Censys Platform Q&A

Hello,While analyzing some hosts in the Censys Platform (Web GUI), we found that the Services section sometimes shows “HTTP [many] / TCP” instead of a specific port number.The detailed view mentions that:“This host has multiple services detected on various TCP ports. Displayed as ‘HTTP [many] / TCP’ to indicate a combination of identified and sampled services.”We can identify the representative port using:"host.services.representative_info.sampled_port"Is there a way to retrieve a list of all TCP ports on which HTTP services were detected, other than the representative sampled port?Thanks in advance!

Hello community,When you search for a host in the Censys WEB UI and open its details page, there is a RAW DATA tab that shows the host's data in JSON format, like this image:I would like to retrieve that exact JSON data via the Censys Platform API.I tried using the search query endpoint(https://docs.censys.com/reference/v3-globaldata-search-query) with the following query:host.ip="<IP Address>" OR web.hostname="<IP Address>"However the API response was different from what appears in the RAW DATA in the WEB UI.Should I use a different endpoint? Or is my query incorrect?Could someone advise on how to retrieve an API response that matches the RAW DATA shown in the WEB UI?Thanks for your help.

Hello, This is Takeshi.Does the Censys Platform API provide a way to retrieve credit usage data? If so, which endpoint should be used?

Hello, I’m currently on a Censys Solo plan and use ~250 of my 500 allowed queries monthly. I’m trying to figure out how my current usage would translate to the new Credits system on the platform. My understanding is that with the Solo plan, the queries are deducted from the quota for the initial query and for each “pagination” if a query returns multiple pages. So I can assume that my monthly usage is equivalent to ~250 pages of results. With the new Credits system, it seems to be the same, except that the cost is 5 credits/query (or 5 credits / page). This means that 250 legacy queries == 1250 credits. I must be missing something here since the new credits system seems to be a lot more expensive. Could you please clarify what would be the equivalent of that 500 queries quota with the new credits system? Thank you

Hello,Just to be sure, was there any scheduled maintenance or temporary connectivity issue related to the Censys Search API between 15:00 and 16:00 UTC on November 1st?The reason I ask is that we encountered a “Connection aborted” error when attempting API requests during that time window.Thank you in advance for your support.

Hello,Since the transition to the Censys Platform, it appears that multiple HTTP URIs can now be returned for a single IP and port.However, the API response alone doesn’t seem to indicate which HTTP URI actually matched the query condition.Although the "matched_services" field includes the port number that matched the query, it’s unclear which specific URI within that port satisfied the query.Here’s an example for reference:I’m using the following API endpoint and query with the Censys Platform API: API endpoint: https://api.platform.censys.io/v3/global/search/query Query: host.services.endpoints.http.body:"xxx" (using a specific keyword in practice) In the API response, the "matched_services" field shows the port number that matched the query.However, within the port listed in "matched_services", multiple HTTP URIs (for example: "/", "/login", "/robots.txt", etc.) can appear, and it seems that the API response does not indicate which specific HTTP URI actually matched the query cond

Is there any way to include the API into subfinder ? i tried everything, but it seems you can no longer do it.I would appreciate any help, since i bought a subscription only to use the API keys with subfinder.Otherwise, i have absolutely no use now .

According to:https://docs.censys.com/docs/censys-credits#censys-credits-for-free-and-starter-users“Every Free and Starter user receives 100 credits per month for free. Unused credits expire at the end of each month. Free accounts provide access to basic protocols and services for search and exploration.” I’ve never received any credits, and have thusly been unable to evaluate the service, is there something wrong with my account or is the documentation incorrect?

Dear Users,I would like to use the free version of censys, but it seems that I have run out of credits.I just checked the last credits usage and it should be ok since I didn’t use censys for several months (I used censys only one time in May).Is there a way to continue to use censys in free mode?Thank you, 

Credit Management says that my credits have run out, but it says that I have only used 35 credits out of the 100 that are provided free of charge per month. It says 0/0 Available.

