AS398324: Censys, Inc.
HoneyLabs honeypots recorded 57,288 probes from AS398324 (Censys, Inc.) in the last 7 days, originating from 439 distinct source IP addresses.
First observed 2026-11-07 07:59, most recently 2026-11-14 07:58 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-08, with 10,085. Its 439 addresses probed 4,231 distinct ports. No port took more than 1% of the probes. No single address sent more than 0% of them. 25 of the 25 busiest addresses are recognised research scanners.
Ports it targets
| Port | Probes |
|---|---|
| 4841 | 300 |
| 4840 | 279 |
| 1962 | 271 |
| 1961 | 262 |
| 4839 | 258 |
| 1963 | 247 |
| 9090 | 231 |
| 18246 | 208 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 66.132.186.195 | 272 | United States | |
| 66.132.195.50 | 267 | United States | |
| 66.132.172.180 | 264 | United States | |
| 66.132.159.130 | 256 | United States | |
| 66.132.195.62 | 255 | United States | |
| 66.132.172.142 | 254 | United States | |
| 66.132.186.203 | 254 | United States | |
| 66.132.195.56 | 252 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 57,288 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 40,106 |
| Go-http-client/1.1 | 1 |
ASN report
ASN report
Loading