# Table of Contents - [Shodan Developer](#shodan-developer) - [Shodan Developer](#shodan-developer) - [Shodan Developer](#shodan-developer) - [Unknown](#unknown) - [Shodan Developer](#shodan-developer) - [Shodan Developer](#shodan-developer) - [Shodan Developer](#shodan-developer) - [Unknown](#unknown) - [Unknown](#unknown) --- # Shodan Developer * [Shodan](https://www.shodan.io/) * [Maps](https://maps.shodan.io/) * [Images](https://images.shodan.io/) * [Monitor](https://monitor.shodan.io/) * [More...](https://www.shodan.io/about/products) ### API Reference _API_ Documentation =================== 1. [Requirements](https://developer.shodan.io/api/requirements) 2. [Introduction](https://developer.shodan.io/api/introduction) 3. [Clients](https://developer.shodan.io/api/clients) 4. [REST API Documentation](https://developer.shodan.io/api) 5. [Streaming API Documentation](https://developer.shodan.io/api/stream) 6. [Trends API Documentation](https://developer.shodan.io/api/trends) _Appendix_ ========== 1. [Banner Specification](https://datapedia.shodan.io/) 2. [Search Filters](https://www.shodan.io/search/filters) [![](https://developer.shodan.io/static/img/shields/shields-openapi.svg)](https://developer.shodan.io/api/openapi.json) [![](https://developer.shodan.io/static/img/shields/shields-postman-collection.svg)](https://www.postman.com/shodanhq/workspace/shodan/collection/5677612-3e46e663-5076-422c-85ac-95bfd914ac84) The base URL for all of these methods is: https://api.shodan.io _Search_Methods =============== ###### GET/shodan/host/{ip} ###### **Host Information** Returns all services that have been found on the given host IP. ###### **Request URL** https://api.shodan.io/shodan/host/{ip}?key={YOUR_API_KEY} ###### **Parameters** * **ip:** \[String\] Host IP address * **history (optional):** \[Boolean\] True if all historical banners should be returned (default: False) * **minify (optional):** \[Boolean\] True to only return the list of ports and the general host information, no banners. (default: False) **Examples** cURL Shodan CLI Python Request $ curl -X GET "https://api.shodan.io/shodan/host/8.8.8.8?key={YOUR_API_KEY}" Response { "region_code": null, "ip": 134744072, "postal_code": null, "country_code": "US", "city": null, "dma_code": null, "last_update": "2021-01-22T08:49:35.190817", "latitude": 37.751, "tags": [], "area_code": null, "country_name": "United States", "hostnames": [\ "dns.google"\ ], "org": "Google", "data": [\ {\ "_shodan": {\ "id": "cea5795b-55fd-4595-b9e5-ad5ca847cb4b",\ "options": {},\ "ptr": true,\ "module": "dns-udp",\ "crawler": "ac284849be0745621b3c518f74c14cf43cafbf08"\ },\ "hash": -553166942,\ "os": null,\ "opts": {\ "raw": "34ef818200010000000000000776657273696f6e0462696e640000100003"\ },\ "ip": 134744072,\ "isp": "Google",\ "port": 53,\ "hostnames": [\ "dns.google"\ ],\ "location": {\ "city": null,\ "region_code": null,\ "area_code": null,\ "longitude": -97.822,\ "country_code3": null,\ "country_name": "United States",\ "postal_code": null,\ "dma_code": null,\ "country_code": "US",\ "latitude": 37.751\ },\ "dns": {\ "resolver_hostname": null,\ "recursive": true,\ "resolver_id": null,\ "software": null\ },\ "timestamp": "2021-01-22T08:49:35.190817",\ "domains": [\ "dns.google"\ ],\ "org": "Google",\ "data": "\nRecursion: enabled",\ "asn": "AS15169",\ "transport": "udp",\ "ip_str": "8.8.8.8"\ }\ ], "asn": "AS15169", "isp": "Google", "longitude": -97.822, "country_code3": null, "domains": [\ "dns.google"\ ], "ip_str": "8.8.8.8", "os": null, "ports": [\ 53\ ] } Request $ shodan host 8.8.8.8 Response 8.8.8.8 Hostnames: dns.google Country: United States Organization: Google Updated: 2021-01-22T08:49:35.190817 Number of open ports: 1 Ports: 53/udp Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') print(api.host('8.8.8.8')) Response { "area_code": None, "asn": "AS15169", "city": None, "country_code": "US", "country_code3": None, "country_name": "United States", "data": [\ {\ "asn": "AS15169",\ "data": "\nRecursion: enabled",\ "dns": {\ "recursive": True,\ "resolver_hostname": None,\ "resolver_id": None,\ "software": None,\ },\ "domains": ["dns.google"],\ "hash": -553166942,\ "hostnames": ["dns.google"],\ "ip": 134744072,\ "ip_str": "8.8.8.8",\ "isp": "Google",\ "location": {\ "area_code": None,\ "city": None,\ "country_code": "US",\ "country_code3": None,\ "country_name": "United States",\ "dma_code": None,\ "latitude": 37.751,\ "longitude": -97.822,\ "postal_code": None,\ "region_code": None,\ },\ "opts": {\ "raw": "34ef818200010000000000000776657273696f6e0462696e640000100003"\ },\ "org": "Google",\ "os": None,\ "port": 53,\ "timestamp": "2021-01-22T08:49:35.190817",\ "transport": "udp",\ }\ ], "dma_code": None, "domains": ["dns.google"], "hostnames": ["dns.google"], "ip": 134744072, "ip_str": "8.8.8.8", "isp": "Google", "last_update": "2021-01-22T08:49:35.190817", "latitude": 37.751, "longitude": -97.822, "org": "Google", "os": None, "ports": [53], "postal_code": None, "region_code": None, "tags": [], } ###### GET/shodan/host/count ###### **Search Shodan without Results** This method behaves identical to "/shodan/host/search" with the only difference that this method does not return any host results, it only returns the total number of results that matched the query and any facet information that was requested. As a result this method does not consume query credits. ###### **Request URL** https://api.shodan.io/shodan/host/count?key={YOUR_API_KEY}&query={query}&facets={facets} ###### **Parameters** * **query:** \[String\] Shodan search query. The provided string is used to search the database of banners in Shodan, with the additional option to provide filters inside the search query using a "filter:value" format. For example, the following search query would find Apache Web servers located in Germany: "apache country:DE". [List of Filters](https://beta.shodan.io/search/filters) * **facets (optional):** \[String\] A comma-separated list of properties to get summary information on. Property names can also be in the format of "property:count", where "count" is the number of facets that will be returned for a property (i.e. "country:100" to get the top 100 countries for a search query). Visit the Shodan website's Facet Analysis page for an up-to-date list of available facets: [Explore Facets](https://beta.shodan.io/search/facet) **Examples** cURL Shodan CLI Python Request $ curl -X GET "https://api.shodan.io/shodan/host/count?key={YOUR_API_KEY}&query=port:22&facets=org,os" Response { "matches": [], "facets": { "org": [\ {\ "count": 3012386,\ "value": "Amazon.com"\ },\ {\ "count": 1322102,\ "value": "Google Cloud"\ },\ {\ "count": 1075807,\ "value": "Digital Ocean"\ },\ {\ "count": 687155,\ "value": "OVH SAS"\ },\ {\ "count": 450521,\ "value": "Tencent cloud computing"\ }\ ], "os": [\ {\ "count": 601923,\ "value": "Ubuntu"\ },\ {\ "count": 227851,\ "value": "Debian"\ },\ {\ "count": 7660,\ "value": "Raspbian"\ }\ ] }, "total": 19590274 } Request $ shodan count port:22 Response 19591483 Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') print(api.count(query='port:22', facets='org,os')) Response { "matches": [], "total": 19592093 } ###### GET/shodan/host/search ###### **Search Shodan** Search Shodan using the same query syntax as the website and use facets to get summary information for different properties. ###### **Requirements** This method may use API query credits depending on usage. If any of the following criteria are met, your account will be deducted 1 query credit: 1. The search query contains a filter. 2. Accessing results past the 1st page using the "page". For every 100 results past the 1st page 1 query credit is deducted. ###### **Request URL** https://api.shodan.io/shodan/host/search?key={YOUR_API_KEY}&query={query}&facets={facets} ###### **Parameters** * **query:** \[String\] Shodan search query. The provided string is used to search the database of banners in Shodan, with the additional option to provide filters inside the search query using a "filter:value" format. For example, the following search query would find Apache Web servers located in Germany: "apache country:DE". [List of Filters](https://beta.shodan.io/search/filters) * **facets (optional):** \[String\] A comma-separated list of properties to get summary information on. Property names can also be in the format of "property:count", where "count" is the number of facets that will be returned for a property (i.e. "country:100" to get the top 100 countries for a search query). Visit the Shodan website's Facet Analysis page for an up-to-date list of available facets: [Explore Facets](https://beta.shodan.io/search/facet) * **page (optional):** \[Integer\] The page number to page through results 100 at a time (default: 1) * **minify (optional):** \[Boolean\] True or False; whether or not to truncate some of the larger fields (default: True) * **fields (optional):** \[String\] Comma-separated list of fields to return in the search results. Example: tags,http.title,http.favicon.hash **Examples** cURL Shodan CLI Python Request $ curl -X GET "https://api.shodan.io/shodan/host/search?key={YOUR_API_KEY}&query=product:nginx&facets=country" Response { "matches": [\ {\ "product": "nginx",\ "hash": -1609083510,\ "ip": 1616761883,\ "org": "Comcast Business",\ "isp": "Comcast Business",\ "transport": "tcp",\ "cpe": [\ "cpe:/a:igor_sysoev:nginx"\ ],\ "data": "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Mon, 25 Jan 2021 21:33:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 650\r\nConnection: close\r\n\r\n",\ "asn": "AS7922",\ "port": 443,\ "hostnames": [\ "three.webapplify.net"\ ],\ "location": {\ "city": "Denver",\ "region_code": "CO",\ "area_code": null,\ "longitude": -104.9078,\ "country_code3": null,\ "latitude": 39.7301,\ "postal_code": null,\ "dma_code": 751,\ "country_code": "US",\ "country_name": "United States"\ },\ "timestamp": "2021-01-25T21:33:49.154513",\ "domains": [\ "webapplify.net"\ ],\ "http": {\ "robots_hash": null,\ "redirects": [],\ "securitytxt": null,\ "title": "400 The plain HTTP request was sent to HTTPS port",\ "sitemap_hash": null,\ "robots": null,\ "server": "nginx",\ "host": "96.93.212.27",\ "html": "\r\n400 The plain HTTP request was sent to HTTPS port\r\n\r\n400 Bad Request\r\nThe plain HTTP request was sent to HTTPS port\r\nnginx\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n",\ "location": "/",\ "components": {},\ "securitytxt_hash": null,\ "sitemap": null,\ "html_hash": 199333125\ },\ "os": null,\ "_shodan": {\ "crawler": "c9b639b99e5410a46f656e1508a68f1e6e5d6f99",\ "ptr": true,\ "id": "534cc127-e734-44bc-be88-2e219a56a099",\ "module": "auto",\ "options": {}\ },\ "ip_str": "96.93.212.27"\ },\ {\ "product": "nginx",\ "hostnames": [\ "kolobok.us"\ ],\ "hash": 1940048442,\ "ip": 3104568883,\ "org": "RuWeb",\ "isp": "RuWeb",\ "transport": "tcp",\ "cpe": [\ "cpe:/a:igor_sysoev:nginx:1.4.2"\ ],\ "data": "HTTP/1.1 410 Gone\r\nServer: nginx/1.4.2\r\nDate: Mon, 25 Jan 2021 21:33:50 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 295\r\nConnection: keep-alive\r\n\r\n",\ "asn": "AS49189",\ "port": 80,\ "version": "1.4.2",\ "location": {\ "city": null,\ "region_code": null,\ "area_code": null,\ "longitude": 37.6068,\ "country_code3": null,\ "latitude": 55.7386,\ "postal_code": null,\ "dma_code": null,\ "country_code": "RU",\ "country_name": "Russia"\ },\ "timestamp": "2021-01-25T21:33:51.172037",\ "domains": [\ "kolobok.us"\ ],\ "http": {\ "robots_hash": null,\ "redirects": [],\ "securitytxt": null,\ "title": "410 Gone",\ "sitemap_hash": null,\ "robots": null,\ "server": "nginx/1.4.2",\ "host": "185.11.246.51",\ "html": "\n\n410 Gone\n\nGone\nThe requested resource/\nis no longer available on this server and there is no forwarding address.\nPlease remove all references to this resource.\n\n",\ "location": "/",\ "components": {},\ "securitytxt_hash": null,\ "sitemap": null,\ "html_hash": 922034037\ },\ "os": null,\ "_shodan": {\ "crawler": "c9b639b99e5410a46f656e1508a68f1e6e5d6f99",\ "ptr": true,\ "id": "118b7360-01d0-4edb-8ee9-01e411c23e60",\ "module": "auto",\ "options": {}\ },\ "ip_str": "185.11.246.51"\ },\ ...\ ], "facets": { "country": [\ {\ "count": 7883733,\ "value": "US"\ },\ {\ "count": 2964965,\ "value": "CN"\ },\ {\ "count": 1945369,\ "value": "DE"\ },\ {\ "count": 1717359,\ "value": "HK"\ },\ {\ "count": 940900,\ "value": "FR"\ }\ ] }, "total": 23047224 } Request $ shodan search product:nginx Response 54.175.207.100 80 ec2-54-175-207-100.compute-1.amazonaws.com HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 25 Jan 2021 21:33:50 GMT\r\nContent-Type: text/html\r\nContent-Length: 970\r\nETag: "5cda3f8a-3ca"\r\nCache-Control: max-age=900, public\r\nAge: 0\r\nVia: varnish\r\nX-Cache: MISS\r\nConnection: keep-alive\r\n\r\n 95.110.255.139 80 ru001353.arubabiz.net HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Mon, 25 Jan 2021 21:33:49 GMT\r\nContent-Type: text/html\r\nContent-Length: 4033\r\nConnection: keep-alive\r\nLast-Modified: Wed, 19 Feb 2020 08:11:56 GMT\r\nETag: "fc1-59ee957802682"\r\nAccept-Ranges: bytes\r\n\r\n 18.167.41.130 9999 ec2-18-167-41-130.ap-east-1.compute.amazonaws.com HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Mon, 25 Jan 2021 21:33:50 GMT\r\nContent-Length: 0\r\n\r\n 185.11.246.51 80 kolobok.us HTTP/1.1 410 Gone\r\nServer: nginx/1.4.2\r\nDate: Mon, 25 Jan 2021 21:33:50 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 295\r\nConnection: keep-alive\r\n\r\n 97.64.28.162 443 97.64.28.162.16clouds.com HTTP/1.1 400 Bad Request\r\nServer: nginx/1.18.0\r\nDate: Mon, 25 Jan 2021 21:33:52 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n\r\n400 The plain HTTP request was sent to HTTPS port\r\n\r\n400 Bad Request\r\nThe plain HTTP request was sent to HTTPS port\r\nnginx/1.18.0\r\n\r\n\r\n 52.203.117.10 443 ec2-52-203-117-10.compute-1.amazonaws.com HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Mon, 25 Jan 2021 21:33:50 GMT\r\nContent-Type: text/html\r\nContent-Length: 650\r\nConnection: close\r\n\r\n Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') print(api.search(query='product:nginx', facets='country,org')) Response { "matches": [\ {\ "product": "nginx",\ "hash": 1320103325,\ "ip": 2574807568,\ "org": "SAKURA Internet",\ "isp": "SAKURA Internet",\ "transport": "tcp",\ "cpe": ["cpe:/a:igor_sysoev:nginx"],\ "data": "HTTP/1.1 403 Forbidden\r\nServer: nginx\r\nDate: Mon, 25 Jan 2021 21:33:50 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\n\r\n",\ "asn": "AS7684",\ "port": 80,\ "hostnames": ["www7616m.sakura.ne.jp"],\ "location": {\ "city": None,\ "region_code": None,\ "area_code": None,\ "longitude": 139.6895,\ "country_code3": None,\ "latitude": 35.6897,\ "postal_code": None,\ "dma_code": None,\ "country_code": "JP",\ "country_name": "Japan",\ },\ "timestamp": "2021-01-25T21:33:51.305797",\ "domains": ["sakura.ne.jp"],\ "http": {\ "robots_hash": None,\ "redirects": [],\ "securitytxt": None,\ "title": "������̃}�l�[�W�h�T�[�o",\ "sitemap_hash": None,\ "robots": None,\ "server": "nginx",\ "host": "153.120.114.16",\ "html": '...',\ "location": "/",\ "components": {},\ "securitytxt_hash": None,\ "sitemap": None,\ "html_hash": 1520306793,\ },\ "os": None,\ "_shodan": {\ "crawler": "c9b639b99e5410a46f656e1508a68f1e6e5d6f99",\ "ptr": True,\ "id": "44a3d53b-f109-4240-ab90-842a96a7c7c1",\ "module": "auto",\ "options": {},\ },\ "ip_str": "153.120.114.16",\ },\ {\ "product": "nginx",\ "hostnames": ["97.64.28.162.16clouds.com"],\ "hash": 372879924,\ "ip": 1631591586,\ "isp": "IT7 Networks",\ "transport": "tcp",\ "cpe": ["cpe:/a:igor_sysoev:nginx:1.18.0"],\ "data": "HTTP/1.1 400 Bad Request\r\nServer: nginx/1.18.0\r\nDate: Mon, 25 Jan 2021 21:33:52 GMT\r\nContent-Type: text/html\r\nContent-Length: 255\r\nConnection: close\r\n\r\n\r\n400 The plain HTTP request was sent to HTTPS port\r\n\r\n400 Bad Request\r\nThe plain HTTP request was sent to HTTPS port\r\nnginx/1.18.0\r\n\r\n\r\n",\ "asn": "AS25820",\ "port": 443,\ "version": "1.18.0",\ "location": {\ "city": "Los Angeles",\ "region_code": "CA",\ "area_code": None,\ "longitude": -118.278,\ "country_code3": None,\ "latitude": 34.0584,\ "postal_code": None,\ "dma_code": 803,\ "country_code": "US",\ "country_name": "United States",\ },\ "timestamp": "2021-01-25T21:33:52.845325",\ "domains": ["16clouds.com"],\ "org": "IT7 Networks",\ "os": None,\ "_shodan": {\ "crawler": "9d8ac08f91f51fa9017965712c8fdabb4211dee4",\ "ptr": True,\ "id": "256e7517-86cf-480a-8e47-20e6b968aa8c",\ "module": "https",\ "options": {},\ },\ "ip_str": "97.64.28.162",\ },\ ...\ ],\ "total": 23047224,\ "_scroll_id": "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",\ }\ \ ###### GET/shodan/host/search/facets\ \ ###### **List all search facets**\ \ This method returns a list of facets that can be used to get a breakdown of the top values for a property.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/host/search/facets?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/host/search/facets?key={YOUR_API_KEY}"\ \ \ Response\ \ [\ 'asn',\ 'bitcoin.ip',\ 'bitcoin.ip_count',\ ...\ ]\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.search_facets())\ \ Response\ \ [\ "asn",\ "bitcoin.ip",\ "bitcoin.ip_count",\ ...\ ]\ \ ###### GET/shodan/host/search/filters\ \ ###### **List all filters that can be used when searching**\ \ This method returns a list of search filters that can be used in the search query.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/host/search/filters?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/host/search/filters?key={YOUR_API_KEY}"\ \ \ Response\ \ [\ "all",\ "asn",\ "bitcoin.ip",\ "bitcoin.ip_count",\ ...\ ]\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.search_filters())\ \ Response\ \ [\ "all",\ "asn",\ "bitcoin.ip",\ "bitcoin.ip_count",\ ...\ ]\ \ ###### GET/shodan/host/search/tokens\ \ ###### **Break the search query into tokens**\ \ This method lets you determine which filters are being used by the query string and what parameters were provided to the filters.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/host/search/tokens?key={YOUR_API_KEY}&query={query}\ \ \ \ ###### **Parameters**\ \ * **query:** \[String\] Shodan search query. The provided string is used to search the database of banners in Shodan, with the additional option to provide filters inside the search query using a "filter:value" format. For example, the following search query would find Apache Web servers located in Germany: "apache country:DE". \ [List of Filters](https://beta.shodan.io/search/filters)\ \ \ \ \ **Examples** cURL Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/host/search/tokens?key={YOUR_API_KEY}&query=Raspbian port:22"\ \ \ Response\ \ {\ "attributes": {\ "ports": [22]\ },\ "errors": [],\ "string": "Raspbian",\ "filters": ["port"],\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.search_tokens(query='Raspbian port:22'))\ \ Response\ \ {\ "attributes": {\ "ports": [22]\ },\ "errors": [],\ "string": "Raspbian",\ "filters": ["port"],\ }\ \ On-Demand _Scanning_\ ====================\ \ ###### GET/shodan/ports\ \ ###### **List all ports that Shodan is crawling on the Internet.**\ \ This method returns a list of port numbers that the crawlers are looking for.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/ports?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/ports?key={YOUR_API_KEY}"\ \ \ Response\ \ [\ 7,\ 11,\ 13,\ 15,\ ...\ ]\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.ports())\ \ Response\ \ [\ 7,\ 11,\ 13,\ 15,\ ...\ ]\ \ ###### GET/shodan/protocols\ \ ###### **List all protocols that can be used when performing on-demand Internet scans via Shodan.**\ \ This method returns an object containing all the protocols that can be used when launching an Internet scan.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/protocols?