• NETWORK
  • IDENTITY
  • SECURITY
  • HUMAN

How to investigate unknown ip addresses with your AI

Connect Shodan to your AI client to turn a raw IP address into a detailed reconnaissance report.

Ask AI about this page

Short answer

How do I investigate an unknown IP address with my AI?

Your AI uses Shodan to query the IP for active services, open ports, and vulnerability data. You get a clear picture of the target's attack surface without manual scanning. This breakdown shows how the data flows from the IP to your chat.

Where every finding lands.

Reconnaissance outcomes

The AI processes raw network data into these specific categories.

NETWORK

Service exposure

The AI identifies which ports are open and what services are running. You see exactly what is listening on the network.

IDENTITY

Host ownership

The AI resolves hostnames and DNS records. This helps you link an IP to a specific domain or organization.

SECURITY

Vulnerability mapping

The AI flags known weaknesses and outdated service banners. You get a list of potential entry points.

HUMAN

Manual verification

The AI provides the raw data, but you decide if a finding constitutes a real threat. You handle the final risk assessment.

The workflow

What your AI does when an IP is provided.

The AI moves from basic identification to deep service inspection.

  1. Resolve the target

    The AI starts by finding the domain name or host associated with the IP address.

    dns_resolve

  2. Identify the host

    The AI pulls specific host details to confirm the target's identity and location.

    get_host_info

  3. Map the network

    The AI looks up the reverse DNS records to see how the IP is mapped in the wider internet.

    reverse_dns

  4. Analyze services

    The AI pulls the service banners and port information to reveal what software is actually running.

    get_host_info

Try it

Copy these to start.

Use these prompts to trigger the reconnaissance process.

Starting points

Replace the IP addresses in these examples with the specific targets you want to check.

Shodan Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_v56kfVzaldu64N35xQgpbhSkfmWiw9wRo7KH9Xgc/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Shodan capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "shodan-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_v56kfVzaldu64N35xQgpbhSkfmWiw9wRo7KH9Xgc/mcp"
    }
  }
}
Copy into chat04

  • Investigate the IP 192.168.1.1 and tell me what services are running.

  • Perform a full reconnaissance on 8.8.8.8 to find open ports and vulnerabilities.

  • What is the hostname and reverse DNS for the IP 45.33.32.156?

  • Check 104.26.10.228 for any exposed service banners or outdated software.

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Shodan once, then ask.

You only need to link your Shodan account once. Your credentials stay encrypted, and your AI can immediately start querying the Shodan database.

Connect Shodan to your AI

FAQ

How this task behaves

  • 01

    Can the AI scan the IP directly?

    No. The AI uses Shodan's existing database of internet-wide scans to get information rather than sending its own packets to the target.

  • 02

    Can the AI change settings on the target IP?

    No. The AI only reads public data provided by Shodan. It cannot modify, access, or interact with the target machine itself.

  • 03

    Does the AI report vulnerabilities automatically?

    The AI reads the service banners and vulnerability data from Shodan. It presents this information to you, but you must decide if it is a risk.

  • 04

    Can I use this to find hidden IPs?

    The AI can only report on IPs that have already been indexed by Shodan.

  • 05

    Will the AI save my Shodan API key?

    No. Your credentials are encrypted and managed by Vinkius so your AI client can use them securely.

  • More questions about Shodan? See everything the Shodan Connector can do

Connect Shodan to Claude, Cursor, ChatGPT & more