Filtering out honeypots from search results

Question

I was searching some query on Shodan and was getting lots of Honeypots and i wanted to filter out all the result which are honeypot, i tried adding -honeypot but still it showed results with honeypot, what am i doing wrong? Help will be appreciated. Thanks

Answer 1

To remove honeypots from the search results you can add -tag:honeypot to the search query. Note that this requires a Corporate subscription.

If you just add -honeypot then you are excluding results where the banner's data property doesn't include the word honeypot. For more information about the search query syntax please visit:

https://help.shodan.io/the-basics/search-query-fundamentals

You need to use search filters to narrow results based on a specific property. A list of available filters is available at:

https://beta.shodan.io/search/filters

Answer 2

You do not need pay for an Enterprise subscription. Make this filter in shodan web:

• Add the filter after your pattern search -"792/71644"
• In the API terminal type this:

  shodan search <your pattern search> | egrep -v "792/71644"
  

• obs: this number is in all honeypot expressions and it is removed with this filter.

I hope aid by by *: