HoneyLabs
iAnonymous lookups: 10/min, 60/hr per source IP. Sign in (free) to lift the limit, run heavier queries, and get an API key for MCP / HTTP.

Filtered actors

rDNS contains=censys

384 unique IPs · 112.6K events · 1 countries · 4 ASNs

Activity · last 7d

2026-06-23: 586 events2026-06-24: 15.3K events2026-06-25: 16.5K events2026-06-26: 16.4K events2026-06-27: 16.2K events2026-06-28: 16.1K events2026-06-29: 16.1K events2026-06-30: 15.5K events

peak 16.5K on 2026-06-25

Top source networks · click to refine

Refine
Turn this query into a daily email digest or an IOC feed URL.Save as feed

Sample payloads

top distinct probes matching this query
ProtocolPortProbe / payloadHitsExample
HTTP26306GET /favicon.ico
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
40.1K · 383 IPs66.132.186.206 →
HTTP26306GET /
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
27.5K · 383 IPs66.132.186.206 →
-2630650 52 49 20 2a 20 48 54 54 50 2f 32 2e 30 0d 0a 0d 0a 53 4d 0d 0a 0d 0a …(57 bytes)13.6K · 383 IPs66.132.186.206 →
HTTP36152GET /security.txt
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
2.4K · 364 IPs167.94.146.62 →
HTTP27115GET /login
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
2.3K · 360 IPs66.132.195.78 →
HTTP26271GET /sitemap.xml
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
2.3K · 360 IPs66.132.172.110 →
HTTP26306GET /.well-known/security.txt
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
2.3K · 347 IPs66.132.186.206 →
HTTP46549GET /robots.txt
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
2.3K · 351 IPs66.132.195.48 →
HTTP43236GET /wiki
UA: Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)
2.2K · 359 IPs167.94.146.52 →
MQTT1883/MQTTMQTT CENSYS189 · 110 IPs199.45.155.109 →
-1963x� IBETH01N0_M151 · 119 IPs66.132.195.64 →
-18246115 · 86 IPs199.45.155.99 →
IPCountryASNTop portsEvents
Showing top 50 by event count. Window is the last 7d. Add or remove filters by clicking any value on a per-IP report.