August 24, 2026

Summary

  • Use the geo_distance function in Censys Query Language (CenQL) queries to find assets in relation to a geographic location.
  • You can now search across the first six kilobytes of HTTP bodies for name-based web property endpoints in the Platform.
  • Added two new fingerprints to the Platform.
  • Added 16 new protocol, application, and endpoint scanners to the Platform.

Platform

  • Use the geo_distance function in Censys Query Language (CenQL) queries to find assets in relation to a geographic location.
    • You can use the function to target a data object that contains latitude and longitude information. Currently, only host.location.coordinates and host.services.ntrip contain geographic coordinates.
    • This function is available to all users.
  • You can now search across the first six kilobytes of HTTP bodies for name-based web property endpoints (web.endpoints.http.body) in the Platform.
    • Previously, only the first two kilobytes of these bodies were searchable.
    • Use this expanded search ability to build more targeted and effective Platform queries.

New fingerprints

Added two new fingerprints to the Platform.

TypeNameDescriptionQuery
softwareBifrostAI gateway that unifies access to providers like OpenAI, Anthropic, AWS Bedrock, and Google Vertex through an OpenAI-compatible API.Platform query
operating_systemJuniper Junos OSA modular network operating system created by Juniper Networks for its routing, switching, and security devices.Platform query

New protocol, application, and endpoint scanners

Added the following protocol, application, and endpoint scanners to the Platform.

Protocol, application, or endpoint typeDescriptionData availabilityQuery
MPLS_LDPMPLS Label Distribution Protocol (RFC 5036).Available to all users.Platform query
SMUXSNMP Multiplexing Protocol (RFC 1227).Available to all users.Platform query
IPERF3iPerf3 network-bandwidth measurement control protocol.Available to all users.Platform query
TVT_CONTROLTVT proprietary remote-management/CMS control protocol for white-label DVR/NVR/IP camera firmware.Available to all users.Platform query
DLTAUTOSAR Diagnostic Log and Trace (dlt-daemon, COVESA/formerly GENIVI). Used for automotive ECU logging.Available to users with access to the Critical Infrastructure module.Platform query
DUBBOApache Dubbo high-performance RPC framework (originally Alibaba).Available to Starter, Search, and Core users.Platform query
COMELIT_ICONAComelit ICONA Bridge intercom protocol.Available to all users.Platform query
FOURD_SERVER4D Server client-server publish protocol (4D / 4th Dimension database engine).Available to Starter, Search, and Core users.Platform query
KNXIPKNX/IP (KNXnet/IP), the IP-tunneled flavor of the KNX building-automation bus.Available to Starter, Search, and Core users.Platform query
NRPENagios Remote Plugin Executor agent.Available to all users.Platform query
REDSHIFTAWS Redshift, PostgreSQL-derived analytics DB.Available to Starter, Search, and Core users.Platform query
MANTICORE_SPHINXAPIManticore Search / older Sphinx forks legacy binary SphinxAPI client protocol.Available to Starter, Search, and Core users.Platform query
HOOSAT_HTND_GRPCHoosat Network (Kaspa-derived) htnd full-node bidirectional-streaming gRPC API.Available to all users.Platform query
TAILSCALE_DERPTailscale's Designated Encrypted Relay for Packets, the relay used when peers cannot establish a direct WireGuard path.Available to Starter, Search, and Core users.Platform query