsn_service_versions.value STRING No
services.oracle.nsn_version STRING No The ReleaseVersion string (in dotted-decimal format) in the root of the Native Service Negotiation packet.
services.oracle.redirect_target SubRecord Yes The parsed connect descriptor returned by the server in the redirect packet, if one is sent.
services.oracle.redirect_target.Key STRING No
services.oracle.redirect_target.Value STRING No
services.oracle.redirect_target_raw STRING No The connect descriptor returned by the server in the Redirect packet, if one is sent.
services.oracle.refuse_error SubRecord Yes The parsed descriptor returned by the server in the Refuse packet; it is empty if the server does not return a Refuse packet. The keys are strings like 'DESCRIPTION.ERROR_STACK.ERROR.CODE
services.oracle.refuse_error.Key STRING No
services.oracle.refuse_error.Value STRING No
services.oracle.refuse_error_raw STRING No The data from the Refuse packet returned by the server; it is empty if the server does not return a Refuse packet.
services.oracle.refuse_reason_app STRING No The 'AppReason' returned by the server in the RefusePacket, as an 8-bit unsigned hex string.
services.oracle.refuse_reason_sys STRING No The 'SysReason' returned by the server in the RefusePacket, as an 8-bit unsigned hex string.
services.oracle.refuse_version STRING No The parsed DESCRIPTION.VSNNUM field from the RefuseError descriptor returned by the server in the Refuse packet, in dotted-decimal format.
services.pc_anywhere SubRecord No
services.pc_anywhere.name STRING No Workstation Name, with padding bytes removed
services.pc_anywhere.nr STRING No Full 'NR' query response
services.pc_anywhere.status SubRecord No
services.pc_anywhere.status.in_use BOOLEAN No Workstation is In Use if true, Available if false
services.pc_anywhere.status.raw BYTES No Full 'ST' query response
services.perspective STRING No Perspective from which Censys saw this service.
services.pop3 SubRecord No
services.pop3.banner BYTES No The POP3 banner.
services.pop3.start_tls BYTES No The server's response to the STARTTLS command.
services.port INTEGER No
services.postgres SubRecord No
services.postgres.authentication_mode SubRecord No
services.postgres.authentication_mode.mode STRING No
services.postgres.authentication_mode.payload BYTES No
services.postgres.protocol_error SubRecord Yes
services.postgres.protocol_error.key STRING No
services.postgres.protocol_error.value STRING No
services.postgres.server_parameters SubRecord Yes
services.postgres.server_parameters.key STRING No
services.postgres.server_parameters.value STRING No
services.postgres.startup_error SubRecord Yes
services.postgres.startup_error.key STRING No
services.postgres.startup_error.value STRING No
services.postgres.supported_versions STRING No
services.postgres.transaction_status STRING No
services.postgres.user_startup_error SubRecord Yes
services.postgres.user_startup_error.key STRING No
services.postgres.user_startup_error.value STRING No
services.pptp SubRecord No
services.pptp.bearer_message SubRecord No
services.pptp.bearer_message.code INTEGER No
services.pptp.bearer_message.meaning STRING No
services.pptp.error_message SubRecord No
services.pptp.error_message.code INTEGER No
services.pptp.error_message.meaning STRING No
services.pptp.firmware SubRecord No
services.pptp.firmware.major INTEGER No
services.pptp.firmware.minor INTEGER No
services.pptp.framing_message SubRecord No
services.pptp.framing_message.code INTEGER No
services.pptp.framing_message.meaning STRING No
services.pptp.hostname STRING No
services.pptp.maximum_channels INTEGER No
services.pptp.protocol SubRecord No
services.pptp.protocol.major INTEGER No
services.pptp.protocol.minor INTEGER No
services.pptp.result_message SubRecord No
services.pptp.result_message.code INTEGER No
services.pptp.result_message.meaning STRING No
services.pptp.vendor STRING No
services.prometheus SubRecord No
services.prometheus.errors STRING Yes List of all errors encountered during scan.
services.prometheus.http_info SubRecord No
services.prometheus.http_info.headers SubRecord Yes
services.prometheus.http_info.headers.key STRING No
services.prometheus.http_info.headers.value SubRecord No
services.prometheus.http_info.headers.value.headers BYTES Yes
services.prometheus.http_info.status STRING No Status message received from hitting /api/v1/targets.
services.prometheus.http_info.status_code INTEGER No Status code received from hitting /api/v1/targets.
services.prometheus.response SubRecord No Information Prometheus captured as well as build information.
services.prometheus.response.active_targets SubRecord Yes List of active targets.
services.prometheus.response.active_targets.discovered_labels SubRecord No
services.prometheus.response.active_targets.discovered_labels.address STRING No Address of target.
services.prometheus.response.active_targets.discovered_labels.job STRING No Job of target.