Hope all is well,Team Censys This is Reyben, thank you for granting the research access, big fan of Censys will be promoting your platform now that you guys have the map :). This will do wonders for CR-ISAC. I’m not sure if it was my personal email or the my SANS .edu email that was granted research access. Also not sure if my SANS .edu email is still active and if that was a factor to the issue. Does the research access take a few days to activate, my dashboard still indicate I have ran out of credits for both personal and .edu account.  Trying to dial down infected SLTT - State, Local, tribal entities infected with CVE-20205-53770/1 via Sharepoint implant  Thanks again!Reyben

So, with the old Censys API, I used the Python SDK search, with pagination.  With the new Censys Platform API Python SDK, I don’t see pagination with the search method. Would the new search method be able to handle very large rows of results, even though it doesn’t allow for pagination?  Do I need to use a different methodology (maybe even using the API without the SDK), to return large amounts of data?As such, what’s considered, “large”. As well, my user is in a Commercial Pro account. I used to be able to email support@censys.io , but now I get an autoresponse saying that I’m not eligable. Thanks!

Hi Censys Team,I'm trying to generate a report in the Report Builder using the host.whois.network.cidrs/whois.network.cidrs (in legacy censys) field to analyze CIDR blocks associated with WHOIS records, but it seems this field is not currently supported. When attempting to build the report, I get the following error in the legacy one:Error 422. Invalid field: Term aggregations are not supported. If you believe this is an error on our part, please contact us. and here's a screenshot for the same in new platform:It appears that term aggregations for host.whois.network.cidrs / whois.network.cidrs are either disabled or not yet implemented in the Report Builder. This field would be extremely useful for understanding IP space distribution across organizations or registrants at a CIDR level.Could you please confirm if this field will be supported in future updates? If not currently on the roadmap, I’d love to request this as a feature enhancement.Thanks in advance!

Hi, I could access research before, but after the platform upgrade, I lost access. How can I get it back?

Beginning May 1, 2025, the number of IPv6 records in Censys host datasets will drop by approximately 492 million. These 492 million records represent data that is identical to data on other records and of very low utility. The records will remain in Censys historical datasets.This drop in IPv6 data records is due to a change that Censys made to our scanning infrastructure in mid-April. The Censys team made this change to ensure that our data remains accurate, representative of the global public internet, and easy to search.Censys scanners continue to scan web properties that resolve to the IPs for which duplicate records are being dropped. IPv4 records are unaffected. This change will not affect domain-based scanning behavior.If you have any questions about this change, feel free to ask in the comments on this post.

I've requested research access for my account. And I have been set the right value for $CENSYS_API_ID and $CENSYS_API_SECRETHowever, the server sends me “error message” so I seek for help to download data with my api.curl -X "GET" "https://search.censys.io/api/v1/data/universal-internet-dataset-v2-ipv4" -H "Accept: application/json" --user "$CENSYS_API_ID:$CENSYS_API_SECRET"{"status": "error", "error": "This server could not verify that you are authorized to access the document you requested.  Either you supplied the wrong credentials (e.g., bad password), or your browser does not understand how to supply the credentials required.", "error_type": "unknown"}

I recently upgraded my account to use the API after the recent platform update.I am using Windows CMD to run queries and successfully download the results as a JSON file.However I noticed that the JSON file only contains the first page of results, while the full query results are available when I run the same query on the website I would like to download the entire set of results as a JSON file. Could you please guide me on how to achieve this uising the API? curl -X "POST" "https://api.platform.censys.io/v3/global/search/query?organization_id=secret" --header "X-Organization-ID: secret" --header "Accept: application/json" --header "Authorization: secret" --header "Content-Type: application/json" -d "{\"query\":\"1.1.0.0\"}" > 1.1.json  

I was trying to use censys platform but keep getting redirected between platform and the account page. Tried different browsers such as Firefox, Chrome etc. Cleared browser caches, cookies, incognito mode… all didn’t work.

Hello,I noticed that when I log in and attempt to access Censys Search, I am automatically redirected to the Censys Platform. As a result, I am unable to access the legacy search interface.Could you please clarify if there is still a way to access the legacy search?Additionally, with Censys Search being deprecated after March 31st, I wanted to confirm whether this deprecation also applies to the v2 APIs, or if only the legacy search interface will be affected.Also is threat hunting capability added?Thank you for your guidance!