Shodan

Operator: Shodan, LLC

Search engine for publicly accessible devices and services, with IP addresses, open ports and technical service data.

Technical Infrastructure

Open website (external website)

Product

Shodan Search with Developer API; Membership and API subscriptions are separate access plans.

Availability and source date

Active

As of: 16 October 2026.

No functionality test has been performed.

Use in OSINT research

Find known open ports, services, hostnames and technical service data for an IP address. Search terms and filters help narrow down relevant infrastructure associated with an organisation or location.

Queries

InputResultResult type
IP addressKnown services, open ports, hostnames, provider and approximate GeoIP location of the IP address.
Retrieved
Keyword / free textDevices and services whose stored service response contains the search term, such as a product name.
Retrieved
Company / organisation nameDevices in the IP network associated with the organisation using the org filter; not a general company search.
Retrieved
Place nameDevices with a matching GeoIP city assignment using the city filter.
Derived

Features

  • Searches stored responses from publicly accessible network services.
  • Displays known ports, hostnames, software details and timestamps for IP addresses.
  • Narrows results by product, organisation and geographical information.
  • Exports results as JSON files; the local command-line tool can convert them into Excel files.
  • Integrates Shodan data through the API and plugins for Microsoft Copilot for Security.

Categories

  • Technical Infrastructure
  • Internet scanning
  • IP & ASN

Coverage

Geographical coverage

worldwide

Dataset

Proprietary dataset from internet scans and technical service responses. The search engine uses the latest service data from the past 30 days.

Access

Installation and deployment

Website · Locally installable · Browser extension

Web service with browser extensions. The optional local Python command-line tool accesses Shodan; it does not run its own Shodan database.

Requirements

Free account for basic access and an API key. Membership or an API subscription for additional results, filters and API features.

Export

Export through the website and API as compressed JSON files; conversion to XLSX using the local Shodan command-line tool.

Provider

Shodan, LLC

Country of establishment

Unknown

Interfaces

API

Available. REST and Streaming API. API key through the account; features and credits depend on the plan.

MCP

Not documented. No dedicated MCP server is described in the product overview, developer documentation or help pages.

AI agents

Available. Plugins for Microsoft Copilot for Security: InternetDB without a Shodan key, full Shodan plugin with an API key. A Copilot account is required.

Usage note

Shodan requires attribution as the data source; Academic and Research access is restricted to non-commercial use without separate permission.

Limitations

  • The search displays collected service data from the past 30 days, not a real-time check; historical IP queries go back up to 90 days.
  • Search filters and result limits depend on the plan; the vulnerability filter is available from Small Business upwards.
  • Service data and GeoIP information do not establish a person's identity or a device's precise address.

Guides and practical reports

  • Official · Search Query Fundamentals

    Shodan · EN

    Explains service data and search filters using concrete queries.

  • External · A Shodan Tutorial and Primer

    Daniel Miessler · 06/2014 · EN · Independence unclear

    Introduction to search filters and result views. The prices from 2014 are outdated.

Sources

Report an error