services.prometheus.response.active_targets.discovered_labels.metrics_path STRING No Path to metrics of target.
services.prometheus.response.active_targets.discovered_labels.scheme STRING No URL scheme.
services.prometheus.response.active_targets.health STRING No Whether target is up or down.
services.prometheus.response.active_targets.labels SubRecord No
services.prometheus.response.active_targets.labels.instance STRING No Instance after relabelling has occurred.
services.prometheus.response.active_targets.labels.job STRING No Job of target after relabelling has occurred.
services.prometheus.response.active_targets.last_error STRING No Last error that occurred within target.
services.prometheus.response.active_targets.last_scrape STRING No Last time Prometheus scraped target.
services.prometheus.response.active_targets.scrape_url STRING No URL that Prometheus scraped.
services.prometheus.response.all_versions STRING Yes List of the versions of everything that Prometheus finds i.e., version of Prometheus, Go, Node, cAdvisor, etc.
services.prometheus.response.config_exposed BOOLEAN No True when the config endpoint is exposed.
services.prometheus.response.dropped_targets SubRecord Yes List of dropped targets.
services.prometheus.response.dropped_targets.address STRING No Address of target.
services.prometheus.response.dropped_targets.job STRING No Job of target.
services.prometheus.response.dropped_targets.metrics_path STRING No Path to metrics of target.
services.prometheus.response.dropped_targets.scheme STRING No URL scheme.
services.prometheus.response.go_versions STRING Yes List of the versions of Go.
services.prometheus.response.prometheus_versions SubRecord Yes
services.prometheus.response.prometheus_versions.go_version STRING No Version of Go used to build Prometheus.
services.prometheus.response.prometheus_versions.revision STRING No Revision of Prometheus.
services.prometheus.response.prometheus_versions.version STRING No Version of Prometheus.
services.rdp SubRecord No
services.rdp.certificate_info SubRecord No
services.rdp.certificate_info.internal_x509_chain_fps BYTES Yes
services.rdp.certificate_info.proprietary_rsa_key SubRecord No
services.rdp.certificate_info.proprietary_rsa_key.key_length INTEGER No
services.rdp.certificate_info.proprietary_rsa_key.magic INTEGER No
services.rdp.certificate_info.proprietary_rsa_key.max_bytes_datalen INTEGER No
services.rdp.certificate_info.proprietary_rsa_key.modulus STRING No
services.rdp.certificate_info.proprietary_rsa_key.modulus_bitlen INTEGER No
services.rdp.certificate_info.proprietary_rsa_key.public_exponent INTEGER No
services.rdp.certificate_info.proprietary_rsa_key.signature STRING No
services.rdp.connect_response SubRecord No
services.rdp.connect_response.connect_id INTEGER No
services.rdp.connect_response.domain_parameters SubRecord No
services.rdp.connect_response.domain_parameters.domain_protocol_version INTEGER No
services.rdp.connect_response.domain_parameters.max_channel_ids INTEGER No
services.rdp.connect_response.domain_parameters.max_mcspdu_size INTEGER No
services.rdp.connect_response.domain_parameters.max_provider_height INTEGER No
services.rdp.connect_response.domain_parameters.max_token_ids INTEGER No
services.rdp.connect_response.domain_parameters.max_user_id_channels INTEGER No
services.rdp.connect_response.domain_parameters.min_throughput INTEGER No
services.rdp.connect_response.domain_parameters.num_priorities INTEGER No
services.rdp.protocol_flags SubRecord No
services.rdp.protocol_flags.dynvc_graphics_pipeline BOOLEAN No
services.rdp.protocol_flags.extended_client_data_supported BOOLEAN No
services.rdp.protocol_flags.neg_resp_reserved BOOLEAN No
services.rdp.protocol_flags.restricted_admin_mode BOOLEAN No
services.rdp.protocol_flags.restricted_auth_mode BOOLEAN No
services.rdp.selected_security_protocol SubRecord No
services.rdp.selected_security_protocol.credssp BOOLEAN No
services.rdp.selected_security_protocol.credssp_early_auth BOOLEAN No
services.rdp.selected_security_protocol.error BOOLEAN No
services.rdp.selected_security_protocol.error_bad_flags BOOLEAN No
services.rdp.selected_security_protocol.error_hybrid_required BOOLEAN No
services.rdp.selected_security_protocol.error_ssl_cert_missing BOOLEAN No
services.rdp.selected_security_protocol.error_ssl_forbidden BOOLEAN No
services.rdp.selected_security_protocol.error_ssl_required BOOLEAN No
services.rdp.selected_security_protocol.error_ssl_user_auth_required BOOLEAN No
services.rdp.selected_security_protocol.error_unknown BOOLEAN No
services.rdp.selected_security_protocol.raw_value INTEGER No
services.rdp.selected_security_protocol.rdstls BOOLEAN No
services.rdp.selected_security_protocol.standard_rdp BOOLEAN No
services.rdp.selected_security_protocol.tls BOOLEAN No
services.rdp.version SubRecord No
services.rdp.version.major INTEGER No
services.rdp.version.minor INTEGER No
services.rdp.version.raw INTEGER No Raw Version Response, Major version is stored in upper 2 bytes, minor in lower 2 bytes.
