{"uid":"cap_XRprAnA-ApnhgtwHNTBBQ","slug":"sitecheck-web-intel-censys-host-exposure-509f15e6","name":"SiteCheck Web Intel – Censys Host Exposure","description":"Censys host view for an IPv4 address: the services, ports and protocols Censys has observed on it with their last scan time and detected software, plus autonomous system, location, network owner and reverse DNS, from the Censys Platform API.","url":"https://api.webintel-api.workers.dev/api/security/censys-exposure?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["ip"],"properties":{"ip":{"type":"string","description":"IPv4 address such as 8.8.8.8 (required)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"ip":"8.8.8.8","source":"https://api.platform.censys.io/v3/global/asset/host/8.8.8.8","location":{"city":"Mountain View","country":"United States","province":"California","countryCode":"US"},"services":[{"port":53,"protocol":"DNS","software":[],"transport":"tcp","lastScanned":"2026-10-22T11:32:16Z"},{"port":53,"protocol":"DNS","software":[],"transport":"udp","lastScanned":"2026-10-23T09:35:26Z"}],"checkedAt":"2026-10-23T09:38:35.116Z","reverseDns":["dns.google"],"organization":"Google LLC","serviceCount":5,"autonomousSystem":{"asn":15169,"name":"GOOGLE - Google LLC","prefix":"8.8.8.0/24","country":"US"}}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_vNJ7PzWbfZzZGWm9WTQ98","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns Censys scan data for an IPv4 address: open ports, services, protocols, detected software, last scan timestamps, ASN, geolocation, network owner, and reverse DNS.","exampleAgentPrompt":"What ports and services is Censys showing as open on 185.220.101.45 — I want to know the protocols, detected software, who owns that IP, where it's located, and what ASN it belongs to.","exampleUseCases":[{"title":"Threat actor infrastructure profiling","prompt":"Can you look up what Censys has found on 45.33.32.156 — I need to know what ports and services are exposed, what software was detected, and who owns that IP, so I can profile a suspicious host we saw in our logs."},{"title":"Attack surface review for a known server","prompt":"Pull the Censys scan data for 93.184.216.34 and tell me every open port, protocol, and piece of software detected, along with the ASN and reverse DNS — I'm doing an exposure review before a pen test."},{"title":"Geo-locating and identifying a suspicious IP","prompt":"I got a connection attempt from 198.51.100.77 — can you check Censys to find out where that IP is physically located, who the network owner is, and what services it's running?"}],"resultDescription":"A JSON object containing the IP address, its geographic location (city, province, country, country code), a list of observed services each with port number, protocol, transport (TCP/UDP), detected software array, and last scanned timestamp, plus the organization name, reverse DNS hostnames, total service count, autonomous system details (ASN number, name, BGP prefix, country), and the timestamp of when the data was fetched from Censys.","failureModes":["Invalid or non-routable IPv4 address returns an error or empty result","IP not yet indexed by Censys returns minimal or no service data","Rate limiting or payment failure returns a 402 or 429 error","Private/RFC1918 addresses may return no meaningful data","Censys API outage causes upstream timeout or 5xx error"],"whenToPreferThis":"Choose this endpoint when you need comprehensive host-level internet exposure data for a specific IPv4 address — including all open ports, services, protocols, and software detected via Censys passive scanning — combined with ASN, geolocation, and reverse DNS enrichment in a single call. Prefer it over Shodan-based endpoints when you want Censys-specific scan coverage and timestamps, or over raw BGP/ASN-only lookups when you also need service-level visibility.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-24T12:44:07.216Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-censys-host-exposure-509f15e6"}