{"uid":"cap__LqFMWO1l-H8RqiteO4xh","slug":"sitecheck-web-intel-smb-exposure-check-port-445-0010c1f5","name":"SiteCheck Web Intel – SMB Exposure Check (Port 445)","description":"Checks Shodan's passive scan records for TCP port 445 (SMB) on an IPv4 address. Says whether SMB was seen open and when the record was last refreshed by the host data (not a live test). An address with no Shodan record returns seen=false with known=false; that is not proof the port is closed.","url":"https://api.webintel-api.workers.dev/api/security/smb-exposure-test?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["ip"],"properties":{"ip":{"type":"string","description":"IPv4 address such as 1.1.1.1 (required)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_gNs0_7F111eQpUqScpLTh","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Queries Shodan's passive scan records to determine whether TCP port 445 (SMB) has been observed open on a given IPv4 address, returning the observation status and last-refresh timestamp.","exampleAgentPrompt":"Can you check Shodan's passive scan records to see if port 445 (SMB) has ever been seen open on the IP address 203.0.113.47?","exampleUseCases":[{"title":"Pre-purchase server security audit","prompt":"Before we onboard this vendor, can you check if their server at 198.51.100.22 has had SMB port 445 exposed according to Shodan's records? I want to know if they're leaving Windows file sharing open to the internet."},{"title":"Incident response IP triage","prompt":"We've got a suspicious IP 192.0.2.88 flagged in our logs — can you quickly look up whether Shodan has ever seen SMB open on it? I need to know if this host has been exposing port 445."},{"title":"Routine infrastructure exposure check","prompt":"Run an SMB exposure check on 203.0.113.15 using Shodan's passive data — I want to confirm whether port 445 has been seen open and when the record was last updated."}],"resultDescription":"Returns a JSON object indicating whether Shodan has a record for the IP (known flag), whether SMB port 445 was observed open (seen flag), and the timestamp of Shodan's last data refresh for that host. If no Shodan record exists, seen=false and known=false are returned — this does not confirm the port is closed, only that Shodan has no record.","failureModes":["IP not in Shodan database returns seen=false and known=false (not proof port is closed)","Invalid or non-public IPv4 address may return an error or empty result","Stale Shodan data may not reflect current port state — this is passive historical data, not a live scan","Rate limiting or payment failure may prevent the call from completing","Private/RFC1918 IP addresses will not have Shodan records"],"whenToPreferThis":"Use this endpoint when you need a quick, passive historical check on whether SMB (port 445) has been publicly visible on a specific IPv4 address, without performing an active network scan. Prefer this over live port scanners when stealth or speed is required and approximate historical data is acceptable. It is particularly useful for threat intelligence enrichment, vendor risk assessments, and rapid triage during incident response.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-25T12:30:54.308Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-smb-exposure-check-port-445-0010c1f5"}