services.rdp.x224_cc_pdu_srcref INTEGER No
services.redis SubRecord No
services.redis.arch_bits STRING No The architecture bits (32 or 64) the Redis server used to build.
services.redis.auth_response STRING No The response from the AUTH command, if sent.
services.redis.build_id STRING No The Build ID of the Redis server.
services.redis.commands STRING Yes The list of commands actually sent to the server, serialized in inline format, like 'PING' or 'AUTH somePassword'.
services.redis.commands_processed INTEGER No The total number of commands processed by the server.
services.redis.connections_received INTEGER No The total number of connections accepted by the server.
services.redis.gcc_version STRING No The version of the GCC compiler used to compile the Redis server.
services.redis.git_sha1 STRING No The Sha-1 Git commit hash the Redis server used.
services.redis.info_response SubRecord Yes The response from the INFO command. Should be a series of key:value pairs separated by CRLFs.
services.redis.info_response.key STRING No
services.redis.info_response.value STRING No
services.redis.major INTEGER No Major is the version's major number.
services.redis.mem_allocator STRING No The memory allocator.
services.redis.minor INTEGER No Minor is the version's major number.
services.redis.mode STRING No The mode the Redis server is running (standalone or cluster), read from the the info_response (if available).
services.redis.nonexistent_response STRING No The response from the NONEXISTENT command.
services.redis.os STRING No The OS the Redis server is running, read from the the info_response (if available).
services.redis.patch_level INTEGER No Patchlevel is the version's patchlevel number.
services.redis.ping_response STRING No The response from the PING command; should either be "PONG" or an authentication error.
services.redis.quit_response STRING No The response to the QUIT command.
services.redis.raw_command_output SubRecord Yes The raw output returned by the server for each command sent; the indices match those of commands.
services.redis.raw_command_output.output BYTES No
services.redis.uptime INTEGER No The number of seconds since Redis server start.
services.redis.used_memory INTEGER No The total number of bytes allocated by Redis using its allocator.
services.s7 SubRecord No
services.s7.copyright STRING No
services.s7.cpu_profile STRING No
services.s7.firmware STRING No
services.s7.hardware STRING No
services.s7.location STRING No
services.s7.memory_serial_number STRING No
services.s7.module STRING No
services.s7.module_id STRING No
services.s7.module_type STRING No
services.s7.oem_id STRING No
services.s7.plant_id STRING No
services.s7.reserved_for_os STRING No
services.s7.serial_number STRING No
services.s7.system STRING No
services.service_name STRING No Name of the service running.
services.sip SubRecord No
services.sip.code INTEGER No
services.sip.server STRING No Server software reported by service
services.sip.status STRING No
services.sip.version STRING No SIP version
services.skinny SubRecord No
services.skinny.response BYTES No
services.smb SubRecord No
services.smb.group_name STRING No Default group name
services.smb.has_ntlm BOOLEAN No Server supports the NTLM authentication method
services.smb.native_os STRING No Server-identified operating system
services.smb.negotiation_log SubRecord No
services.smb.negotiation_log.authentication_types STRING Yes
services.smb.negotiation_log.capabilities INTEGER No
services.smb.negotiation_log.dialect_revision INTEGER No
services.smb.negotiation_log.header_log SubRecord No
services.smb.negotiation_log.header_log.command INTEGER No
services.smb.negotiation_log.header_log.credits INTEGER No
services.smb.negotiation_log.header_log.flags INTEGER No
services.smb.negotiation_log.header_log.protocol_id BYTES No
services.smb.negotiation_log.header_log.status INTEGER No
services.smb.negotiation_log.security_mode INTEGER No
services.smb.negotiation_log.server_guid BYTES No
services.smb.negotiation_log.server_start_time INTEGER No
services.smb.negotiation_log.system_time INTEGER No
services.smb.ntlm STRING No Native LAN manager
services.smb.session_setup_log SubRecord No
services.smb.session_setup_log.header_log SubRecord No
services.smb.session_setup_log.header_log.command INTEGER No
services.smb.session_setup_log.header_log.credits INTEGER No
services.smb.session_setup_log.header_log.flags INTEGER No
services.smb.session_setup_log.header_log.protocol_id BYTES No
services.smb.session_setup_log.header_log.status INTEGER No
services.smb.session_setup_log.negotiate_flags INTEGER No
services.smb.session_setup_log.setup_flags INTEGER No
services.smb.session_setup_log.target_name STRING No
services.smb.smb_capabilities SubRecord No Capabilities flags for the connection. See [MS-SMB2] Sect. 2.2.4.
