Click here to download all references as Bib-File.•

Enter keywords to filter the library entries below or Propose new Entry
2026-10-07 ⋅ Censys ⋅ Aidan Holland
DarkSword/Coruna Open Directory Finding Report
Coruna GHOSTBLADE
2026-06-26 ⋅ Censys ⋅ Martijn Grooten
UNC1151 Phishing Email Targeting Belarusian Politician Points to Multi-National Campaign
2026-06-26 ⋅ Censys ⋅ Aidan Holland
AsyncRAT Family Threat Overview
AsyncRAT BitRAT DCRat Quasar RAT Venom RAT
2026-01-29 ⋅ Censys ⋅ Andrew Northern
AsyncRAT C2 Activity at Internet Scale
AsyncRAT
2025-08-14 ⋅ Censys ⋅ Himaja Motheram
2025 State of the Internet: Digging into Residential Proxy Infrastructure
PolarEdge
2025-05-30 ⋅ Censys ⋅ Himaja Motheram
Tracking AyySSHush: a Newly Discovered ASUS Router Botnet Campaign
2025-04-28 ⋅ Github (Censys Research) ⋅ Github (Censys-Research)
Public Github Archive of Scout C2
ScoutC2
2025-04-28 ⋅ Censys ⋅ The Censys Research Team
Scouting a Threat Actor
2025-04-25 ⋅ Censys ⋅ Censys
The Persistent Threat of Salt Typhoon: Tracking Exposures of Potentially Targeted Devices
MASOL
2025-02-04 ⋅ Censys ⋅ Aidan Holland
Unpacking the BADBOX Botnet with Censys
BADBOX
2025-01-16 ⋅ Censys ⋅ Silas Cutler
Will the Real Volt Typhoon Please Stand Up?
KV
2024-07-22 ⋅ Censys ⋅ Censys, Embee_research
A Beginner’s Guide to Hunting Malicious Open Directories
Cobalt Strike Lumma Stealer Vidar
2024-02-09 ⋅ Censys ⋅ Censys, Embee_research
A Beginners Guide to Tracking Malware Infrastructure
AsyncRAT BianLian Cobalt Strike QakBot
2023-11-30 ⋅ Twitter (@embee_research) ⋅ Embee_research
Advanced Threat Intel Queries - Catching 83 Qakbot Servers with Regex, Censys and TLS Certificates
QakBot
2023-11-26 ⋅ Twitter (@embee_research) ⋅ Embee_research
Identifying Suspected PrivateLoader Servers with Censys
PrivateLoader
2023-11-21 ⋅ Censys ⋅ Aidan Holland
Tracking Vidar Infrastructure with Censys
Vidar
2023-07-11 ⋅ Twitter (@embee_research) ⋅ Embee_research
Tweets on Ransomware Infrastructure Analysis With Censys and GrabbrApp
DarkSide
2023-06-08 ⋅ Twitter (@embee_research) ⋅ Embee_research
Practical Queries for Identifying Malware Infrastructure: An informal page for storing Censys/Shodan queries
Amadey AsyncRAT Cobalt Strike QakBot Quasar RAT Sliver solarmarker
2023-05-18 ⋅ Twitter (@embee_research) ⋅ Embee_research
Identifying Laplas Infrastructure Using Shodan and Censys
LaplasClipper
2023-05-15 ⋅ embeeresearch ⋅ Embee_research
Quasar Rat Analysis - Identification of 64 Quasar Servers Using Shodan and Censys
Quasar RAT
2022-09-01 ⋅ Medium michaelkoczwara ⋅ Michael Koczwara
Hunting C2/Adversaries Infrastructure with Shodan and Censys
Brute Ratel C4 Cobalt Strike Deimos GRUNT IcedID Merlin Meterpreter Nighthawk PoshC2 Sliver
2022-07-21 ⋅ Censys ⋅ Matt Lembright
Russian Ransomware C2 Network Discovered in Censys Data
DeimosC2 PoshC2
2022-07-18 ⋅ Censys ⋅ Censys
Russian Ransomware C2 Network Discovered in Censys Data
Cobalt Strike DeimosC2 MimiKatz PoshC2
2020-12-07 ⋅ Censys ⋅ Censys
Advanced Persistent Infrastructure Tracking
WellMess