Censyssearch.censys.io
Internet-wide scan data on hosts, services and certificates, with a powerful query language. Strong for certificate pivoting and finding related infrastructure.
ip / asndomaincompanydetails
tools / shodan
Shodan
Search engine for internet-connected devices. Query banners, open ports, SSL certs, favicons and vulnerabilities across the IPv4 space.
freemiumacct optionalapiwebcli
our take
- ★2 ip / asnfan favorite, great for the price
field note
Useful filters include ssl.cert.subject.cn:, org:, http.title:, http.favicon.hash: and net:. A one-time membership (often discounted on Black Friday) unlocks filters and the API.
used in playbooks
similar tools
ZoomEyezoomeye.ai
Chinese cyberspace search engine (Knownsec) that indexes devices and web services. Often has coverage of Asian infrastructure that Shodan misses.
ip / asndomaindetails
Criminal IPcriminalip.io
Threat-focused internet asset search engine with IP and domain risk scoring, exposed services, vulnerabilities and screenshot reports.
ip / asndomaindetails
BBOTgithub.com
Recursive internet scanner that chains 100+ modules for subdomain enumeration, web spidering and email harvesting. Has a passive-only preset.
domainip / asncompanydetails
FOFAen.fofa.info
Cyberspace mapping search engine with rich fingerprinting (icon hash, cert, header, body). Strong coverage of Asian and Chinese hosts.
ip / asndomaindetails
Netlasnetlas.io
Internet scan search engine covering hosts, DNS, WHOIS and certificates, with an attack surface discovery graph and a generous free tier.
ip / asndomaindetails