services.smb.smb_capabilities.smb_dfs_support BOOLEAN No Server supports Distributed File System
services.smb.smb_capabilities.smb_directory_leasing_support BOOLEAN No Server supports directory leasing
services.smb.smb_capabilities.smb_encryption_support BOOLEAN No Server supports encryption
services.smb.smb_capabilities.smb_leasing_support BOOLEAN No Server supports Leasing
services.smb.smb_capabilities.smb_multichan_support BOOLEAN No Server supports multiple channels per session
services.smb.smb_capabilities.smb_multicredit_support BOOLEAN No Server supports multi-credit operations
services.smb.smb_capabilities.smb_persistent_handle_support BOOLEAN No Server supports persistent handles
services.smb.smb_version SubRecord No
services.smb.smb_version.major INTEGER No Major version
services.smb.smb_version.minor INTEGER No Minor version
services.smb.smb_version.revision INTEGER No Protocol Revision
services.smb.smb_version.version_string STRING No Full SMB Version String
services.smb.smbv1_support BOOLEAN No
services.smtp SubRecord No
services.smtp.banner BYTES No The STMP banner.
services.smtp.ehlo BYTES No The server's response to the EHLO command.
services.smtp.implicit_tls BOOLEAN No This field is no longer used, and it always null.
services.smtp.start_tls BYTES No The server's response to the STARTTLS command.
services.snmp SubRecord No
services.snmp.oid_interfaces SubRecord No 1.3.6.1.2.1.2 - Interfaces
services.snmp.oid_interfaces.num_ifaces INTEGER No 1.3.6.1.2.1.2.1 - Number of network interfaces
services.snmp.oid_physical SubRecord No 1.3.6.1.2.1.47.1.1.1.1 - Entity Physical
services.snmp.oid_physical.firmware_rev STRING No 1.3.6.1.2.1.47.1.1.1.1.9 - Firmware revision string
services.snmp.oid_physical.hardware_rev STRING No 1.3.6.1.2.1.47.1.1.1.1.8 - Hardware revision string
services.snmp.oid_physical.mfg_name STRING No 1.3.6.1.2.1.47.1.1.1.1.12 - Name of mfg
services.snmp.oid_physical.model_name STRING No 1.3.6.1.2.1.47.1.1.1.1.13 - Model name of component
services.snmp.oid_physical.name STRING No 1.3.6.1.2.1.47.1.1.1.1.7 - Entity name
services.snmp.oid_physical.serial_num STRING No 1.3.6.1.2.1.47.1.1.1.1.11 - Serial number string
services.snmp.oid_physical.software_rev STRING No 1.3.6.1.2.1.47.1.1.1.1.10 - Software revision string
services.snmp.oid_system SubRecord No 1.3.6.1.2.1.1 - System Variables
services.snmp.oid_system.contact STRING No 1.3.6.1.2.1.1.4 - Contact info
services.snmp.oid_system.desc STRING No 1.3.6.1.2.1.1.1 - Description of entity
services.snmp.oid_system.init_time INTEGER No 1.3.6.1.2.1.1.3 - 1/100ths of sec
services.snmp.oid_system.location STRING No 1.3.6.1.2.1.1.6 - Physical location
services.snmp.oid_system.name STRING No 1.3.6.1.2.1.1.5 - Name, usually FQDN
services.snmp.oid_system.object_id STRING No 1.3.6.1.2.1.1.2 - Vendor ID
services.snmp.oid_system.services SubRecord No 1.3.6.1.2.1.1.7 - Set of services offered by entity
services.snmp.oid_system.services.layer_1 BOOLEAN No Physical (e.g. repeaters)
services.snmp.oid_system.services.layer_2 BOOLEAN No Datalink/subnetwork (e.g. bridges)
services.snmp.oid_system.services.layer_3 BOOLEAN No Internet (e.g. IP gateways)
services.snmp.oid_system.services.layer_4 BOOLEAN No End-to-end (e.g. IP hosts)
services.snmp.oid_system.services.layer_5 BOOLEAN No OSI layer 5
services.snmp.oid_system.services.layer_6 BOOLEAN No OSI layer 6
services.snmp.oid_system.services.layer_7 BOOLEAN No Applications (e.g. mail relays)
services.software SubRecord Yes List of software products detected on this service, including CPE 2.3 formatted names.
services.software.component_uniform_resource_identifiers STRING Yes URIs of software components related to the identified software.
services.software.edition STRING No Captures edition-related terms applied by the vendor to the product, deprecated in CPE 2.3, but kept for backwards compatibility with CPE 2.2.
