Example Queries:

Hosts in 23.0.0.0/8 or 8.8.8.0/24:

Hosts running FTP or Telnet in Germany:

Hosts with powershell.exe within an HTTP body:

The exact SNMP location value of "Sitting on the Dock of the Bay":

Hosts with the phrase "Schneider Electric" or Dell within the range 23.20.0.0/14:

Hosts that have any of the following ports open: 22, 23, 24, 25:

Hosts that do not have an HTTP service running:

Hosts presenting any certificate:

Hosts presenting the string hello succeeded by any value (regular expresion):

Hosts presenting certificates with a name foo1, foo2, foo3...foo100 succeeded by any value (regular expresion):

Hosts within the specified range:

Hosts with an SSH service running on ports other than port 22 and 2222:

Hosts running elasticsearch on port 443:

Hosts with services that were last scanned by Censys Scanners within NTT ISP:

Hosts with services that were last scanned by Censys Scanners within NTT or TELIA ISPs:

Hosts with a page title on an HTTP service containing the word "dashboard":

Hosts with an HTTP service that responded with a server error status code:

Hosts with an HTTP service that have specific HTTP header-value pairs:

Hosts with an RDP service presenting a certificate:

Hosts with any service that is running an insecure TLS version:

Hosts with a service presenting a TLS certificate with the string "localhost" in the subject_dn:

Hosts with a service running Microsoft IIS 7.5:

Hosts with a service presenting a specific combination of operating system and application software:

Hosts running a Raspberry Pi product:

Hosts in ASes that contain the word University: