Ask the community

Hello,While analyzing some hosts in the Censys Platform (Web GUI), we found that the Services section sometimes shows “HTTP [many] / TCP” instead of a specific port number.The detailed view mentions that:“This host has multiple services detected on various TCP ports. Displayed as ‘HTTP [many] / TCP’ to indicate a combination of identified and sampled services.”We can identify the representative port using:"host.services.representative_info.sampled_port"Is there a way to retrieve a list of all TCP ports on which HTTP services were detected, other than the representative sampled port?Thanks in advance!

Is there any way to include the API into subfinder ? i tried everything, but it seems you can no longer do it.I would appreciate any help, since i bought a subscription only to use the API keys with subfinder.Otherwise, i have absolutely no use now .

According to:https://docs.censys.com/docs/censys-credits#censys-credits-for-free-and-starter-users“Every Free and Starter user receives 100 credits per month for free. Unused credits expire at the end of each month. Free accounts provide access to basic protocols and services for search and exploration.” I’ve never received any credits, and have thusly been unable to evaluate the service, is there something wrong with my account or is the documentation incorrect?

I have read all the documentation but nothing is clear, how do I and what is the right thing to use for the request, one page says need API ID and Secret, another page says Token and Organization ID, I need to submit a request to Censys Search and I have 500 credits, but how do I do submit the request?

Dear Users,I would like to use the free version of censys, but it seems that I have run out of credits.I just checked the last credits usage and it should be ok since I didn’t use censys for several months (I used censys only one time in May).Is there a way to continue to use censys in free mode?Thank you, 

Credit Management says that my credits have run out, but it says that I have only used 35 credits out of the 100 that are provided free of charge per month. It says 0/0 Available.

Hope all is well,Team Censys This is Reyben, thank you for granting the research access, big fan of Censys will be promoting your platform now that you guys have the map :). This will do wonders for CR-ISAC. I’m not sure if it was my personal email or the my SANS .edu email that was granted research access. Also not sure if my SANS .edu email is still active and if that was a factor to the issue. Does the research access take a few days to activate, my dashboard still indicate I have ran out of credits for both personal and .edu account.  Trying to dial down infected SLTT - State, Local, tribal entities infected with CVE-20205-53770/1 via Sharepoint implant  Thanks again!Reyben

So, with the old Censys API, I used the Python SDK search, with pagination.  With the new Censys Platform API Python SDK, I don’t see pagination with the search method. Would the new search method be able to handle very large rows of results, even though it doesn’t allow for pagination?  Do I need to use a different methodology (maybe even using the API without the SDK), to return large amounts of data?As such, what’s considered, “large”. As well, my user is in a Commercial Pro account. I used to be able to email support@censys.io , but now I get an autoresponse saying that I’m not eligable. Thanks!

Hi Censys Team,I'm trying to generate a report in the Report Builder using the host.whois.network.cidrs/whois.network.cidrs (in legacy censys) field to analyze CIDR blocks associated with WHOIS records, but it seems this field is not currently supported. When attempting to build the report, I get the following error in the legacy one:Error 422. Invalid field: Term aggregations are not supported. If you believe this is an error on our part, please contact us. and here's a screenshot for the same in new platform:It appears that term aggregations for host.whois.network.cidrs / whois.network.cidrs are either disabled or not yet implemented in the Report Builder. This field would be extremely useful for understanding IP space distribution across organizations or registrants at a CIDR level.Could you please confirm if this field will be supported in future updates? If not currently on the roadmap, I’d love to request this as a feature enhancement.Thanks in advance!

I’ve looked over the API docs https://app.censys.io/api-docs for ASM, but I am not sure what endpoint is used or if there is one to exclude assets from ASM. Is there an ability to do that from the API?I am trying to use Torq to set a quick action from their case management tool so that if we verify it no longer belongs to use, we can exclude the address or domain from Censys ASM.

Hi, I could access research before, but after the platform upgrade, I lost access. How can I get it back?

Hello!I hadn’t touched my code for a week or two, and running it again I found that it didn’t work anymore. I went back to almost one of the examples from the official repository:from censys.search import CensysHostsif __name__ == "__main__": api_id = "XXX" api_secret = "YYY" h = CensysHosts(api_id, api_secret) query = h.search("services.service_name: FTP", per_page=1, pages=2) all_hosts = query.view_all() print(all_hosts)And I’m still encountering an exception:Traceback (most recent call last): File "[...]\debug.py", line 10, in <module> all_hosts = query.view_all() ^^^^^^^^^^^^^^^^ File "[...]\.venv\Lib\site-packages\censys\search\v2\api.py", line 208, in view_all for hit in self.__call__(): ^^^^^^^^^^^^^^^ File "[...]\.venv\Lib\site-packages\censys\search\v2\api.py", line 168, in __call__ self.total = result["total"] ~~~~~~^^^^^^^^^TypeError: string indices must be integers, not 'str'While debugging, I

Beginning May 1, 2025, the number of IPv6 records in Censys host datasets will drop by approximately 492 million. These 492 million records represent data that is identical to data on other records and of very low utility. The records will remain in Censys historical datasets.This drop in IPv6 data records is due to a change that Censys made to our scanning infrastructure in mid-April. The Censys team made this change to ensure that our data remains accurate, representative of the global public internet, and easy to search.Censys scanners continue to scan web properties that resolve to the IPs for which duplicate records are being dropped. IPv4 records are unaffected. This change will not affect domain-based scanning behavior.If you have any questions about this change, feel free to ask in the comments on this post.