services.software.language STRING No Valid language tag as defined by [RFC5646], and should be used to define the language supported in the user interface of the product being described.
services.software.other SubRecord Yes Other attributes describing the identified software
services.software.other.key STRING No
services.software.other.value STRING No
services.software.part STRING No Defines the class of this software, a for application, o for operating system, h for hardware devices.
services.software.product STRING No Identifies the most common and recognizable title or name of the product.
services.software.source STRING No Defines the source that this software information was derived from.
services.software.sw_edition STRING No Characterizes how the product is tailored to a particular market or class of end users.
services.software.target_hw STRING No Characterizes the instruction set architecture (e.g., x86) on which the product being described. Bytecode-intermediate languages, such as Java bytecode for the Java Virtual Machine or Microsoft Common Intermediate Language for the Common Language Runtime virtual machine, are be considered instruction set architectures.
services.software.target_sw STRING No Characterizes the software computing environment within which the product operates.
services.software.uniform_resource_identifier STRING No CPE uri format as defined here: https://nvlpubs.nist.gov/nistpubs/Legacy/IR/nistir7695.pdf
services.software.update STRING No Vendor-Specific alphanumeric strings characterizing the particular update, service pack, or point release of the product.
services.software.vendor STRING No Identifies the person or organization that manufactured or created the product.
services.software.version STRING No Vendor-Specific alphanumeric strings characterizing the particular release version of the product.
services.source_ip STRING No The Source IP address that censys saw the service from.
services.ssdp SubRecord No
services.ssdp.headers SubRecord Yes
services.ssdp.headers.key STRING No
services.ssdp.headers.value SubRecord No
services.ssdp.headers.value.headers BYTES Yes
services.ssdp.upnp_url STRING No
services.ssh SubRecord No
services.ssh.algorithm_selection SubRecord No
services.ssh.algorithm_selection.client_to_server_alg_group SubRecord No
services.ssh.algorithm_selection.client_to_server_alg_group.cipher STRING No
services.ssh.algorithm_selection.client_to_server_alg_group.compression STRING No
services.ssh.algorithm_selection.client_to_server_alg_group.mac STRING No
services.ssh.algorithm_selection.host_key_algorithm STRING No
services.ssh.algorithm_selection.kex_algorithm STRING No
services.ssh.algorithm_selection.server_to_client_alg_group SubRecord No
services.ssh.algorithm_selection.server_to_client_alg_group.cipher STRING No
services.ssh.algorithm_selection.server_to_client_alg_group.compression STRING No
services.ssh.algorithm_selection.server_to_client_alg_group.mac STRING No
services.ssh.endpoint_id SubRecord No
services.ssh.endpoint_id.comment STRING No
services.ssh.endpoint_id.protocol_version STRING No
services.ssh.endpoint_id.raw BYTES No
services.ssh.endpoint_id.software_version STRING No
services.ssh.hassh_fingerprint STRING No
services.ssh.kex_init_message SubRecord No
services.ssh.kex_init_message.client_to_server_ciphers STRING Yes A list of ssh cipher algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-16 for standard values.
services.ssh.kex_init_message.client_to_server_compression STRING Yes A list of ssh compression algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-20 for standard values.
services.ssh.kex_init_message.client_to_server_languages STRING Yes A name-list of language tags in order of preference. As Defined in https://www.ietf.org/rfc/rfc3066.txt.
services.ssh.kex_init_message.client_to_server_macs STRING Yes A list of ssh MAC algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-18 for standard values.
services.ssh.kex_init_message.first_kex_follows BOOLEAN No
services.ssh.kex_init_message.host_key_algorithms STRING Yes Asymmetric key algorithms for the host key supported by the client.
services.ssh.kex_init_message.kex_algorithms STRING Yes Key exchange algorithms used in the handshake.
services.ssh.kex_init_message.server_to_client_ciphers STRING Yes A list of ssh cipher algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-16 for standard values.
services.ssh.kex_init_message.server_to_client_compression STRING Yes A list of ssh compression algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-20 for standard values.
services.ssh.kex_init_message.server_to_client_languages STRING Yes A name-list of language tags in order of preference. As Defined in https://www.ietf.org/rfc/rfc3066.txt.
services.ssh.kex_init_message.server_to_client_macs STRING Yes A list of ssh MAC algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-18 for standard values.