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/protocols?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "afp": "AFP server information grabbing module",\ "ajp": "Check whether the Tomcat server running AJP protocol",\ "amqp": "Grab information from an AMQP service",\ ...\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.protocols())\ \ Response\ \ {\ "afp": "AFP server information grabbing module",\ "ajp": "Check whether the Tomcat server running AJP protocol",\ "amqp": "Grab information from an AMQP service",\ ...\ }\ \ ###### POST/shodan/scan\ \ ###### **Request Shodan to crawl an IP/ netblock**\ \ Use this method to request Shodan to crawl a network.\ \ ###### **Requirements**\ \ This method uses API scan credits: 1 IP consumes 1 scan credit. You must have a paid API plan (either one-time payment or subscription) in order to use this method.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/scan?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **ips:** \[String\] A comma-separated list of IPs or netblocks (in CIDR notation) that should get crawled.\ * **service:** \[Array\] A list of services that should get scanned, where a service is defined as a \[port, protocol\].\ \ ###### **Here is the JSON encoded object example (which allow to pass service variable to specify \[port, protocol\])**\ \ {\ "ips": {\ "{ips}": [\ {service},\ {service},\ ...\ ],\ ...\ }\ }\ \ \ \ **Examples** cURL Shodan CLI Python\ \ Request (Scan all the services)\ \ $ curl -X POST "https://api.shodan.io/shodan/scan?key={YOUR_API_KEY}" -d 'ips=8.8.8.8,1.1.1.1'\ \ \ Response\ \ {\ "count": 2,\ "id": "vwWO7P5N1rWF5jbh",\ "credits_left": 100000\ }\ \ Request (Scan specified services)\ \ $ curl -X POST "https://api.shodan.io/shodan/scan?key={YOUR_API_KEY}" -d 'ips={\ "1.1.1.1": [\ [53, "dns-udp"],\ [443, "https"]\ ]\ }'\ \ Response\ \ {\ "count": 1,\ "id": "z1ojEJbI0gy4AqSx",\ "credits_left": 100000\ }\ \ Request (Scan all the opened ports)\ \ $ shodan scan submit 8.8.8.8 1.1.1.1\ \ \ Response\ \ Starting Shodan scan at 2021-01-26 15:58 - 100000 scan credits left\ \ 1.1.1.1 (one.one.one.one)\ Country Australia\ Organization Mountain View Communications\ \ Open Ports:\ 53/udp\ 80/tcp\ 443/tcp\ |-- SSL Versions: TLSv1, TLSv1.1, TLSv1.2, TLSv1.3\ \ 8.8.8.8 (dns.google)\ Country United States\ Organization Google\ \ Open Ports:\ 53/tcp\ 443/tcp\ |-- SSL Versions: TLSv1.2, TLSv1.3\ \ Request (Scan all the services)\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.scan(ips='8.8.8.8', force=False))\ \ Response\ \ {\ "count": 1,\ "id": "mFN8rs9pcqcmQYOZ",\ "credits_left": 100000\ }\ \ Request (Scan specified services)\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ ips = {\ "1.1.1.1": [\ [53, "dns-udp"],\ [443, "https"]\ ],\ "8.8.8.8": [\ [53, "dns-tcp"],\ ],\ }\ print(api.scan(ips=ips, force=False))\ \ Response\ \ {\ "count": 2,\ "id": "SDniHKzc4kEWxZPu",\ "credits_left": 100000\ }\ \ ###### POST/shodan/scan/internet\ \ ###### **Crawl the Internet for a specific port and protocol using Shodan**\ \ Use this method to request Shodan to crawl the Internet for a specific port.\ \ ###### **Requirements**\ \ This method is restricted to security researchers and companies with a Shodan Enterprise Data license. To apply for access to this method as a researcher, please email [jmath@shodan.io](mailto:jmath@shodan.io)\ with information about your project. Access is restricted to prevent abuse.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/scan/internet?key={YOUR_API_KEY}\ \ \ \ ###### **Parameters**\ \ * **port:** \[Integer\] The port that Shodan should crawl the Internet for.\ * **protocol:** \[String\] The name of the protocol that should be used to interrogate the port. See /shodan/protocols for a list of supported protocols.\ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X POST "https://api.shodan.io/shodan/scan/internet?key={YOUR_API_KEY}" -d 'port=80' -d 'protocol=http'\ \ \ Response\ \ {\ "id": "TcjcsMfPcw4o7O84"\ }\ \ Request\ \ $ shodan scan internet 22 ssh\ \ \ Response\ \ Submitting Internet scan to Shodan...Done\ The requested port is already indexed by Shodan. A new scan for the port has been launched, please subscribe to the real-time stream for results.\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.scan_internet(port=443, protocol='https'))\ \ Response\ \ {\ "id": "2kReKZlPxSkCRppx"\ }\ \ ###### GET/shodan/scans\ \ ###### **Get list of all the created scans**\ \ Returns a listing of all the on-demand scans that are currently active on the account.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/scans?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/scans?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "matches": [\ {\ "status": "PROCESSING",\ "created": "2021-01-26T08:17:43.794000",\ "status_check": "2021-01-26T08:17:43.900000",\ "credits_left": 100000,\ "api_key": "toH56DpDulOnvyxLhOSIxaUgZQeg1gFX",\ "id": "Mo8W7itcWumiy9Ay",\ "size": 1\ },\ {\ "status": "DONE",\ "created": "2021-01-26T08:08:26.296000",\ "status_check": "2021-01-26T08:09:39.636000",\ "credits_left": 100000,\ "api_key": "toH56DpDulOnvyxLhOSIxaUgZQeg1gFX",\ "id": "04GjMnUkQx9HsFhA",\ "size": 1\ },\ ...\ ],\ "total": 19\ }\ \ Request\ \ $ shodan scan list\ \ \ Response\ \ # 19 Scans Total - Showing 10 most recent scans:\ # Scan ID Status Size Timestamp\ vClAi1jq1FjNWmS0 PROCESSING 1 2021-01-26T09:45:21.426000\ xHyH8Q8Do7S0KrkW DONE 2 2021-01-26T08:58:00.418000\ ...\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.scans(page=1))\ \ Response\ \ {\ "matches": [\ {\ "status": "PROCESSING",\ "created": "2021-01-26T08:17:43.794000",\ "status_check": "2021-01-26T08:17:43.900000",\ "credits_left": 100000,\ "api_key": "toH56DpDulOnvyxLhOSIxaUgZQeg1gFX",\ "id": "Mo8W7itcWumiy9Ay",\ "size": 1\ },\ {\ "status": "DONE",\ "created": "2021-01-26T08:08:26.296000",\ "status_check": "2021-01-26T08:09:39.636000",\ "credits_left": 100000,\ "api_key": "toH56DpDulOnvyxLhOSIxaUgZQeg1gFX",\ "id": "04GjMnUkQx9HsFhA",\ "size": 1\ },\ ...\ ],\ "total": 19\ }\ \ ###### GET/shodan/scan/{id}\ \ ###### **Get the status of a scan request**\ \ Check the progress of a previously submitted scan request. Possible values for the status are:\ \ * SUBMITTING\ * QUEUE\ * PROCESSING\ * DONE\ \ \ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/scan/{id}?key={YOUR_API_KEY}\ \ \ \ ###### **Parameters**\ \ * **id:** \[String\] The unique scan ID that was returned by /shodan/scan.\ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/scan/Mo8W7itcWumiy9Ay?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "count": 1,\ "status": "DONE",\ "id": "Mo8W7itcWumiy9Ay",\ "created": "2021-01-26T08:17:43.794000"\ }\ \ Request\ \ $ shodan scan status Mo8W7itcWumiy9Ay\ \ \ Response\ \ DONE\ \ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.scan_status(scan_id='Mo8W7itcWumiy9Ay'))\ \ Response\ \ {\ "count": 1,\ "status": "DONE",\ "id": "Mo8W7itcWumiy9Ay",\ "created": "2021-01-26T08:17:43.794000"\ }\ \ Network _Alerts_\ ================\ \ ###### POST/shodan/alert\ \ ###### **Create an alert to monitor a network range**\ \ Use this method to create a network alert for a defined IP/ netblock which can be used to subscribe to changes/ events that are discovered within that range.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ The alert is created by sending a JSON encoded object that has the structure:\ \ {\ "name": {name},\ "filters": {\ "ip": {ip},\ },\ "expires": {expires},\ }\ \ * **name:** \[String\] The name to describe the network alert.\ * **filters:** \[Object\] An object specifying the criteria that an alert should trigger. The only supported option at the moment is the "ip" filter.\ * **filters.ip:** \[String\] A list of IPs or network ranges defined using CIDR notation.\ * **expires (optional):** \[Integer\] Number of seconds that the alert should be active.\ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X POST "https://api.shodan.io/shodan/alert?key={YOUR_API_KEY}" -H 'Content-Type: application/json' -d'\ {\ "name": "DNS Alert",\ "filters": {\ "ip": [\ "8.8.8.8",\ "1.1.1.1"\ ]\ },\ "expires": 0\ }\ '\ \ Response\ \ {\ "name": "DNS Alert",\ "created": "2021-01-27T03:44:22.989575",\ "triggers": {},\ "has_triggers": false,\ "expires": 0,\ "expiration": null,\ "filters": {\ "ip": [\ "8.8.8.8",\ "1.1.1.1"\ ]\ },\ "id": "OYPRB8IR9Z35AZPR",\ "size": 2\ }\ \ Request\ \ $ shodan alert create "DNS Alert" 8.8.8.8 1.1.1.1\ \ \ Response\ \ Successfully created network alert!\ Alert ID: Z05WK08N0568Y53R\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.create_alert(name='DNS Alert', ip=['8.8.8.8', '1.1.1.1'], expires=0))\ \ Response\ \ {\ "name": "DNS Alert",\ "created": "2021-01-27T03:50:24.277866",\ "triggers": {},\ "has_triggers": False,\ "expires": 0,\ "expiration": None,\ "filters": {\ "ip": [\ "8.8.8.8",\ "1.1.1.1"\ ]\ },\ "id": "67UQ4JM3NGJKROR9",\ "size": 2,\ }\ \ ###### GET/shodan/alert/{id}/info\ \ ###### **Get the details for a network alert**\ \ Returns the information about a specific network alert.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert/{id}/info?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **id:** \[String\] Alert ID\ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/alert/67UQ4JM3NGJKROR9/info?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "name": "DNS Alert",\ "created": "2021-01-27T03:50:24.277000",\ "triggers": {},\ "has_triggers": false,\ "expires": 0,\ "notify": {},\ "expiration": null,\ "filters": {\ "ip": [\ "8.8.8.8",\ "1.1.1.1"\ ]\ },\ "notifiers": [],\ "id": "67UQ4JM3NGJKROR9",\ "size": 2\ }\ \ Request\ \ $ shodan alert info 67UQ4JM3NGJKROR9\ \ \ Response\ \ DNS Alert\ Created: 2021-01-27T03:50:24.277000\ Notifications: disabled\ \ Network Range(s):\ > 8.8.8.8\ > 1.1.1.1\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.alerts(aid='67UQ4JM3NGJKROR9', include_expired=True))\ \ Response\ \ {\ "name": "DNS Alert",\ "created": "2021-01-27T03:50:24.277000",\ "triggers": {},\ "has_triggers": False,\ "expires": 0,\ "notify": {},\ "expiration": None,\ "filters": {\ "ip": [\ "8.8.8.8",\ "1.1.1.1"\ ]\ },\ "notifiers": [],\ "api_key": "toH56DpDulOnvyxLhOSIxaUgZQeg1gFX",\ "id": "67UQ4JM3NGJKROR9",\ "size": 2,\ }\ \ ###### DELETE/shodan/alert/{id}\ \ ###### **Delete an alert**\ \ Remove the specified network alert.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert/{id}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **id:** \[String\] Alert ID\ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X DELETE "https://api.shodan.io/shodan/alert/67UQ4JM3NGJKROR9?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "success": true\ }\ \ Request\ \ $ shodan alert remove 67UQ4JM3NGJKROR9\ \ \ Response\ \ Alert deleted\ \ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.delete_alert(aid='67UQ4JM3NGJKROR9'))\ \ Response\ \ {\ "success": True\ }\ \ ###### POST/shodan/alert/{id}\ \ ###### **Edit the networks monitored in an alert**\ \ Use this method to edit a network alert with a new list of IPs/ networks to keep track of.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert/{id}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ The alert is edited by sending a JSON encoded object that has the structure:\ \ {\ "filters": {\ "ip": {ip},\ },\ }\ \ * **filters:** \[Object\] An object specifying the criteria that an alert should trigger. The only supported option at the moment is the "ip" filter.\ * **filters.ip:** \[String\] A list of IPs or network ranges defined using CIDR notation.\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X POST "https://api.shodan.io/shodan/alert/67UQ4JM3NGJKROR9?key={YOUR_API_KEY}" -H 'Content-Type: application/json' -d'\ {\ "filters": {\ "ip": [\ "8.8.8.8",\ "1.1.1.1"\ ]\ }\ }\ '\ \ Response\ \ {\ "name": "DNS Alert",\ "created": "2021-01-27T03:44:22.989575",\ "triggers": {},\ "has_triggers": false,\ "expires": 0,\ "expiration": null,\ "filters": {\ "ip": [\ "8.8.8.8",\ "1.1.1.1"\ ]\ },\ "id": "67UQ4JM3NGJKROR9",\ "size": 2\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.edit_alert('67UQ4JM3NGJKROR9', ['8.8.8.8', '1.1.1.1']))\ \ Response\ \ {\ "name": "DNS Alert",\ "created": "2021-01-27T03:50:24.277866",\ "triggers": {},\ "has_triggers": False,\ "expires": 0,\ "expiration": None,\ "filters": {\ "ip": [\ "8.8.8.8",\ "1.1.1.1"\ ]\ },\ "id": "67UQ4JM3NGJKROR9",\ "size": 2,\ }\ \ ###### GET/shodan/alert/info\ \ ###### **Get a list of all the created alerts**\ \ Returns a listing of all the network alerts that are currently active on the account.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert/info?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/alert/info?key={YOUR_API_KEY}"\ \ \ Response\ \ [\ {\ "name": "DNS Alert",\ "created": "2021-01-27T03:44:22.989000",\ "triggers": {},\ "has_triggers": false,\ "expires": 0,\ "notify": {},\ "expiration": null,\ "filters": {\ "ip": [\ "8.8.8.8",\ "1.1.1.1"\ ]\ },\ "notifiers": [],\ "id": "OYPRB8IR9Z35AZPR",\ "size": 2\ },\ {\ "name": "Google DNS Alert",\ "created": "2021-01-27T03:42:50.908000",\ "triggers": {},\ "has_triggers": false,\ "expires": 0,\ "notify": {},\ "expiration": null,\ "filters": {\ "ip": [\ "8.8.8.8"\ ]\ },\ "notifiers": [],\ "id": "RIO8WNQZMI4ZQXW6",\ "size": 1\ },\ ...\ ]\ \ Request\ \ $ shodan alert list\ \ \ Response\ \ # Alert ID Name IP/ Network\ OYPRB8IR9Z35AZPR DNS Alert 8.8.8.8, 1.1.1.1\ RIO8WNQZMI4ZQXW6 Google DNS Alert 8.8.8.8\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.alerts(include_expired=True))\ \ Response\ \ [\ {\ "name": "DNS Alert",\ "created": "2021-01-27T03:44:22.989000",\ "triggers": {},\ "has_triggers": False,\ "expires": 0,\ "notify": {},\ "expiration": None,\ "filters": {\ "ip": [\ "8.8.8.8",\ "1.1.1.1"\ ]\ },\ "notifiers": [],\ "api_key": "toH56DpDulOnvyxLhOSIxaUgZQeg1gFX",\ "id": "OYPRB8IR9Z35AZPR",\ "size": 2,\ },\ {\ "name": "Google DNS Alert",\ "created": "2021-01-27T03:42:50.908000",\ "triggers": {},\ "has_triggers": False,\ "expires": 0,\ "notify": {},\ "expiration": None,\ "filters": {\ "ip": [\ "8.8.8.8"\ ]\ },\ "notifiers": [],\ "api_key": "toH56DpDulOnvyxLhOSIxaUgZQeg1gFX",\ "id": "RIO8WNQZMI4ZQXW6",\ "size": 1,\ },\ ...\ ]\ \ ###### GET/shodan/alert/triggers\ \ ###### **Get a list of available triggers**\ \ Returns a list of all the triggers that can be enabled on network alerts.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert/triggers?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/alert/triggers?key={YOUR_API_KEY}"\ \ \ Response\ \ [\ {\ "name": "any",\ "rule": "*",\ "description": "Match any service that is discovered"\ },\ {\ "name": "industrial_control_system",\ "rule": "tag:ics",\ "description": "Services associated with industrial control systems"\ },\ {\ "name": "malware",\ "rule": "tag:compromised,malware",\ "description": "Compromised or malware-related services"\ },\ {\ "name": "uncommon",\ "rule": "-port:22,80,443,7547",\ "description": "Services that generally shouldn't be publicly available"\ },\ ...\ ]\ \ Request\ \ $ shodan alert triggers\ \ \ Response\ \ The following triggers can be enabled on alerts:\ \ Name any\ Description Match any service that is discovered\ Rule *\ \ Name industrial_control_system\ Description Services associated with industrial control systems\ Rule tag:ics\ \ Name internet_scanner\ Description Device has been seen scanning the Internet and exposes a service\ Rule tags:scanner\ \ ...\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.alert_triggers())\ \ Response\ \ [\ {\ "name": "any",\ "rule": "*",\ "description": "Match any service that is discovered"\ },\ {\ "name": "industrial_control_system",\ "rule": "tag:ics",\ "description": "Services associated with industrial control systems",\ },\ ...\ ]\ \ ###### PUT/shodan/alert/{id}/trigger/{trigger}\ \ ###### **Enable a trigger**\ \ Get notifications when the specified trigger is met.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert/{id}/trigger/{trigger}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **id:** \[String\] Alert ID\ * **trigger:** \[String\] Comma-separated list of trigger names\ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X PUT "https://api.shodan.io/shodan/alert/OYPRB8IR9Z35AZPR/trigger/new_service,vulnerable?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "success": true\ }\ \ Request\ \ $ shodan alert enable OYPRB8IR9Z35AZPR new_service,vulnerable\ \ \ Response\ \ Successfully enabled the trigger: new_service,vulnerable\ \ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.enable_alert_trigger(aid='OYPRB8IR9Z35AZPR', trigger='new_service,vulnerable'))\ \ Response\ \ {\ "success": True\ }\ \ ###### DELETE/shodan/alert/{id}/trigger/{trigger}\ \ ###### **Disable a trigger**\ \ Stop getting notifications for the specified trigger.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert/{id}/trigger/{trigger}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **id:** \[String\] Alert ID\ * **trigger:** \[String\] Comma-separated list of trigger names\ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X DELETE "https://api.shodan.io/shodan/alert/OYPRB8IR9Z35AZPR/trigger/new_service,vulnerable?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "success": true\ }\ \ Request\ \ $ shodan alert disable OYPRB8IR9Z35AZPR new_service,vulnerable\ \ \ Response\ \ Successfully disabled the trigger: new_service,vulnerable\ \ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.disable_alert_trigger(aid='OYPRB8IR9Z35AZPR', trigger='new_service,vulnerable'))\ \ Response\ \ {\ "success": True\ }\ \ ###### PUT/shodan/alert/{id}/trigger/{trigger}/ignore/{service}\ \ ###### **Add to Whitelist**\ \ Ignore the specified service when it is matched for the trigger.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert/{id}/trigger/{trigger}/ignore/{service}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **id:** \[String\] Alert ID\ * **trigger:** \[String\] Trigger name\ * **service:** \[String\] Service specified in the format "ip:port" (ex. "1.1.1.1:80"\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X PUT "https://api.shodan.io/shodan/alert/OYPRB8IR9Z35AZPR/trigger/new_service/ignore/1.1.1.1:53?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "success": true\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.ignore_alert_trigger_notification(aid='OYPRB8IR9Z35AZPR', trigger='new_service', ip='1.1.1.1', port=53))\ \ Response\ \ {\ "success": True\ }\ \ ###### DELETE/shodan/alert/{id}/trigger/{trigger}/ignore/{service}\ \ ###### **Remove from Whitelist**\ \ Start getting notifications again for the specified trigger.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert/{id}/trigger/{trigger}/ignore/{service}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **id:** \[String\] Alert ID\ * **trigger:** \[String\] Trigger name\ * **service:** \[String\] Service specified in the format "ip:port" (ex. "1.1.1.1:80"\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X DELETE "https://api.shodan.io/shodan/alert/OYPRB8IR9Z35AZPR/trigger/new_service/ignore/1.1.1.1:53?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "success": true\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.unignore_alert_trigger_notification(aid='OYPRB8IR9Z35AZPR', trigger='new_service', ip='1.1.1.1', port=53))\ \ Response\ \ {\ "success": True\ }\ \ ###### PUT/shodan/alert/{id}/notifier/{notifier\_id}\ \ ###### **Add the notifier to the alert**\ \ Add the specified notifier to the network alert. Notifications are only sent if triggers have also been enabled. For each created user, there is a **default** notifier which will sent via email.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert/{id}/notifier/{notifier_id}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **id:** \[String\] Alert ID\ * **notifier\_id:** \[String\] Notifier ID\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X PUT "https://api.shodan.io/shodan/alert/OYPRB8IR9Z35AZPR/notifier/default?