iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.
Filtered actors
rDNS contains=censys
384 unique IPs · 112.6K events · 1 countries · 4 ASNs
Activity · last 7d
peak 16.5K on 2026-06-25
Top source networks · click to refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed
Sample payloads
top distinct probes matching this query| Protocol | Port | Probe / payload | Hits | Example |
|---|---|---|---|---|
| HTTP | 26306 | GET /favicon.ico UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 40.1K · 383 IPs | 66.132.186.206 → |
| HTTP | 26306 | GET / UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 27.5K · 383 IPs | 66.132.186.206 → |
| - | 26306 | 50 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a …(57 bytes) | 13.6K · 383 IPs | 66.132.186.206 → |
| HTTP | 36152 | GET /security.txt UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 2.4K · 364 IPs | 167.94.146.62 → |
| HTTP | 27115 | GET /login UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 2.3K · 360 IPs | 66.132.195.78 → |
| HTTP | 26271 | GET /sitemap.xml UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 2.3K · 360 IPs | 66.132.172.110 → |
| HTTP | 26306 | GET /.well-known/security.txt UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 2.3K · 347 IPs | 66.132.186.206 → |
| HTTP | 46549 | GET /robots.txt UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 2.3K · 351 IPs | 66.132.195.48 → |
| HTTP | 43236 | GET /wiki UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/) | 2.2K · 359 IPs | 167.94.146.52 → |
| MQTT | 1883/MQTT | MQTT CENSYS | 189 · 110 IPs | 199.45.155.109 → |
| - | 1963 | x� IBETH01N0_M | 151 · 119 IPs | 66.132.195.64 → |
| - | 18246 |