osintverse-community/shodan-internetdb
Looks up an IP address in Shodan's free InternetDB: open ports, host names, software, tags and known CVEs
Takes ip address → finds domain, ip
No key · Docker
No key · Docker
Verified publisher
Find an IP's open ports without scanning it
6 tools. 6 run with ot in a sandbox on Windows, macOS and Linux. Compare them side by side ↓
Internet-wide scanners probe every public address continuously and publish what answers: open ports, the software and version behind them, TLS certificates and known vulnerabilities. Reading their records tells you what an address exposes without sending it a single packet, which keeps you out of its logs and within what most rules of engagement allow.
With ot, in a sandbox
All IP address tools →Windows, macOS and Linux, with Docker or Podman. Each tool runs in a read-only container that can reach only the sites it declares, and every result comes back in the same JSON shape.
osintverse-community/naabu
Lists an IP's open ports passively from Shodan InternetDB, without scanning it
Takes ip address → finds other
No key · Docker
No key · Docker
Verified publisher
osintverse-community/shodan-host
Shows what Shodan has seen on an IP: open ports, services, banners, vulnerabilities, location
Takes ip address → finds location, organization, other
Key required · Docker
Key required · Docker
Verified publisher
osintverse-community/censys-host
Shows what Censys has seen on an IP address: open ports, services and software, network, location, host names
Takes ip address → finds domain, ip, location, organization…
Key required · Docker
Key required · Docker
Verified publisher
osintverse-community/onyphe
Summarises what ONYPHE's internet scans know about an IP address: open ports, services, domains, owner, location
Takes ip address → finds domain, ip, location, organization…
Key required · Docker
Key required · Docker
Verified publisher
osintverse-community/fofa
Shows what the FOFA search engine has seen on an IP address or domain: open ports, protocols and products
Takes domain, ip address → finds domain, ip, other
Key required · Python wheel
Key required · Python wheel
Verified publisher
ot install osintverse-community/shodan-internetdb osintverse-community/naabu osintverse-community/shodan-host osintverse-community/censys-host osintverse-community/onypheInstalls the first 5 in one go; ot auto ip:… then runs every installed tool that takes an IP address and saves the results. No ot yet? Install it in one line.
The 6 registry tools side by side
| osintverse-community/ | domain, ip, location, organization… | Required | Online, passive | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | domain, ip, other | Required | Online, passive | No | Python | No reports yet | fewer than 10 |
| osintverse-community/ | other | None | Online, passive | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | domain, ip, location, organization… | Required | Online, passive | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | location, organization, other | Required | Online, passive | No | Docker | No reports yet | fewer than 10 |
| osintverse-community/ | domain, ip | None | Online, passive | No | Docker | No reports yet | fewer than 10 |
Facts from each tool's manifest and what people report about whether it works. "Reaches" says whether a run stays offline, reads public sources, sends requests about the target, or may notify them.
How to find an IP's open ports without scanning it
- Start with Shodan InternetDB (shodan-internetdb or naabu): free, no key, with ports, host names and known CVEs.
- For services, banners and history, query Shodan, Censys, ONYPHE or FOFA with your own key.
- Note when each record was seen: a port that was open last month may be closed today.
Every registry tool here runs on your machine in a sandbox, and ot auto ip:… runs all the installed ones on one value.
Before you run one
Is this the same as running nmap?
No. These tools read what scanners recorded, so the data can be days or weeks old and misses ports those scanners don't probe. In return you send nothing to the host. Scanning it yourself is a separate decision with its own legal questions.
Do I need API keys?
Shodan InternetDB needs none. Shodan's full host data, Censys, ONYPHE and FOFA need an account key, most with a free allowance.
Do these tools send my search anywhere?
No. ot runs each tool on your own machine in a read-only container that can only reach the sites the tool declares, and results stay in your results folder. The registry only counts installs.
More from an IP address
Owner and ASNDomains on itReputationLocationCDN or originAll IP address tools