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "success": true\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.add_alert_notifier(aid='OYPRB8IR9Z35AZPR', nid='default'))\ \ Response\ \ {\ "success": True\ }\ \ ###### DELETE/shodan/alert/{id}/notifier/{notifier\_id}\ \ ###### **Remove the notifier from the alert**\ \ Remove the notification service from the alert. Notifications are only sent if triggers have also been enabled.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/alert/{id}/notifier/{notifier_id}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **id:** \[String\] Alert ID\ * **notifier\_id:** \[String\] Notifier ID\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X DELETE "https://api.shodan.io/shodan/alert/OYPRB8IR9Z35AZPR/notifier/default?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "success": true\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.remove_alert_notifier(aid='OYPRB8IR9Z35AZPR', nid='default'))\ \ Response\ \ {\ "success": True\ }\ \ _Notifiers_\ ===========\ \ ###### GET/notifier\ \ ###### **List all user-created notifiers**\ \ Get a list of all the notifiers that the user has created.\ \ ###### **Request URL**\ \ https://api.shodan.io/notifier?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/notifier?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "matches": [\ {\ "description": null,\ "args": {\ "to": "jmath@shodan.io"\ },\ "provider": "email",\ "id": "default"\ },\ ...\ ],\ "total": 2\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.notifier.list_notifiers())\ \ Response\ \ {\ "matches": [\ {\ "description": null,\ "args": {\ "to": "jmath@shodan.io"\ },\ "provider": "email",\ "id": "default"\ },\ ...\ ],\ "total": 2\ }\ \ ###### GET/notifier/provider\ \ ###### **List of available notification providers**\ \ Get a list of all the notification providers that are available and the parameters to submit when creating them.\ \ ###### **Request URL**\ \ https://api.shodan.io/notifier/provider?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/notifier/provider?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "pagerduty": {\ "required": [\ "routing_key"\ ]\ },\ "slack": {\ "required": [\ "webhook_url"\ ]\ },\ "telegram": {\ "required": [\ "chat_id",\ "token"\ ]\ },\ "webhook": {\ "required": [\ "url"\ ]\ },\ "phone": {\ "required": [\ "to"\ ]\ },\ "email": {\ "required": [\ "to"\ ]\ },\ "gitter": {\ "required": [\ "room_id",\ "token"\ ]\ }\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.notifier.list_providers())\ \ Response\ \ {\ "pagerduty": {\ "required": [\ "routing_key"\ ]\ },\ "slack": {\ "required": [\ "webhook_url"\ ]\ },\ "telegram": {\ "required": [\ "chat_id",\ "token"\ ]\ },\ "webhook": {\ "required": [\ "url"\ ]\ },\ "phone": {\ "required": [\ "to"\ ]\ },\ "email": {\ "required": [\ "to"\ ]\ },\ "gitter": {\ "required": [\ "room_id",\ "token"\ ]\ }\ }\ \ ###### POST/notifier\ \ ###### **Create a new notification service for the user**\ \ Use this method to create a new notification service endpoint that Shodan services can send notifications through.\ \ ###### **Request URL**\ \ https://api.shodan.io/notifier?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ The parameters depend on the type of notification service that is being created. To get a list of parameters for a provider us the /notifier/provider endpoint. The following parameters always need to be provided:\ \ * **provider:** \[String\] Provider name as returned by /notifier/provider\ * **description:** \[String\] Description of the notifier\ * **\*\*args:** \[String\] Arguments required by the provider\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X POST "https://api.shodan.io/notifier?key={YOUR_API_KEY}" -d 'provider=email' -d 'description=Email notifier' -d 'to=jmath@shodan.io'\ \ \ Response\ \ {\ "id": "1VxiaJb93Gn8TUnM",\ "success": true\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.notifier.create(provider='email', args={'to': 'jmath@shodan.io'}, description='Email notifier'))\ \ Response\ \ {\ "id": "1VxiaJb93Gn8TUnM",\ "success": True\ }\ \ ###### DELETE/notifier/{id}\ \ ###### **Delete a notification service**\ \ Remove the notification service created for the user.\ \ ###### **Request URL**\ \ https://api.shodan.io/notifier/{id}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **id:** \[String\] Notifier ID\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X DELETE "https://api.shodan.io/notifier/1VxiaJb93Gn8TUnM?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "success": true\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.notifier.remove(nid='1VxiaJb93Gn8TUnM'))\ \ Response\ \ {\ "success": True\ }\ \ ###### GET/notifier/{id}\ \ ###### **Get information about a notifier**\ \ Use this method to create a new notification service endpoint that Shodan services can send notifications through.\ \ ###### **Request URL**\ \ https://api.shodan.io/notifier/{id}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **id:** \[String\] Notifier ID\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/notifier/1VxiaJb93Gn8TUnM?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "description": "Email notifier",\ "args": {\ "to": "jmath@shodan.io"\ },\ "provider": "email",\ "id": "1VxiaJb93Gn8TUnM"\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.notifier.get(nid='1VxiaJb93Gn8TUnM'))\ \ Response\ \ {\ "description": "Email notifier",\ "args": {\ "to": "jmath@shodan.io"\ },\ "provider": "email",\ "id": "1VxiaJb93Gn8TUnM"\ }\ \ ###### PUT/notifier/{id}\ \ ###### **Edit a notifier**\ \ Use this method to update the parameters of a notifier.\ \ ###### **Request URL**\ \ https://api.shodan.io/notifier/{id}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ The parameters depend on the type of notification service that is being created. To get a list of parameters for a provider us the /notifier/provider endpoint.\ \ * **id:** \[String\] Notifier ID\ * **\*\*args:** \[String\] Arguments required by the provider\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X PUT "https://api.shodan.io/notifier/1VxiaJb93Gn8TUnM?key={YOUR_API_KEY}" -d 'to=jmath@gmail.com'\ \ \ Response\ \ {\ "id": "1VxiaJb93Gn8TUnM",\ "success": true\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.notifier.edit(nid='1VxiaJb93Gn8TUnM', args={'to': 'jmath@gmail.com'}))\ \ Response\ \ {\ "id": "1VxiaJb93Gn8TUnM",\ "success": true\ }\ \ _Directory_ Methods\ ===================\ \ ###### GET/shodan/query\ \ ###### **List the saved search queries**\ \ Use this method to obtain a list of search queries that users have saved in Shodan.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/query?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **page (optional):** \[Integer\] Page number to iterate over results; each page contains 10 items\ * **sort (optional):** \[String\] Sort the list based on a property. Possible values are: votes, timestamp\ * **order (optional):** \[String\] Whether to sort the list in ascending or descending order. Possible values are: asc, desc\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/query?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "matches": [\ {\ "votes": 1,\ "description": "Danieverton",\ "tags": [\ ""\ ],\ "timestamp": "2021-01-26T19:41:50.961000",\ "title": "ip camera",\ "query": "ip camera BR"\ },\ {\ "votes": 3,\ "description": "This is Moxa Nport Devices ICS system with Authentication disabled Author: A1C3VENOM",\ "tags": [\ "ics",\ "iot",\ "moxa"\ ],\ "timestamp": "2021-01-24T07:44:08.889000",\ "title": "Moxa Nport Devices with Authentication disabled",\ "query": "\"Moxa Nport Device\" Status: Authentication disabled port:\"4800\""\ },\ ...\ ],\ "total": 6746\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.queries(page=1, sort='timestamp', order='desc'))\ \ Response\ \ {\ "matches": [\ {\ "votes": 1,\ "description": "Danieverton",\ "tags": [\ ""\ ],\ "timestamp": "2021-01-26T19:41:50.961000",\ "title": "ip camera",\ "query": "ip camera BR",\ },\ {\ "votes": 3,\ "description": "This is Moxa Nport Devices ICS system with Authentication disabled Author: A1C3VENOM",\ "tags": [\ "ics",\ "iot",\ "moxa"\ ],\ "timestamp": "2021-01-24T07:44:08.889000",\ "title": "Moxa Nport Devices with Authentication disabled",\ "query": '"Moxa Nport Device" Status: Authentication disabled port: "4800"',\ },\ ...\ ],\ "total": 6746,\ }\ \ ###### GET/shodan/query/search\ \ ###### **Search the directory of saved search queries.**\ \ Use this method to search the directory of search queries that users have saved in Shodan.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/query/search?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **query:** \[String\] What to search for in the directory of saved search queries.\ * **page (optional):** \[Integer\] Page number to iterate over results; each page contains 10 items\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/query/search?query=webcam&key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "matches": [\ {\ "votes": 2,\ "description": "",\ "title": "Webcam",\ "timestamp": "2019-07-07T02:54:45.194000",\ "tags": [\ ""\ ],\ "query": "IP Webcam has_screenshot: -port:3269 -port:3288 -port:7000 -port:7001 -port:8000 country:\"KR\""\ },\ {\ "votes": 3,\ "description": "",\ "title": "webcam",\ "timestamp": "2020-10-08T14:54:14.599000",\ "tags": [\ ""\ ],\ "query": "Test org:\"Test\""\ },\ ...\ ],\ "total": 309\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.queries_search(query='webcam', page=1))\ \ Response\ \ {\ "matches": [\ {\ "votes": 2,\ "description": "",\ "title": "Webcam",\ "timestamp": "2019-07-07T02:54:45.194000",\ "tags": [\ ""\ ],\ "query": "IP Webcam has_screenshot: -port:3269 -port:3288 -port:7000 -port:7001 -port:8000 country:\"KR\""\ },\ {\ "votes": 3,\ "description": "",\ "title": "webcam",\ "timestamp": "2020-10-08T14:54:14.599000",\ "tags": [\ ""\ ],\ "query": "Test org:\"Test\""\ },\ ...