check

Check Vulnerabilities

Get known open ports and CVEs for an IP address. vulnerabilities is the raw Shodan InternetDB payload (cpes / hostnames / ip / ports / tags / vulns), or null.

get/check/vulnerabilities

Query parameters

querystring

IP address or domain to check. /check/reputation also accepts a hexadecimal MD5, SHA1, or SHA256 file hash.

Response

Vulnerabilities data response: {"vulnerabilities": <raw Shodan InternetDB payload> | null}

vulnerabilitiesobject nullable

Changes

Changed in 2 of the 14 revisions of this API.1431

Aug 31, 20269d9ef31d83e51421See the full diff
- ▲
  the response property became nullable for the status
  response-property-became-nullable
- ▲
  the response property became nullable for the status
  response-property-became-nullable
- ▲
  the response property became nullable for the status
  response-property-became-nullable
- ▲
  the response property became nullable for the status
  response-property-became-nullable
- ▲
  the response property became optional for the status
  response-property-became-optional
- ▲
  the response property became optional for the status
  response-property-became-optional
- ▲
  the response property became optional for the status
  response-property-became-optional
- ▲
  the response property became optional for the status
  response-property-became-optional
- ▲
  removed the required property / from the response with the status
  response-required-property-removed
- ▲
  removed the required property / from the response with the status
  response-required-property-removed
- ▲
  removed the required property / from the response with the status
  response-required-property-removed
- ▲
  removed the required property / from the response with the status
  response-required-property-removed
- ▲
  removed the required property / from the response with the status
  response-required-property-removed
- ▲
  removed the required property / from the response with the status
  response-required-property-removed
- ●
  deleted the path request parameter enrichment
  request-parameter-removed
- ●
  deleted the path request parameter query
  request-parameter-removed
- ○
  added the new optional query request parameter query
  new-optional-request-parameter
This revision also has 17 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog
Aug 30, 2026aa5294fdc8d81See the full diff
- ●
  deleted the path request parameter track_reports
  request-parameter-removed

Full history