Censys Internet Asset Database Query

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•5

This rule detects HTTP requests made to 'search.censys.io', indicating a query to the Censys Internet Asset Database. This activity is often associated with reconnaissance efforts, where an attacker or security researcher gathers information about internet-facing assets.