Returns the public IP address Shodan sees this API key's requests coming from. Use this as the starting point for scanning your own infrastructure.

Look up everything Shodan knows about a single IP address: open ports, banners, detected products/versions, and known vulnerabilities. Use this to check what your own infrastructure exposes.

Search Shodan's database of internet-connected devices using Shodan search syntax (e.g. 'apache country:DE', 'net:203.0.113.0/24', 'vuln:CVE-2021-44228'). Use this for general reconnaissance and world-scale intelligence gathering.

Fetch details for a specific CVE from Shodan's CVEDB, including CVSS score, affected CPEs, and how many internet-facing hosts Shodan currently sees running vulnerable versions.

List recent/known CVEs affecting a given CPE (product+version), e.g. 'cpe:2.3:a:apache:log4j'. Useful for tracking what's currently going on for a specific technology.

Count how many hosts match a Shodan search query without spending query credits. Use this for quick world-scale stats (e.g. how many hosts expose a given CVE) before running a full search.

List the search filters Shodan supports (e.g. country, port, net, vuln, product). Use this before writing a shodan_search query to confirm the right filter name.

Look up subdomains and DNS entries Shodan has seen for a domain. Use this to map out your own domain's exposed surface.

Resolve one or more hostnames to their IP addresses.

Look up the hostnames associated with one or more IP addresses.

Show this API key's plan and remaining query/scan credits. Check this before running credit-consuming operations.