Important Notice:
It has come to our attention that some functionality within this app no longer works most likely because of some API changes on the Shodan side. We are working to address these issues.
We apologize for any inconvenience.
This app now includes what was in the SA-Shodan (https://splunkbase.splunk.com/app/1766/) app, which is now deprecated. It allows you to enter your external subnets and get an idea of what the Internet sees when it looks at your network (okay what bad guys can see) externally. It utilized the Shodan (www.shodanhq.com) so you will need an API key
Install App
Add API key
Restart Splunk
Enter Subnets in config screen
Either run the saved search manually or wait for it to run on schedule (every 12 hours by default)
Enjoy!
Please send support inquiries to splunk-app@hurricanelabs.com.