Table: shodan_protocol - Query Shodan Protocols using SQL
Shodan is a search engine for internet-connected devices. It provides information about devices, including their location, type, operating system, and security status. Shodan's protocol is a crucial resource that provides details about various protocols used by these devices, including their names, descriptions, and ports.
Table Usage Guide
The shodan_protocol
table provides insights into the protocols used by internet-connected devices indexed by Shodan. As a cybersecurity analyst, you can explore protocol-specific details through this table, including names, descriptions, and associated ports. Utilize it to uncover information about protocols, such as those commonly used by specific types of devices, the description of each protocol, and the ports they typically use.
Examples
List the protocols
Explore the various protocols to understand their order and organization within the system. This can help in managing and optimizing system communications.
select *from shodan_protocolorder by name;
select *from shodan_protocolorder by name;
Get the Postgres protocol
Explore which systems are using the PostgreSQL protocol to understand its distribution and usage across your network. This can be useful for maintaining protocol consistency and troubleshooting network issues.
select *from shodan_protocolwhere name = 'postgresql';
select *from shodan_protocolwhere name = 'postgresql';
Schema for shodan_protocol
Name | Type | Operators | Description |
---|---|---|---|
_ctx | jsonb | Steampipe context in JSON form. | |
description | text | Description of the protocol. | |
name | text | Name of the protocol (e.g. postgresql). | |
sp_connection_name | text | =, !=, ~~, ~~*, !~~, !~~* | Steampipe connection name. |
sp_ctx | jsonb | Steampipe context in JSON form. |
Export
This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.
You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh
script:
/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- shodan
You can pass the configuration to the command with the --config
argument:
steampipe_export_shodan --config '<your_config>' shodan_protocol