services.ssh.server_host_key SubRecord No
services.ssh.server_host_key.certkey_public_key STRING No
services.ssh.server_host_key.dsa_public_key SubRecord No
services.ssh.server_host_key.dsa_public_key.g BYTES No
services.ssh.server_host_key.dsa_public_key.p BYTES No
services.ssh.server_host_key.dsa_public_key.q BYTES No
services.ssh.server_host_key.dsa_public_key.y BYTES No
services.ssh.server_host_key.ecdsa_public_key SubRecord No
services.ssh.server_host_key.ecdsa_public_key.b BYTES No
services.ssh.server_host_key.ecdsa_public_key.curve STRING No
services.ssh.server_host_key.ecdsa_public_key.gx BYTES No
services.ssh.server_host_key.ecdsa_public_key.gy BYTES No
services.ssh.server_host_key.ecdsa_public_key.length INTEGER No
services.ssh.server_host_key.ecdsa_public_key.n BYTES No
services.ssh.server_host_key.ecdsa_public_key.p BYTES No
services.ssh.server_host_key.ecdsa_public_key.pub BYTES No
services.ssh.server_host_key.ecdsa_public_key.x BYTES No
services.ssh.server_host_key.ecdsa_public_key.y BYTES No
services.ssh.server_host_key.ed25519_public_key SubRecord No
services.ssh.server_host_key.ed25519_public_key.public_bytes BYTES No
services.ssh.server_host_key.fingerprint_sha256 STRING No
services.ssh.server_host_key.rsa_public_key SubRecord No
services.ssh.server_host_key.rsa_public_key.exponent BYTES No
services.ssh.server_host_key.rsa_public_key.length INTEGER No
services.ssh.server_host_key.rsa_public_key.modulus BYTES No
services.team_viewer SubRecord No
services.team_viewer.response BYTES No
services.telnet SubRecord No
services.telnet.banner BYTES No
services.telnet.do SubRecord Yes
services.telnet.do.key INTEGER No
services.telnet.do.value STRING No
services.telnet.dont SubRecord Yes
services.telnet.dont.key INTEGER No
services.telnet.dont.value STRING No
services.telnet.will SubRecord Yes
services.telnet.will.key INTEGER No
services.telnet.will.value STRING No
services.telnet.wont SubRecord Yes
services.telnet.wont.key INTEGER No
services.telnet.wont.value STRING No
services.tls SubRecord No Information about tls handshake done with this host.
services.tls.certificates SubRecord No Certificate and certificate chain details.
services.tls.certificates.chain SubRecord Yes Certificate chain information.
services.tls.certificates.chain.fingerprint STRING No SHA 256 fingerprint of the certificate in the certificate chain.
services.tls.certificates.chain.issuer_dn STRING No Distinguished name of the entity that has signed and issued the certificate.
services.tls.certificates.chain.subject_dn STRING No Distinguished name of the entity that the certificate belongs to.
services.tls.certificates.chain_fps_sha_256 BYTES Yes DEPRECATED (04/30/2021) - Use `chain` instead.
services.tls.certificates.leaf_data SubRecord No The TBS Certificate information.
services.tls.certificates.leaf_data.fingerprint STRING No SHA256 fingerprint of the TBS certificate.
services.tls.certificates.leaf_data.issuer SubRecord No Issuer distinguished name attributes.
services.tls.certificates.leaf_data.issuer.common_name STRING Yes
services.tls.certificates.leaf_data.issuer.country STRING Yes
services.tls.certificates.leaf_data.issuer.domain_component STRING Yes
services.tls.certificates.leaf_data.issuer.email_address STRING Yes
services.tls.certificates.leaf_data.issuer.jurisdiction_country STRING Yes
services.tls.certificates.leaf_data.issuer.jurisdiction_locality STRING Yes
services.tls.certificates.leaf_data.issuer.jurisdiction_province STRING Yes
services.tls.certificates.leaf_data.issuer.locality STRING Yes
services.tls.certificates.leaf_data.issuer.organization STRING Yes
services.tls.certificates.leaf_data.issuer.organization_id STRING Yes
services.tls.certificates.leaf_data.issuer.organizational_unit STRING Yes
services.tls.certificates.leaf_data.issuer.postal_code STRING Yes
services.tls.certificates.leaf_data.issuer.province STRING Yes
services.tls.certificates.leaf_data.issuer.serial_number STRING Yes
services.tls.certificates.leaf_data.issuer.street_address STRING Yes
services.tls.certificates.leaf_data.issuer_dn STRING No Distinguished name of the entity that has signed and issued the certificate.
services.tls.certificates.leaf_data.names STRING Yes Common names for the entity.
services.tls.certificates.leaf_data.pubkey_algorithm STRING No Algorithm used to create the public key.
services.tls.certificates.leaf_data.pubkey_bit_size INTEGER No Size of the public key.
services.tls.certificates.leaf_data.public_key SubRecord No Subject public key information.
