security enabled verified low v1.0.0

shodan

Command-line interface to the Shodan search engine for discovering internet-connected devices, open ports, and service banners.

📋 Live Preview

shodan {command} {args}

🌍 command → host 🌍 args → 8.8.8.8

shodan {command} {args}

Sandbox: execFile · Timeout: 60s

Capabilities

security.intel.osint

security.recon.passive

network.discovery.host

security.fingerprint.service

security.intel.vulnerability

network.discovery.iot

Parameters

Name	Type	Required	Default	Description	Aliases
`command`	string	Yes	-	Shodan command (search, host, count, download, scan, etc.)	-
`args`	string	No	-	Arguments for the subcommand	-
`h`	boolean	No	-	Show this message and exit.	`-h`, `--help`

Artifacts

Type	Description	MIME	Schema	Trust
`security.intel.shodan.search`	Shodan search results	application/json	-	verified
`security.intel.shodan.host`	Shodan host information	application/json	-	verified

Contract

Inputs

network.target.ip

IP address to query

security.intel.search.query

Search query string

Outputs

security.intel.shodan.host

Host information including ports and banners

security.intel.shodan.search

Search results

Side effects: network_traffic

Workflow Edges

Produces

security.intel.shodan.hostsecurity.intel.shodan.search

Consumes

network.target.ipsecurity.intel.search.query

Resource Profile

Resource	Value
CPU	low
Memory	32 MB
Network	low
Disk I/O	low

Examples

Initialize Shodan with API key

shodan init YOUR_API_KEY

Search for devices running Apache

shodan search apache

View host information for an IP

shodan host 8.8.8.8

Count results for a search query

shodan count "product:nginx"

Download search results to a file

shodan download results.json.gz "port:22 country:US"

Parse downloaded results

shodan parse results.json.gz

Scan an IP or netblock

shodan scan submit 10.0.0.0/24

Check if an IP is a honeypot

shodan honeyscore 185.220.101.1

My public IP info

shodan myip

Monitor network with alerts

shodan alert create "My Alert" 10.0.0.0/24

Documentation

Shodan CLI — Internet Device Search Engine

Shodan is a search engine for internet-connected devices. The CLI tool provides programmatic access to the Shodan database, allowing you to search for specific technologies, view host details, download datasets, and set up continuous monitoring.

Search Filters

Filter	Description	Example
`port`	Filter by port number	`port:22`
`country`	Filter by country code	`country:US`
`org`	Filter by organization	`org:"Google"`
`product`	Filter by product name	`product:nginx`
`os`	Filter by operating system	`os:Linux`
`vuln`	Filter by vulnerability	`vuln:CVE-2021-41773`

Usage

# Search with filters
shodan search "port:443 product:Apache country:JP"

# Host summary
shodan host 8.8.8.8

# Download and parse
shodan download data "port:22" --limit 1000
shodan parse data.json.gz