\ ],\ "total": 309\ }\ \ ###### GET/shodan/query/tags\ \ ###### **List the most popular tags**\ \ Use this method to obtain a list of popular tags for the saved search queries in Shodan.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/query/tags?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **size (optional):** \[Integer\] The number of tags to return (default: 10).\ \ **Examples** cURL Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/query/tags?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "matches": [\ {\ "count": 209,\ "value": "webcam"\ },\ {\ "count": 172,\ "value": "cam"\ },\ {\ "count": 159,\ "value": "camera"\ },\ ...\ ],\ "total": 7580\ }\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.queries_tags(size=10))\ \ Response\ \ {\ "matches": [\ {\ "count": 209,\ "value": "webcam"\ },\ {\ "count": 172,\ "value": "cam"\ },\ {\ "count": 159,\ "value": "camera"\ },\ ...\ ],\ "total": 7580\ }\ \ _Bulk_ Data  **Enterprise**\ ===========================\ \ ###### GET/shodan/data\ \ ###### **Get a list of available datasets**\ \ Use this method to see a list of the datasets that are available for download.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/data?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/data?key={YOUR_API_KEY}"\ \ \ Response\ \ [\ {\ "scope": "monthly",\ "name": "country",\ "description": "Data broken down by country of the device"\ },\ {\ "scope": "daily",\ "name": "ships",\ "description": "AIS data from public receivers"\ },\ {\ "scope": "daily",\ "name": "ping",\ "description": "Ping sweeps of the entire IPv4 as well as statistical breakdown of devices by country"\ },\ {\ "scope": "monthly",\ "name": "dnsdb",\ "description": "DNS data for active domains on the Internet"\ },\ {\ "scope": "daily",\ "name": "raw-daily",\ "description": "Data files containing all the information collected during a day"\ }\ ]\ \ Request\ \ $ shodan data list\ \ \ Response\ \ country Data broken down by country of the device\ ships AIS data from public receivers\ ping Ping sweeps of the entire IPv4 as well as statistical breakdown of devices by country\ dnsdb DNS data for active domains on the Internet\ raw-daily Data files containing all the information collected during a day\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.data.list_datasets())\ \ Response\ \ [\ {\ "scope": "monthly",\ "name": "country",\ "description": "Data broken down by country of the device"\ },\ {\ "scope": "daily",\ "name": "ships",\ "description": "AIS data from public receivers"\ },\ {\ "scope": "daily",\ "name": "ping",\ "description": "Ping sweeps of the entire IPv4 as well as statistical breakdown of devices by country"\ },\ {\ "scope": "monthly",\ "name": "dnsdb",\ "description": "DNS data for active domains on the Internet"\ },\ {\ "scope": "daily",\ "name": "raw-daily",\ "description": "Data files containing all the information collected during a day"\ }\ ]\ \ ###### GET/shodan/data/{dataset}\ \ ###### **List the files for a dataset**\ \ Get a list of files that are available for download from the provided dataset.\ \ ###### **Request URL**\ \ https://api.shodan.io/shodan/data/{dataset}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **dataset:** \[String\] Name of the dataset\ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/shodan/data/raw-daily?key={YOUR_API_KEY}"\ \ \ Response\ \ [\ {\ "url": "https://...",\ "timestamp": 1611711401000,\ "sha1": "5a91f49c90da5ab8856c83c84846941115c55441",\ "name": "2021-01-26.json.gz",\ "size": 104650655998\ },\ {\ "url": "https://...",\ "timestamp": 1611655444000,\ "sha1": "ea29acc25fc154ac64dde0ab294824ae7f1f64c9",\ "name": "2021-01-25.json.gz",\ "size": 152517565458\ },\ {\ "url": "https://...",\ "timestamp": 1611540775000,\ "sha1": "aed18f2a952df7731fec447d81ead8a96907000d",\ "name": "2021-01-24.json.gz",\ "size": 161275556509\ },\ ...\ ]\ \ Request\ \ $ shodan data list --dataset raw-daily\ \ \ Response\ \ 2021-01-26.json.gz 97.5 GB 5a91f49c90da5ab8856c83c84846941115c55441 https://...\ 2021-01-25.json.gz 142.0 GB ea29acc25fc154ac64dde0ab294824ae7f1f64c9 https://...\ 2021-01-24.json.gz 150.2 GB aed18f2a952df7731fec447d81ead8a96907000d https://...\ ...\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.data.list_files(dataset='raw-daily'))\ \ Response\ \ [\ {\ "url": "https://...",\ "timestamp": 1611711401000,\ "sha1": "5a91f49c90da5ab8856c83c84846941115c55441",\ "name": "2021-01-26.json.gz",\ "size": 104650655998\ },\ {\ "url": "https://...",\ "timestamp": 1611655444000,\ "sha1": "ea29acc25fc154ac64dde0ab294824ae7f1f64c9",\ "name": "2021-01-25.json.gz",\ "size": 152517565458\ },\ {\ "url": "https://...",\ "timestamp": 1611540775000,\ "sha1": "aed18f2a952df7731fec447d81ead8a96907000d",\ "name": "2021-01-24.json.gz",\ "size": 161275556509\ },\ ...\ ]\ \ Manage _Organization_ **Enterprise**\ ====================================\ \ ###### GET/org\ \ ###### **General Information**\ \ Get information about your organization such as the list of its members, upgrades, authorized domains and more.\ \ ###### **Request URL**\ \ https://api.shodan.io/org?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/org?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "name": "Shodan Organization",\ "created": "2020-09-30T15:41:48.073000",\ "admins": [\ {\ "username": "admin",\ "email": "admin@shodan.io"\ }\ ],\ "members": [\ {\ "username": "member",\ "email": "member@shodan.io"\ }\ ],\ "upgrade_type": "stream-100",\ "domains": [\ "shodan.io"\ ],\ "logo": false,\ "id": "p3cEAmoDapAPeP7w"\ }\ \ Request\ \ $ shodan org info\ \ \ Response\ \ Shodan Organization\ Access Level: Enterprise\ Authorized Domains: shodan.io\ \ Administrators:\ > admin admin@shodan.io\ \ Members:\ > member member@shodan.io\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.org.info())\ \ Response\ \ {\ "name": "Shodan Organization",\ "created": "2020-09-30T15:41:48.073000",\ "admins": [\ {\ "username": "admin",\ "email": "admin@shodan.io"\ }\ ],\ "members": [\ {\ "username": "member",\ "email": "member@shodan.io"\ }\ ],\ "upgrade_type": "stream-100",\ "domains": [\ "shodan.io"\ ],\ "logo": false,\ "id": "p3cEAmoDapAPeP7w"\ }\ \ ###### PUT/org/member/{user}\ \ ###### **Add a new member**\ \ Add a Shodan user to the organization and upgrade them.\ \ ###### **Request URL**\ \ https://api.shodan.io/org/member/{user}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **user:** \[String\] Username or email of the Shodan user\ * **notify (optional):** \[Boolean\] Whether or not to send an email notification\ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X PUT "https://api.shodan.io/org/member/new-member@shodan.io?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "success": true\ }\ \ Request\ \ $ shodan org add new-member@shodan.io\ \ \ Response\ \ Successfully added the new member\ \ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.org.add_member(user='new-member@shodan.io', notify=True))\ \ Response\ \ True\ \ \ ###### DELETE/org/member/{user}\ \ ###### **Remove a member**\ \ Remove and downgrade the provided member from the organization.\ \ ###### **Request URL**\ \ https://api.shodan.io/org/member/{user}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **user:** \[String\] Username or email of the Shodan user\ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X DELETE "https://api.shodan.io/org/member/new-member@shodan.io?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "success": true\ }\ \ Request\ \ $ shodan org remove new-member@shodan.io\ \ \ Response\ \ Successfully removed the new member\ \ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.org.remove_member(user='new-member@shodan.io'))\ \ Response\ \ True\ \ \ _Account_ Methods\ =================\ \ ###### GET/account/profile\ \ ###### **Account Profile**\ \ Returns information about the Shodan account linked to this API key.\ \ ###### **Request URL**\ \ https://api.shodan.io/account/profile?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL\ \ Request\ \ $ curl -X GET "https://api.shodan.io/account/profile?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "member": true,\ "credits": 0,\ "display_name": null,\ "created": "2020-06-15T10:44:43.148000"\ }\ \ _DNS_Methods\ ============\ \ ###### GET/dns/domain/{domain}\ \ ###### **Domain Information**\ \ Get all the subdomains and other DNS entries for the given domain. Uses 1 query credit per lookup.\ \ ###### **Request URL**\ \ https://api.shodan.io/dns/domain/{domain}?key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **domain:** \[String\] Domain name to lookup; example "cnn.com"\ * **history (optional):** \[Boolean\] True if historical DNS data should be included in the results (default: False)\ * **type (optional):** \[String\] DNS type, possible values are: A, AAAA, CNAME, NS, SOA, MX, TXT\ * **page (optional):** \[Integer\] The page number to page through results 100 at a time (default: 1)\ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/dns/domain/google.com?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "domain": "google.com",\ "tags": [\ "ipv6"\ ],\ "data": [\ {\ "subdomain": "",\ "type": "MX",\ "value": "aspmx.l.google.com",\ "last_seen": "2021-01-19T22:23:15.978799+00:00"\ },\ {\ "subdomain": "*.auth.corp",\ "type": "CNAME",\ "value": "uberproxy.l.google.com",\ "last_seen": "2021-01-26T13:04:34.018114+00:00"\ },\ {\ "subdomain": "*.cloud.sandbox",\ "type": "A",\ "value": "74.125.142.81",\ "last_seen": "2021-01-15T12:57:18.133727+00:00"\ },\ ...\ ],\ "subdomains": [\ "*.auth.corp",\ "*.cloud.sandbox",\ "*.composer-staging.cloud",\ ...\ ],\ "more": true\ }\ \ Request\ \ $ shodan domain google.com\ \ \ Response\ \ GOOGLE.COM\ \ MX aspmx.l.google.com\ *.auth.corp CNAME uberproxy.l.google.com\ *.cloud.sandbox A 74.125.142.81\ *.composer-staging.cloud CNAME www3.l.google.com\ ...