services.tls.certificates.leaf_data.public_key.dsa SubRecord No
services.tls.certificates.leaf_data.public_key.dsa.g BYTES No
services.tls.certificates.leaf_data.public_key.dsa.p BYTES No
services.tls.certificates.leaf_data.public_key.dsa.q BYTES No
services.tls.certificates.leaf_data.public_key.dsa.y BYTES No
services.tls.certificates.leaf_data.public_key.ecdsa SubRecord No
services.tls.certificates.leaf_data.public_key.ecdsa.b BYTES No
services.tls.certificates.leaf_data.public_key.ecdsa.curve STRING No
services.tls.certificates.leaf_data.public_key.ecdsa.gx BYTES No
services.tls.certificates.leaf_data.public_key.ecdsa.gy BYTES No
services.tls.certificates.leaf_data.public_key.ecdsa.length INTEGER No
services.tls.certificates.leaf_data.public_key.ecdsa.n BYTES No
services.tls.certificates.leaf_data.public_key.ecdsa.p BYTES No
services.tls.certificates.leaf_data.public_key.ecdsa.pub BYTES No
services.tls.certificates.leaf_data.public_key.ecdsa.x BYTES No
services.tls.certificates.leaf_data.public_key.ecdsa.y BYTES No
services.tls.certificates.leaf_data.public_key.fingerprint STRING No
services.tls.certificates.leaf_data.public_key.key_algorithm STRING No
services.tls.certificates.leaf_data.public_key.rsa SubRecord No
services.tls.certificates.leaf_data.public_key.rsa.exponent BYTES No
services.tls.certificates.leaf_data.public_key.rsa.length INTEGER No
services.tls.certificates.leaf_data.public_key.rsa.modulus BYTES No
services.tls.certificates.leaf_data.signature SubRecord No Certificate signature information.
services.tls.certificates.leaf_data.signature.self_signed BOOLEAN No Denotes if the certificate was self signed.
services.tls.certificates.leaf_data.signature.signature_algorithm STRING No Cryptographic algorithm used by the CA to sign this certificate.
services.tls.certificates.leaf_data.subject SubRecord No Subject distinguished name attributes.
services.tls.certificates.leaf_data.subject.common_name STRING Yes
services.tls.certificates.leaf_data.subject.country STRING Yes
services.tls.certificates.leaf_data.subject.domain_component STRING Yes
services.tls.certificates.leaf_data.subject.email_address STRING Yes
services.tls.certificates.leaf_data.subject.jurisdiction_country STRING Yes
services.tls.certificates.leaf_data.subject.jurisdiction_locality STRING Yes
services.tls.certificates.leaf_data.subject.jurisdiction_province STRING Yes
services.tls.certificates.leaf_data.subject.locality STRING Yes
services.tls.certificates.leaf_data.subject.organization STRING Yes
services.tls.certificates.leaf_data.subject.organization_id STRING Yes
services.tls.certificates.leaf_data.subject.organizational_unit STRING Yes
services.tls.certificates.leaf_data.subject.postal_code STRING Yes
services.tls.certificates.leaf_data.subject.province STRING Yes
services.tls.certificates.leaf_data.subject.serial_number STRING Yes
services.tls.certificates.leaf_data.subject.street_address STRING Yes
services.tls.certificates.leaf_data.subject_dn STRING No Distinguished name of the entity associated with the public key.
services.tls.certificates.leaf_data.tbs_fingerprint STRING No Fingerprint of the TBS certificate.
services.tls.certificates.leaf_fp_sha_256 BYTES No SHA 256 fingerprint of the TBS certificate.
services.tls.cipher_selected STRING No Cipher suite chosen for the exchange.
services.tls.ja3s BYTES No The JA3S fingerprint for this service.
services.tls.server_key_exchange SubRecord No DEPRECATED (05/03/2021)
services.tls.server_key_exchange.dh_params SubRecord No Diffie-Hellman key exchange parameters used.
services.tls.server_key_exchange.dh_params.group SubRecord No Diffie-Hellman group details.
services.tls.server_key_exchange.dh_params.group.g BYTES No
services.tls.server_key_exchange.dh_params.group.p BYTES No
services.tls.server_key_exchange.dh_params.public_key BYTES No
services.tls.server_key_exchange.ec_params SubRecord No Elliptic-Curve key exchange parameters used.
services.tls.server_key_exchange.ec_params.named_curve INTEGER No Elliptic-Curve ID value.
services.tls.server_key_exchange.ec_params.public_key BYTES No
services.tls.server_key_exchange.rsa_params SubRecord No DEPRECATED (05/10/2021) - Can be found in the public key RSA details.
services.tls.server_key_exchange.rsa_params.public_key SubRecord No
services.tls.server_key_exchange.rsa_params.public_key.e BYTES No
services.tls.server_key_exchange.rsa_params.public_key.n BYTES No
services.tls.server_key_exchange.signature STRING No DEPRECATED (05/10/2021)
services.tls.session_ticket SubRecord No The new session ticket sent by the server to the client.
services.tls.session_ticket.length INTEGER No
services.tls.session_ticket.lifetime_hint INTEGER No Hint from server about how long the session ticket should be stored.
