diff --git a/pentesting/5671-5672-pentesting-amqp.md b/pentesting/5671-5672-pentesting-amqp.md
index 14210470..dd01e983 100644
--- a/pentesting/5671-5672-pentesting-amqp.md
+++ b/pentesting/5671-5672-pentesting-amqp.md
@@ -63,3 +63,7 @@ From [https://www.rabbitmq.com/networking.html](https://www.rabbitmq.com/network
 * 35672-35682: used by CLI tools \(Erlang distribution client ports\) for communication with nodes and is allocated from a dynamic range \(computed as server distribution port + 10000 through server distribution port + 10010\). See [networking guide](https://www.rabbitmq.com/networking.html) for details.
 * 61613, 61614: [STOMP clients](https://stomp.github.io/stomp-specification-1.2.html) without and with TLS \(only if the [STOMP plugin](https://www.rabbitmq.com/stomp.html) is enabled\). Less than 10 devices with this port open and mostly UDP for DHT nodes.
 
+## Shodan
+
+* `AMQP`
+