skills.rest
Liberty91LTD
Liberty91LTDOFFICIAL
Explore all skills by this author →
Website𝕏@liberty__91GitHub

lookup-shodan

Query Shodan to gather host reconnaissance data for IPs and domains.

15|5|Updated Apr 6, 2026
Search Tags:#reconnaissance#network-discovery#domain-analysis#shodan#threat-intel#ip-analysis
One-click install
npx skills add https://github.com/Liberty91LTD/cti-skills --skill lookup-shodan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: lookup-shodan
Source: https://github.com/Liberty91LTD/cti-skills/tree/main/skills/lookup-shodan
Command: npx skills add https://github.com/Liberty91LTD/cti-skills --skill lookup-shodan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Queries Shodan to reveal host reconnaissance data for IPs and domains, enabling rapid visibility of exposed infrastructure without manual lookups.

Core Features & Use Cases

  • Retrieve open ports, services, banners, OS fingerprints, and potential vulnerabilities for a target.
  • For domains, resolve DNS first and then query the resulting IP to map domain infrastructure.
  • Use cases include incident response, threat hunting, and infrastructure profiling.

Quick Start

Query Shodan for a target IP or domain to fetch reconnaissance data.

Frequently Asked Questions about lookup-shodan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve open ports and service banners for a specific IP address?▼

To find open ports and service banners for a specific IP, query Shodan host reconnaissance data. The results return structured information including open ports, detected services, OS fingerprints, and potential vulnerabilities for the target indicator.

What is the best way to profile domain infrastructure using Shodan?▼

To profile domain infrastructure using Shodan, resolve the domain's DNS first and then query the resulting IP address. This maps the domain to its underlying host, exposing open ports, services, and potential vulnerabilities for infrastructure analysis.

Do I need an API key to perform Shodan IP analysis for threat hunting?▼

You need an API key to perform Shodan IP analysis for threat hunting if available. The query respects API rate limits and requires this key to successfully return structured host reconnaissance data including open ports, services, and vulnerabilities.

Can I use Shodan reconnaissance for incident response to find exposed vulnerabilities?▼

You can use Shodan reconnaissance for incident response to find exposed vulnerabilities. It queries target IPs or domains to gather host data, returning structured results that highlight potential vulnerabilities, open ports, and running services for rapid visibility.

What limitations should I expect when querying Shodan for network discovery?▼

When querying Shodan for network discovery, expect limitations regarding API rate limits and the requirement of an API key. Results depend on the last update timestamp, meaning the returned host reconnaissance data reflects Shodan's most recent scan rather than real-time status.

Related Skills

Explore More Data & Analytics Skills→
gerald-icagerald-ica

Shodan Reconnaissance and Pentesting

Automate Shodan reconnaissance for exposed services and vulnerable systems.

Community
Advanced
zebbernzebbern
4.5k

Shodan Reconnaissance and Pentesting

Query Shodan hosts, ports, banners, and vulnerabilities via CLI and API.

Community
Intermediate
alastor0325alastor0325
1

lookup

Retrieve prior Firefox Knowledge Wiki context before code search.

Community
Advanced
RooseveltAdvisorsRooseveltAdvisors
1

Recon

Automate network reconnaissance for domains, IPs, and netblocks.

Community
Advanced