services.tls.version_selected STRING No Certificate version v1(0), v2(1), v3(2).
services.transport STRING No Transport protocol used to contact this service.
services.transport_fingerprint SubRecord No Metadata collected about the transport protocol connection to this service.
services.transport_fingerprint.id INTEGER No
services.transport_fingerprint.os STRING No
services.transport_fingerprint.quic SubRecord No
services.transport_fingerprint.quic.versions INTEGER Yes Raw versions presented in the QUIC version negotiation packet, if any.
services.transport_fingerprint.raw STRING No
services.truncated BOOLEAN No If true, the banner is limited to 100 bytes and there is no nested service message
services.unknown SubRecord No
services.unknown.banner BYTES No A byte array representing raw response from a host
services.unknown.transport STRING No
services.upnp SubRecord No
services.upnp.devices SubRecord Yes
services.upnp.devices.device_type STRING No
services.upnp.devices.friendly_name STRING No
services.upnp.devices.id INTEGER No Censys-generated IDs representing a device tree
services.upnp.devices.manufacturer STRING No
services.upnp.devices.manufacturer_url STRING No
services.upnp.devices.model_description STRING No
services.upnp.devices.model_name STRING No
services.upnp.devices.model_number STRING No
services.upnp.devices.model_url STRING No
services.upnp.devices.parent_id INTEGER No
services.upnp.devices.presentation_url STRING No
services.upnp.devices.serial_number STRING No
services.upnp.devices.service_list SubRecord Yes
services.upnp.devices.service_list.control_url STRING No
services.upnp.devices.service_list.event_sub_url STRING No
services.upnp.devices.service_list.scpd_url STRING No
services.upnp.devices.service_list.service_id STRING No
services.upnp.devices.service_list.service_type STRING No
services.upnp.devices.udn STRING No
services.upnp.devices.upc STRING No
services.upnp.endpoint STRING No
services.upnp.headers SubRecord Yes
services.upnp.headers.key STRING No
services.upnp.headers.value SubRecord No
services.upnp.headers.value.headers BYTES Yes
services.upnp.spec SubRecord No
services.upnp.spec.major STRING No
services.upnp.spec.minor STRING No
services.vnc SubRecord No
services.vnc.connection_failed_reason BYTES No If server terminates handshake, the reason offered (if any)
services.vnc.desktop_name BYTES No Desktop name provided by the server, capped at 255 bytes
services.vnc.pixel_encoding SubRecord No
services.vnc.pixel_encoding.name BYTES No
services.vnc.pixel_encoding.value INTEGER No
services.vnc.screen_info SubRecord No
services.vnc.screen_info.height INTEGER No
services.vnc.screen_info.name_len INTEGER No
services.vnc.screen_info.pixel_format SubRecord No
services.vnc.screen_info.pixel_format.big_endian BOOLEAN No If pixel RGB data are in big-endian
services.vnc.screen_info.pixel_format.bits_per_pixel INTEGER No How many bits in a single full pixel datum. Valid values are: 8, 16, 32
services.vnc.screen_info.pixel_format.blue_max INTEGER No Max value of blue pixel
services.vnc.screen_info.pixel_format.blue_shift INTEGER No How many bits to right shift a pixel datum to get blue bits in lsb
services.vnc.screen_info.pixel_format.depth INTEGER No Color depth
services.vnc.screen_info.pixel_format.green_max INTEGER No Max value of green pixel
services.vnc.screen_info.pixel_format.green_shift INTEGER No How many bits to right shift a pixel datum to get green bits in lsb
services.vnc.screen_info.pixel_format.padding1 INTEGER No
services.vnc.screen_info.pixel_format.padding2 INTEGER No
services.vnc.screen_info.pixel_format.padding3 INTEGER No
services.vnc.screen_info.pixel_format.red_max INTEGER No Max value of red pixel
services.vnc.screen_info.pixel_format.red_shift INTEGER No How many bits to right shift a pixel datum to get red bits in lsb
services.vnc.screen_info.pixel_format.true_color BOOLEAN No If false, color maps are used
services.vnc.screen_info.width INTEGER No
services.vnc.security_types SubRecord Yes server-specified security options
services.vnc.security_types.name BYTES No
services.vnc.security_types.value INTEGER No
services.vnc.version BYTES No
services.x11 SubRecord No
services.x11.refusal_reason STRING No
services.x11.requires_authentication BOOLEAN No
services.x11.roots SubRecord Yes
services.x11.roots.windows SubRecord Yes
services.x11.roots.windows.application_class STRING No
services.x11.roots.windows.application_name STRING No
services.x11.roots.windows.window_title STRING No
services.x11.vendor STRING No
services.x11.version STRING No
snapshot_date TIMESTAMP No Date the snapshot was generated