Shodan icon

Shodan

Interact with Shodan API

Actions6

Overview

This node interacts with the Shodan API to perform a reverse DNS lookup for a list of IP addresses. It takes a comma-separated list of IP addresses as input and returns the hostnames associated with those IPs. This is useful for network administrators, security analysts, and IT professionals who want to identify domain names linked to specific IP addresses for security assessments, network troubleshooting, or data enrichment.

Use Case Examples

  1. Inputting '8.8.8.8,1.1.1.1' to retrieve the hostnames associated with these IP addresses.
  2. Using the node to batch process multiple IP addresses to efficiently gather reverse DNS information.

Properties

Name Meaning
IP Addresses Comma-separated list of IP addresses to perform reverse DNS lookup on.
Request Options Settings to control request behavior such as batching, SSL certificate validation, proxy usage, and timeout duration.

Output

JSON

  • hostnames - List of hostnames returned from the reverse DNS lookup for the input IP addresses.

Dependencies

  • Requires an API key credential for Shodan API access.

Troubleshooting

  • Common issues include invalid or missing API key, which will prevent successful API calls.
  • Incorrectly formatted IP addresses may result in errors or empty responses.
  • Network issues or proxy misconfiguration can cause request failures.
  • SSL certificate validation errors can be bypassed by enabling the 'Ignore SSL Issues' option, but this is insecure.

Links

Discussion