Shodan
A search engine designed to scan and index devices connected to the internet. Shodan is often referred to as the "search engine for hackers" or a tool for exploring the Internet of Things (IoT). Shodan focuses on identifying and cataloging internet-connected devices, such as servers, routers, webcams, industrial control systems (ICS), and other IoT devices. It does this by scanning IP addresses and ports, collecting metadata like banners (service responses), and making that information searchable.
Launched in 2009 by John Matherly, Shodan allows users to find devices based on criteria like location, operating system, software version, or even specific vulnerabilities. For example, you could search for unprotected webcams, open industrial systems, or servers running outdated software.
Shodan is a powerful tool for cybersecurity professionals to assess network exposure, but it’s also used by researchers, hobbyists, and, controversially, sometimes malicious actors looking for exploitable targets. The name "Shodan" is a nod to the AI from the System Shock video game series, reflecting its role as a window into the digital underbelly of the internet. You will not find website text string results by keyword however you will find a mapping of the raw, often unsecured infrastructure of the Internet.
You can use Shodan without signing up. The URL is:
Basic Access: You can visit shodan.io and use the search bar without logging in. For example, typing "lameoldrouter port:12345" will show you a limited preview of results—typically 1-2 pages (up to 10 results or so) with basic info like IP, port, and banner snippets. This is fine for a quick, casual check to see if something obvious is listen, but it’s shallow and restrictive.
No Sign-Up Limitations:
- No filters (e.g., country, city, or advanced queries) beyond the initial search term.
- No access to full result sets or detailed metadata (e.g., geolocation, timestamps).
- Can’t save searches or export data.
- Some features (like historical data or deeper device info) are hidden behind a login wall.
With a Free Account (Sign-Up Required):
- Up to 50 results per search (vs. 10-ish without an account).
- Access to filters (e.g., country:US, os:Windows) to refine searches.
- Basic API access (1 query credit/month, which isn’t much but lets you test programmatically).
- More detailed result views (e.g., full banners, port lists).
- Limitations: Still capped at 50 results, no bulk exports, and no on-demand scanning without credits (which cost money).
Paid Account:
- Cost: Starts at $49 (one-time for lifetime "small business" access) or subscription tiers.
- Benefits: Hundreds/thousands of results, export options, on-demand scans, and full API access.
