Hurricane Labs App for Shodan

Important Notice: The Hurricane Labs App for Shodan now requires a paid API key to function. This app now includes what was in the SA-Shodan (https://splunkbase.splunk.com/app/1766/) app, which is now deprecated. It allows you to enter your external subnets and get an idea of what the Internet sees when it looks at your network (okay what bad guys can see) externally. It utilized the Shodan (www.shodanhq.com) so you will need an API key Install App Add API key Restart Splunk Enter Subnets in config screen Either run the saved search manually or wait for it to run on schedule (every 12 hours by default) Enjoy! Please send support inquiries to splunk-app@hurricanelabs.com.