Shodan icon

Shodan

Interact with Shodan API

Actions6

Overview

This node interacts with the Shodan API to perform search queries on Shodan's host data. It allows users to search for internet-connected devices and services using custom queries, retrieve summarized information via facets, and paginate through results. This is useful for cybersecurity professionals, researchers, and network administrators who want to discover and analyze exposed devices and services on the internet. For example, a user can search for Apache servers located in the US or get a count of devices matching a specific query without consuming credits.

Use Case Examples

  1. Search for Apache servers in the US using the query 'apache country:US'.
  2. Retrieve a summary of search results grouped by country and organization.
  3. Paginate through search results with a limit of 50 results per page.

Properties

Name Meaning
Query The Shodan search query string used to find specific hosts or services.
Facets Comma-separated list of properties to get summary information on, such as country or organization.
Limit Maximum number of search results to return (minimum 1).
Page Page number of the search results to retrieve.
Minify Whether to truncate some of the larger fields in the response to reduce data size.

Output

JSON

  • matches - Array of search result objects matching the query.
  • total - Total number of results found for the query.
  • facets - Summary information grouped by specified facets (if requested).

Dependencies

  • Requires an API key credential for Shodan API authentication.

Troubleshooting

  • Ensure the Shodan API key credential is correctly configured and valid.
  • Check the query syntax to avoid errors from malformed search queries.
  • If the node returns no results, verify the query parameters and try adjusting the limit and page values.
  • Timeout errors may occur if the server is slow to respond; consider increasing the timeout setting in request options.

Links

Discussion