AS398705: Censys, Inc.
HoneyLabs honeypots recorded 55,389 probes from AS398705 (Censys, Inc.) in the last 7 days, originating from 14 distinct source IP addresses.
First observed 2026-11-07 09:17, most recently 2026-11-14 09:16 (UTC).
What the sensors show
Probes arrived on every day of the 7-day window. The busiest day was 2026-11-12, with 8,225. Its 14 addresses probed 5,661 distinct ports. No port took more than 1% of the probes. No single address sent more than 8% of them. 14 of the 14 busiest addresses are recognised research scanners.
Ports it targets
| Port | Probes |
|---|---|
| 4841 | 135 |
| 9090 | 110 |
| 1962 | 108 |
| 20548 | 99 |
| 18246 | 90 |
| 18245 | 90 |
| 4840 | 90 |
| 4839 | 90 |
Most active source addresses
| Source IP | Probes | Network | Country |
|---|---|---|---|
| 167.94.146.53 | 4,429 | United States | |
| 167.94.146.56 | 4,251 | United States | |
| 167.94.146.57 | 4,165 | United States | |
| 167.94.146.54 | 4,055 | United States | |
| 167.94.146.48 | 4,031 | United States | |
| 167.94.146.59 | 3,940 | United States | |
| 167.94.146.49 | 3,937 | United States | |
| 167.94.146.61 | 3,917 | United States |
Where it comes from
| Country | Probes |
|---|---|
| United States | 55,389 |
Client strings it sends
| User agent | Probes |
|---|---|
| Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 40,996 |
| Go-http-client/1.1 | 1 |
ASN report
ASN report
Loading