I just started using Censys Search and want to export search results which I understand requires using the Censys CLI. So I’ve installed https://github.com/censys/censys-python and created a PAT at https://accounts.censys.io/settings/personal-access-tokens?org=xxx-xxxxxx but when attempting to authenticate I get a “failed to authenticate” error. Your documentation at https://docs.censys.com/reference/get-started is unclear in what the "Censys API ID” is, it sounds like it’s the Organization ID, which I tried to use. I’ve also tried the token name, and my email address. None seem to work. Here is the output: ❯ censys configCensys API ID: xxx-xxxxxxCensys API Secret: censys_9xxxxxxx7R_JbsxxxxxxxxxxxGSDo you want color output? [y/n]: yFailed to authenticate So I’m asking for clarity on what the Censys API ID is supposed to be. And if it is the Org ID, than any other ideas on why it’s failing to authenticate? I already checked RBAC and my user does have “API Access” enabled.

I've requested research access for my account. And I have been set the right value for $CENSYS_API_ID and $CENSYS_API_SECRETHowever, the server sends me “error message” so I seek for help to download data with my api.curl -X "GET" "https://search.censys.io/api/v1/data/universal-internet-dataset-v2-ipv4" -H "Accept: application/json" --user "$CENSYS_API_ID:$CENSYS_API_SECRET"{"status": "error", "error": "This server could not verify that you are authorized to access the document you requested.  Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.", "error_type": "unknown"}

Anyone else faced the following issue? We have tried to cancel our Teams plan in several ways, but failed:By updating “Payment Settings” through My Account. The given “contact support” blue-button does not work; For Teams plan, no support is provided. So the ticket system auto-denied the request. By contacting self-service@censys.com. No response. Calling the listed US phone-numbers, no contact. Was able to leave voice message though, but no follow-up unfortunately.Is there any other way to change payment setting or cancel this subscription? What is the best way to resolve this?

I recently upgraded my account to use the API after the recent platform update.I am using Windows CMD to run queries and successfully download the results as a JSON file.However I noticed that the JSON file only contains the first page of results, while the full query results are available when I run the same query on the website I would like to download the entire set of results as a JSON file. Could you please guide me on how to achieve this uising the API? curl -X "POST" "https://api.platform.censys.io/v3/global/search/query?organization_id=secret" --header "X-Organization-ID: secret" --header "Accept: application/json" --header "Authorization: secret" --header "Content-Type: application/json" -d "{\"query\":\"1.1.0.0\"}" > 1.1.json  

I was trying to use censys platform but keep getting redirected between platform and the account page. Tried different browsers such as Firefox, Chrome etc. Cleared browser caches, cookies, incognito mode… all didn’t work.

Hello,I noticed that when I log in and attempt to access Censys Search, I am automatically redirected to the Censys Platform. As a result, I am unable to access the legacy search interface.Could you please clarify if there is still a way to access the legacy search?Additionally, with Censys Search being deprecated after March 31st, I wanted to confirm whether this deprecation also applies to the v2 APIs, or if only the legacy search interface will be affected.Also is threat hunting capability added?Thank you for your guidance!

When I tried to search with Censys Platform API, I encountered 403 error.Search / Query Request:curl --request POST \     --url 'https://api.platform.censys.io/v3/global/search/query?org=zzzz \     --header 'accept: application/vnd.censys.api.v3.search.v1+json' \     --header 'authorization: Bearer censys_xxxxxxxxx_xxxxxxxxxxxxxxxxx' \     --header 'content-type: application/json' \     --data '{"query":"8.8.8.8"}' Response:{  "title": "Forbidden",  "status": 403,  "detail": "Forbidden"}

Is it possible to mutiple query into one line via API and get the result into CSV? Like IP, open port, soft name, service, EOL etc.

I don’t think Censys Search Solo or Teams plans include support via tickets or email. In this case, how should I proceed if I need to update my credit card information or discuss cancellation? I’ve tried reaching out via email, but I haven’t received a response. Also, I can’t disclose my credit card information here. Could you please advise on the best way to resolve this?

would like to know who might be in charge of technology partnerships so users can use Censys with their favorite  Threat Intel platform sadly Censys is not part of my favorite TIP - Open CTI - https://filigran.notion.site/OpenCTI-Ecosystem-868329e9fb734fca89692b2ed6087e76 just sayin

Hello, I am currently learning to use the /v2/hosts/search API endpoint with the optional "fields" parameter. I am successfully getting results but I am having issues specifically with the subfields under "services.http.response.headers", such as "services.http.response.headers.ETag", "services.http.response.headers.Server" and so on. I would expect these fields to work just like "services.port" or "services.service_name" and return a single value in the response, but they don't. If I specify any of these subfields, what I get in the response (as long as the particular service has any http headers) is a large list which seems to contain all values of the headers subfields, even subfields I didnt specify in the request. And the problem is its just a list of values (name of the field is "headers" for each value), so I dont know which value is the Server subfield, which value is the Content_Length subfield and so on (or if these subfields are present in the response at all), so this data

Hello. ¿The field services.banner is not compatible with censys?. When using the API it is possible to use: Error during consultation: 422 (Entidad not procesable): unvalidated visit field 'services.banner'. campo no supportado