Look up detailed information about an IP address using Shodan.

Returns open ports, services, banners, SSL certificates, geolocation, hostnames, vulnerabilities, and last seen date. This is PASSIVE reconnaissance — no packets are sent to the target.

IMPORTANT: Only query targets you are authorized to assess.

Returns: ShodanHostResult with detailed host information from Shodan's database.

Search Shodan's database for hosts matching a query.

Uses Shodan's powerful search syntax to find internet-connected devices and services. Supports filters for port, country, organization, product, version, and more. Requires a paid Shodan API key.

IMPORTANT: Only query targets you are authorized to assess.

Returns: ShodanSearchResult with matching hosts and total result count.

Look up CVE details from Shodan's vulnerability database.

Returns CVSS scores, EPSS exploit prediction scores, references, and affected CPE identifiers. This endpoint is FREE and does NOT require a paid Shodan API key.

Returns: CveResult with detailed vulnerability information.

Resolve hostnames to IP addresses using Shodan's DNS service.

Useful for mapping domain names to IPs before performing IP lookups. Requires a Shodan API key.

Returns: DnsResolveResult with hostname-to-IP mappings.

Reverse DNS lookup — find hostnames for IP addresses.

Useful for identifying what domains are hosted on specific IPs. Requires a Shodan API key.

Returns: DnsReverseResult with IP-to-hostnames mappings.

Count how many hosts match a Shodan query WITHOUT consuming query credits.

Use this to check result volume before running a full search. Requires a Shodan API key but does NOT consume query credits.

Returns: SearchCountResult with total count.

Get DNS information about a domain — subdomains, DNS records, and tags.

Powerful for domain reconnaissance and subdomain discovery. Requires a Shodan API key.

Returns: DomainResult with subdomains, DNS records, and domain tags.

Quick, free IP intelligence from Shodan's InternetDB.

Returns open ports, known vulnerabilities, hostnames, CPEs, and tags. This is FREE — no API key required. Faster but less detailed than shodan-ip-lookup.

Returns: InternetDbResult with quick IP intelligence data.

Check if an IP address is likely a honeypot.

Returns a probability score from 0.0 (not a honeypot) to 1.0 (definitely a honeypot). Useful for filtering scan results and identifying deceptive hosts. Requires a Shodan API key.

Returns: HoneypotResult with IP address and honeypot probability score.

Check your Shodan API key usage — plan type, remaining credits, and limits.

Useful for monitoring API usage and checking remaining query/scan credits. Requires a Shodan API key.

Returns: ApiInfoResult with plan info and remaining credits.

Get your current external IP address as seen by Shodan.

Useful for checking what IP address your requests are coming from. Requires a Shodan API key.

Returns: Your external IP address as a string.

Search CVEs in Shodan's vulnerability database with powerful filters.

Filter by CISA KEV catalog, sort by EPSS exploit probability, and filter by date range. This is FREE — no API key required.

Returns: CveSearchResult with matching CVEs and total count.

Search CPE (Common Platform Enumeration) identifiers by product name.

Useful for finding exact CPE strings to use in vulnerability lookups. This is FREE — no API key required.

Returns: CpeSearchResult with matching CPE identifiers and total count.

List available search facets for Shodan queries.

Facets let you break down search results by property (e.g., country, org, port). Use these with shodan-search-count for result distribution analysis. Requires a Shodan API key.

Returns: SearchFacetsResult with list of available facet names.

List available search filters for Shodan queries.

Filters let you narrow search results (e.g., port:, country:, org:, product:). Use these to discover all available filter options for shodan-search. Requires a Shodan API key.

Returns: SearchFiltersResult with list of available filter names.

Parse and analyze a Shodan search query into its components.

Breaks down a query into attributes, filters, errors, and the remaining search string. Useful for debugging complex queries and understanding how Shodan interprets them. Requires a Shodan API key.

Returns: QueryTokensResult with parsed query components.

List port numbers that Shodan crawlers are actively scanning.

Returns the list of ports that the Shodan crawlers are looking for on the Internet. Useful for understanding Shodan's scanning coverage. Requires a Shodan API key.

Returns: PortsResult with list of scanned port numbers.

List protocols available for on-demand Shodan scanning.

Returns the protocols that can be used when launching an on-demand scan. Requires a Shodan API key.

Returns: ProtocolsResult with protocol names and descriptions.

Get your Shodan account profile information.

Returns account membership status, credits, display name, and creation date. Requires a Shodan API key.

Returns: AccountProfileResult with account profile details.

Show the HTTP headers your client sends when connecting to a web server.

Useful for debugging and seeing what information your client exposes. Requires a Shodan API key.

Returns: HttpHeadersResult with HTTP header name-value pairs.