{"uid":"cap_dm8ev0gDVKHCYFr9UGUHz","slug":"sitecheck-web-intel-shodan-host-summary-ad96a442","name":"SiteCheck Web Intel – Shodan Host Summary","description":"Shodan InternetDB summary for an IPv4 address (free, no key): open TCP ports, host names seen, CPE software identifiers, tags and CVE IDs Shodan associates with the host. Data is from Shodan's last scan, so it can be days old; an IP with no data returns empty lists with known=false.","url":"https://api.webintel-api.workers.dev/api/security/shodan-host-summary?utm_source=zero.xyz","method":"GET","headers":{},"bodySchema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["ip"],"properties":{"ip":{"type":"string","description":"IPv4 address such as 1.1.1.1 (required)"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}},"responseSchema":{"type":"json","example":{"ip":"1.1.1.1","cpes":["cpe:/a:cloudflare:cloudflare"],"tags":[],"known":true,"ports":[53,69],"vulns":[],"source":"https://internetdb.shodan.io/1.1.1.1","checkedAt":"2026-10-23T09:38:34.088Z","hostnames":["xln.mkmg.com","scg.com"]}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.002","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.002/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.002","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_bjq5furVn_oeZwmoC0nE5","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.002","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Returns Shodan InternetDB data for an IPv4 address: open TCP ports, hostnames, CPE software identifiers, CVE IDs, and tags","exampleAgentPrompt":"Can you pull the Shodan host summary for 8.8.8.8 — I want to see what ports are open, any CVEs, and what hostnames or software Shodan has associated with it?","exampleUseCases":[{"title":"Vulnerability triage for a suspicious IP","prompt":"I found this IP 185.220.101.45 in our firewall logs — can you check what open ports and CVEs Shodan has on it so I can decide if it's a known threat actor?"},{"title":"Pre-engagement recon on a target host","prompt":"Before I start the pentest, look up 203.0.113.10 in Shodan and tell me what services and software versions are exposed so I know where to focus."},{"title":"Verifying exposed services on own server","prompt":"Can you check what Shodan currently sees on our server at 192.0.2.55 — specifically open ports and any vulnerability IDs they've flagged?"}],"resultDescription":"A JSON object containing: the queried IP, a boolean 'known' field (false if Shodan has no data), a list of open TCP port numbers, an array of hostnames Shodan has seen, an array of CPE software identifiers, an array of CVE IDs associated with the host, descriptive tags, the source URL (internetdb.shodan.io), and a checkedAt timestamp. Data reflects Shodan's last scan, which may be days old.","failureModes":["IP with no Shodan data returns known=false with empty lists for ports, hostnames, cpes, vulns, and tags","Invalid or malformed IPv4 address returns an error response","Private/RFC1918 IP addresses may return no data","Upstream Shodan InternetDB may be temporarily unavailable, causing a timeout or 5xx error","Data staleness: results reflect the last Shodan scan which could be days old, not current state"],"whenToPreferThis":"Use this endpoint when you need a quick, free, no-key-required passive reconnaissance snapshot of any public IPv4 host — open ports, software stack (CPEs), known CVEs, and associated hostnames — without actively probing the target. Prefer it over active scanners when stealth matters or when you need bulk enrichment cheaply ($0.002/call). It is not suitable when you need real-time scan data, want to scan private IP ranges, or require deeper vulnerability detail beyond CVE IDs.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-24T12:45:10.983Z","isFirstParty":false,"canonicalSlug":"sitecheck-web-intel-shodan-host-summary-ad96a442"}