Hey sudoFTP, this is expected behavior. Based on our scans, that host does not currently have any publicly accessible services or is on our blocklist, so it will not show up in search query results. However, you can still view the host’s top-level details, like the geographic location and WHOIS information you shared in your first API call.

You can confirm this by navigating to the page for the host in the web UI.

Hmm, OK. Initially I used this query for bulk IP search for certain fields, like whois organization. Is it still somehow possible to search for bulk IPs similarly?

Hosts will only be returned by search queries like the one you provided in your second API call if Censys scans have identified services on them. Otherwise, you would have to obtain that information by looking up the IP directly.

Ok, but is there a possibility to get whois data for multiple IP addresses using single query?

Ah, sorry, I misunderstood your question before. No, there is not a way to do this with the Legacy Search API.

You can, however, obtain whois data for multiple hosts (even those without active identified services) using the Platform GET bulk host API. If you want to use this API, we recommend using the network address for each prefix you want to look up, not each individual IP. So for example for 199[.]45[.]155[.]0/24, look up 199[.]45[.]155[.]0.

Thanks this seems interesting, had no idea about it, but I don’t seem to understand the new platform at all, I have an API access with “legacy” platform, but no access to the new platform? I’m logged in to the new platform, but it shows free tier (hence no access to new API)?

Could I please get a response for this question? It seems that no support or whatever email responds to me.

sudoFTP,

First of all, right now only Free and Starter tier are available for Platform. Enterprise tier will be GA within weeks. The Free tier dont include API access, so the only tier available with this access is the Starter. You can see the different functionality between tiers here https://censys.com/resources/pricing

In the new platform the concept of Virtual Hosts are gone and we instead have Hosts and Web Entities this means they can overlap depending on what you are looking at. 

Example, for current search a query for HTTP like services.service_name: HTTP will show different results depending if you include Virtual Hosts or not. 

On Platform the Host query would be host.services.protocol:"HTTP" and for Web Properties web:* so to get both Hosts and Web Entities you would combine the query as host.services.protocol:"HTTP" or web:* 

I hope that explains