\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.dns.domain_info(domain='google.com', history=False, type=None, page=1))\ \ Response\ \ {\ "domain": "google.com",\ "tags": [\ "ipv6"\ ],\ "data": [\ {\ "subdomain": "",\ "type": "MX",\ "value": "aspmx.l.google.com",\ "last_seen": "2021-01-19T22:23:15.978799+00:00"\ },\ {\ "subdomain": "*.auth.corp",\ "type": "CNAME",\ "value": "uberproxy.l.google.com",\ "last_seen": "2021-01-26T13:04:34.018114+00:00"\ },\ {\ "subdomain": "*.cloud.sandbox",\ "type": "A",\ "value": "74.125.142.81",\ "last_seen": "2021-01-15T12:57:18.133727+00:00"\ },\ ...\ ],\ "subdomains": [\ "*.auth.corp",\ "*.cloud.sandbox",\ "*.composer-staging.cloud",\ ...\ ],\ "more": true\ }\ \ ###### GET/dns/resolve\ \ ###### **DNS Lookup**\ \ Look up the IP address for the provided list of hostnames.\ \ ###### **Request URL**\ \ https://api.shodan.io/dns/resolve?hostnames={hostnames}&key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **hostnames:** \[String\] Comma-separated list of hostnames; example "google.com,bing.com"\ \ **Examples** cURL\ \ Request\ \ $ curl -X GET "https://api.shodan.io/dns/resolve?hostnames=google.com,facebook.com&key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "google.com": "172.217.6.46",\ "facebook.com": "157.240.22.35"\ }\ \ ###### GET/dns/reverse\ \ ###### **Reverse DNS Lookup**\ \ Look up the hostnames that have been defined for the given list of IP addresses.\ \ ###### **Request URL**\ \ https://api.shodan.io/dns/reverse?ips={ips}&key={YOUR_API_KEY}\ \ ###### **Parameters**\ \ * **ips:** \[String\] Comma-separated list of IP addresses; example "74.125.227.230,204.79.197.200"\ \ **Examples** cURL\ \ Request\ \ $ curl -X GET "https://api.shodan.io/dns/reverse?ips=8.8.8.8,1.1.1.1&key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "8.8.8.8": [\ "dns.google"\ ],\ "1.1.1.1": [\ "one.one.one.one"\ ]\ }\ \ _Utility_ Methods\ =================\ \ ###### GET/tools/httpheaders\ \ ###### **HTTP Headers**\ \ Shows the HTTP headers that your client sends when connecting to a webserver.\ \ ###### **Request URL**\ \ https://api.shodan.io/tools/httpheaders?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL\ \ Request\ \ $ curl -X GET "https://api.shodan.io/tools/httpheaders?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "Content-Length": "",\ "Cf-Visitor": "{\"scheme\":\"https\"}",\ "Accept-Encoding": "gzip",\ "X-Forwarded-For": "113.161.57.41",\ "Host": "api.shodan.io",\ "Cf-Request-Id": "07e880ae180000d1cfb309a000000001",\ "User-Agent": "curl/7.64.1",\ "Connection": "Keep-Alive",\ "X-Forwarded-Proto": "https",\ "Accept": "*/*",\ "Cdn-Loop": "cloudflare",\ "Cf-Connecting-Ip": "113.161.57.41",\ "Cf-Ray": "61876a29cdf8d1cf-DFW",\ "Content-Type": ""\ }\ \ ###### GET/tools/myip\ \ ###### **My IP Address**\ \ Get your current IP address as seen from the Internet.\ \ ###### **Request URL**\ \ https://api.shodan.io/tools/myip?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL\ \ Request\ \ $ curl -X GET "https://api.shodan.io/tools/myip?key={YOUR_API_KEY}"\ \ \ Response\ \ "113.161.57.41"\ \ \ _API Status_ Methods\ ====================\ \ ###### GET/api-info\ \ ###### **API Plan Information**\ \ Returns information about the API plan belonging to the given API key.\ \ ###### **Request URL**\ \ https://api.shodan.io/api-info?key={YOUR_API_KEY}\ \ \ \ **Examples** cURL Shodan CLI Python\ \ Request\ \ $ curl -X GET "https://api.shodan.io/api-info?key={YOUR_API_KEY}"\ \ \ Response\ \ {\ "scan_credits": 100000,\ "usage_limits": {\ "scan_credits": -1,\ "query_credits": -1,\ "monitored_ips": -1\ },\ "plan": "stream-100",\ "https": false,\ "unlocked": true,\ "query_credits": 100000,\ "monitored_ips": 19,\ "unlocked_left": 100000,\ "telnet": false\ }\ \ Request\ \ $ shodan info\ \ \ Response\ \ Query credits available: 100000\ Scan credits available: 100000\ \ Request\ \ from shodan import Shodan\ \ api = Shodan('{YOUR_API_KEY}')\ print(api.info())\ \ Response\ \ {\ "scan_credits": 100000,\ "usage_limits": {\ "scan_credits": -1,\ "query_credits": -1,\ "monitored_ips": -1\ },\ "plan": "stream-100",\ "https": False,\ "unlocked": True,\ "query_credits": 100000,\ "monitored_ips": 19,\ "unlocked_left": 100000,\ "telnet": False,\ }\ \ _Error_ Handling\ ================\ \ A non-200 status code in the response indicates an error occurred. Along with a non-200 error code, the error response will also include a message containing the reason for the failure.\ \ ###### **Sample Response**\ \ {\ "error": "Invalid IP"\ }\ \ [Next: Streaming API Documentation](https://developer.shodan.io/api/stream)\ \ \ \ \ \ \ ###### Products\ \ * [Monitor](https://monitor.shodan.io/)\ \ * [Search Engine](https://beta.shodan.io/)\ \ * [Developer API](https://developer.shodan.io/)\ \ * [Maps](https://maps.shodan.io/)\ \ \ * [Bulk Data](https://enterprise.shodan.io/)\ \ * [Images](https://images.shodan.io/)\ \ * [Snippets](https://snippets.shodan.io/)\ \ \ ###### Pricing\ \ * [Membership](https://www.shodan.io/store/member)\ \ * [API Subscriptions](https://developer.shodan.io/pricing)\ \ * [Enterprise](https://enterprise.shodan.io/)\ \ \ ###### Contact Us\ \ * [support@shodan.io](mailto:support@shodan.io)\ \ * ##### [](https://twitter.com/shodanhq)\   [](https://www.linkedin.com/company/shodan)\   [](https://www.facebook.com/shodan.io)\ \ \ Shodan ® - All rights reserved --- # Shodan Developer * [Shodan](https://www.shodan.io/) * [Maps](https://maps.shodan.io/) * [Images](https://images.shodan.io/) * [Monitor](https://monitor.shodan.io/) * [More...](https://www.shodan.io/about/products) ### API Reference _API_ Documentation =================== 1. [Requirements](https://developer.shodan.io/api/requirements) 2. [Introduction](https://developer.shodan.io/api/introduction) 3. [Clients](https://developer.shodan.io/api/clients) 4. [REST API Documentation](https://developer.shodan.io/api) 5. [Streaming API Documentation](https://developer.shodan.io/api/stream) 6. [Trends API Documentation](https://developer.shodan.io/api/trends) _Appendix_ ========== 1. [Banner Specification](https://datapedia.shodan.io/) 2. [Search Filters](https://www.shodan.io/search/filters) To use the API you need to have an API key, which you can get for free by creating a Shodan account. [Create a Shodan account](https://account.shodan.io/register) This documentation covers the raw APIs that are provided by Shodan, you should only have to use this if no library is available in your language that wraps the Shodan API in a developer-friendly way. [Next: Introduction](https://developer.shodan.io/api/introduction) ###### Products * [Monitor](https://monitor.shodan.io/) * [Search Engine](https://beta.shodan.io/) * [Developer API](https://developer.shodan.io/) * [Maps](https://maps.shodan.io/) * [Bulk Data](https://enterprise.shodan.io/) * [Images](https://images.shodan.io/) * [Snippets](https://snippets.shodan.io/) ###### Pricing * [Membership](https://www.shodan.io/store/member) * [API Subscriptions](https://developer.shodan.io/pricing) * [Enterprise](https://enterprise.shodan.io/) ###### Contact Us * [support@shodan.io](mailto:support@shodan.io) * ##### [](https://twitter.com/shodanhq)   [](https://www.linkedin.com/company/shodan)   [](https://www.facebook.com/shodan.io) Shodan ® - All rights reserved --- # Shodan Developer * [Shodan](https://www.shodan.io/) * [Maps](https://maps.shodan.io/) * [Images](https://images.shodan.io/) * [Monitor](https://monitor.shodan.io/) * [More...](https://www.shodan.io/about/products) ### API Reference _API_ Documentation =================== 1. [Requirements](https://developer.shodan.io/api/requirements) 2. [Introduction](https://developer.shodan.io/api/introduction) 3. [Clients](https://developer.shodan.io/api/clients) 4. [REST API Documentation](https://developer.shodan.io/api) 5. [Streaming API Documentation](https://developer.shodan.io/api/stream) 6. [Trends API Documentation](https://developer.shodan.io/api/trends) _Appendix_ ========== 1. [Banner Specification](https://datapedia.shodan.io/) 2. [Search Filters](https://www.shodan.io/search/filters) There are 2 APIs for accessing Shodan: * **The REST API:** provides methods to search Shodan, look up hosts, get summary information on queries and a variety of utility methods to make developing easier. * **The Streaming API:** provides a raw, real-time feed of the data that Shodan is currently collecting. There are several feeds that can be subscribed to, but the data can't be searched or otherwise interacted with; it's a live feed of data meant for large-scale consumption of Shodan's information. [Next: Clients](https://developer.shodan.io/api/clients) ###### Products * [Monitor](https://monitor.shodan.io/) * [Search Engine](https://beta.shodan.io/) * [Developer API](https://developer.shodan.io/) * [Maps](https://maps.shodan.io/) * [Bulk Data](https://enterprise.shodan.io/) * [Images](https://images.shodan.io/) * [Snippets](https://snippets.shodan.io/) ###### Pricing * [Membership](https://www.shodan.io/store/member) * [API Subscriptions](https://developer.shodan.io/pricing) * [Enterprise](https://enterprise.shodan.io/) ###### Contact Us * [support@shodan.io](mailto:support@shodan.io) * ##### [](https://twitter.com/shodanhq)   [](https://www.linkedin.com/company/shodan)   [](https://www.facebook.com/shodan.io) Shodan ® - All rights reserved --- # Unknown ```json { "openapi": "3.0.0", "info": { "title": "Shodan REST API Documentation", "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account. \n \n[CREATE A SHODAN ACCOUNT](https://account.shodan.io/register)\n\nThis documentation covers the raw APIs that are provided by Shodan, you should only have to use this if no library is available in your language that wraps the Shodan API in a developer-friendly way.", "version": "1.0.0" }, "servers": [ { "url": "https://api.shodan.io" } ], "tags": [ { "name": "Search Methods" }, { "name": "On-Demand Scanning" }, { "name": "Network Alerts" }, { "name": "Notifiers" }, { "name": "Directory Methods" }, { "name": "Bulk Data (Enterprise)" }, { "name": "Manage Organization (Enterprise)" }, { "name": "Account Methods" }, { "name": "DNS Methods" }, { "name": "Utility Methods" }, { "name": "API Status Methods" } ], "paths": { "/shodan/host/{ip}": { "get": { "operationId": "hostInformation", "tags": ["Search Methods"], "summary": "Host Information", "description": "Returns all services that have been found on the given host IP.", "security": [], "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "history", "in": "query", "schema": { "type": "boolean" }, "description": "True if all historical banners should be returned (default: False).", "example": "false" }, { "name": "minify", "in": "query", "schema": { "type": "boolean" }, "description": "True to only return the list of ports and the general host information, no banners. (default: False).", "example": "false" }, { "name": "ip", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Host IP address", "example": "8.8.8.8" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "region_code": null, "ip": 134744072, "postal_code": null, "country_code": "US", "city": null, "dma_code": null, "last_update": "2021-01-22T08:49:35.190817", "latitude": 37.751, "tags": [], "area_code": null, "country_name": "United States", "hostnames": ["dns.google"], "org": "Google", "data": [ { "_shodan": { "id": "cea5795b-55fd-4595-b9e5-ad5ca847cb4b", "options": {}, "ptr": true, "module": "dns-udp", "crawler": "ac284849be0745621b3c518f74c14cf43cafbf08" }, "hash": -553166942, "os": null, "opts": { "raw": "34ef818200010000000000000776657273696f6e0462696e640000100003" }, "ip": 134744072, "isp": "Google", "port": 53, "hostnames": ["dns.google"], "location": { "city": null, "region_code": null, "area_code": null, "longitude": -97.822, "country_code3": null, "country_name": "United States", "postal_code": null, "dma_code": null, "country_code": "US", "latitude": 37.751 }, "dns": { "resolver_hostname": null, "recursive": true, "resolver_id": null, "software": null }, "timestamp": "2021-01-22T08:49:35.190817", "domains": ["dns.google"], "org": "Google", "data": "\nRecursion: enabled", "asn": "AS15169", "transport": "udp", "ip_str": "8.8.8.8" } ], "asn": "AS15169", "isp": "Google", "longitude": -97.822, "country_code3": null, "domains": ["dns.google"], "ip_str": "8.8.8.8", "os": null, "ports": [53] } } } }, "404": { "description": "Not Found", "content": { "application/json": { "schema": { "type": "object" }, "example": { "error": "Invalid IP" } } } } } } }, "/shodan/host/count": { "get": { "operationId": "searchHostCount", "tags": ["Search Methods"], "summary": "Search Shodan without Results", "description": "This method behaves identical to \"/shodan/host/search\" with the only difference that this method does not return any host results, it only returns the total number of results that matched the query and any facet information that was requested. As a result this method does not consume query credits.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "query", "required": true, "in": "query", "schema": { "type": "string" }, "description": "Shodan search query. The provided string is used to search the database of banners in Shodan, with the additional option to provide filters inside the search query using a \"filter:value\" format. For example, the following search query would find Apache Web servers located in Germany: \"apache country:DE\". [List of Filters](https://www.shodan.io/search/filters)", "example": "port:22" }, { "name": "facets", "in": "query", "schema": { "type": "string" }, "description": "A comma-separated list of properties to get summary information on. Property names can also be in the format of \"property:count\", where \"count\" is the number of facets that will be returned for a property (i.e. \"country:100\" to get the top 100 countries for a search query). Visit the Shodan website's Facet Analysis page for an up-to-date list of available facets: [Explore Facets](https://beta.shodan.io/search/facet)", "example": "org,os" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "matches": [], "facets": { "org": [ { "count": 3012386, "value": "Amazon.com" }, { "count": 1322102, "value": "Google Cloud" }, { "count": 1075807, "value": "Digital Ocean" }, { "count": 687155, "value": "OVH SAS" }, { "count": 450521, "value": "Tencent cloud computing" } ], "os": [ { "count": 601923, "value": "Ubuntu" }, { "count": 227851, "value": "Debian" }, { "count": 7660, "value": "Raspbian" } ] }, "total": 19590274 } } } } } } }, "/shodan/host/search": { "get": { "operationId": "searchHost", "tags": ["Search Methods"], "summary": "Search Shodan", "description": "Search Shodan using the same query syntax as the website and use facets to get summary information for different properties.\n\n## **Requirements**\n\nThis method may use API query credits depending on usage. If any of the following criteria are met, your account will be deducted 1 query credit:\n\n1. The search query contains a filter.\n2. Accessing results past the 1st page using the \"page\". For every 100 results past the 1st page 1 query credit is deducted.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "query", "required": true, "in": "query", "schema": { "type": "string" }, "description": "Shodan search query. The provided string is used to search the database of banners in Shodan, with the additional option to provide filters inside the search query using a \"filter:value\" format. For example, the following search query would find Apache Web servers located in Germany: \"apache country:DE\".", "example": "port:22" }, { "name": "facets", "in": "query", "schema": { "type": "string" }, "description": "A comma-separated list of properties to get summary information on. Property names can also be in the format of \"property:count\", where \"count\" is the number of facets that will be returned for a property (i.e. \"country:100\" to get the top 100 countries for a search query). Visit the Shodan website's Facet Analysis page for an up-to-date list of available facets:", "example": "org,os" }, { "name": "page", "in": "query", "schema": { "type": "integer" }, "description": "The page number to page through results 100 at a time (default: 1)", "example": "1" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "matches": [ { "product": "nginx", "hash": -1609083510, "ip": 1616761883, "org": "Comcast Business", "isp": "Comcast Business", "transport": "tcp", "cpe": ["cpe:/a:igor_sysoev:nginx"], "data": "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Mon, 25 Jan 2021 21:33:48 GMT\r\nContent-Type: text/html\r\nContent-Length: 650\r\nConnection: close\r\n\r\n", "asn": "AS7922", "port": 443, "hostnames": ["three.webapplify.net"], "location": { "city": "Denver", "region_code": "CO", "area_code": null, "longitude": -104.9078, "country_code3": null, "latitude": 39.7301, "postal_code": null, "dma_code": 751, "country_code": "US", "country_name": "United States" }, "timestamp": "2021-01-25T21:33:49.154513", "domains": ["webapplify.net"], "http": { "robots_hash": null, "redirects": [], "securitytxt": null, "title": "400 The plain HTTP request was sent to HTTPS port", "sitemap_hash": null, "robots": null, "server": "nginx", "host": "96.93.212.27", "html": "\r\n400 The plain HTTP request was sent to HTTPS port\r\n\r\n400 Bad Request\r\nThe plain HTTP request was sent to HTTPS port\r\nnginx\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n", "location": "/", "components": {}, "securitytxt_hash": null, "sitemap": null, "html_hash": 199333125 }, "os": null, "_shodan": { "crawler": "c9b639b99e5410a46f656e1508a68f1e6e5d6f99", "ptr": true, "id": "534cc127-e734-44bc-be88-2e219a56a099", "module": "auto", "options": {} }, "ip_str": "96.93.212.27" }, { "product": "nginx", "hostnames": ["kolobok.us"], "hash": 1940048442, "ip": 3104568883, "org": "RuWeb", "isp": "RuWeb", "transport": "tcp", "cpe": ["cpe:/a:igor_sysoev:nginx:1.4.2"], "data": "HTTP/1.1 410 Gone\r\nServer: nginx/1.4.2\r\nDate: Mon, 25 Jan 2021 21:33:50 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 295\r\nConnection: keep-alive\r\n\r\n", "asn": "AS49189", "port": 80, "version": "1.4.2", "location": { "city": null, "region_code": null, "area_code": null, "longitude": 37.6068, "country_code3": null, "latitude": 55.7386, "postal_code": null, "dma_code": null, "country_code": "RU", "country_name": "Russia" }, "timestamp": "2021-01-25T21:33:51.172037", "domains": ["kolobok.us"], "http": { "robots_hash": null, "redirects": [], "securitytxt": null, "title": "410 Gone", "sitemap_hash": null, "robots": null, "server": "nginx/1.4.2", "host": "185.11.246.51", "html": "\n\n410 Gone\n\nGone\nThe requested resource/\nis no longer available on this server and there is no forwarding address.\nPlease remove all references to this resource.\n\n", "location": "/", "components": {}, "securitytxt_hash": null, "sitemap": null, "html_hash": 922034037 }, "os": null, "_shodan": { "crawler": "c9b639b99e5410a46f656e1508a68f1e6e5d6f99", "ptr": true, "id": "118b7360-01d0-4edb-8ee9-01e411c23e60", "module": "auto", "options": {} }, "ip_str": "185.11.246.51" } ], "facets": { "country": [ { "count": 7883733, "value": "US" }, { "count": 2964965, "value": "CN" }, { "count": 1945369, "value": "DE" }, { "count": 1717359, "value": "HK" }, { "count": 940900, "value": "FR" } ] }, "total": 23047224 } } } } } } }, "/shodan/host/search/facets": { "get": { "operationId": "listSearchFacets", "tags": ["Search Methods"], "summary": "List all search facets", "description": "This method returns a list of facets that can be used to get a breakdown of the top values for a property.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": ["asn", "bitcoin.ip", "bitcoin.ip_count", "..."] } } } } } }, "/shodan/host/search/filters": { "get": { "operationId": "listSearchFilters", "tags": ["Search Methods"], "summary": "List all filters that can be used when searching", "description": "This method returns a list of search filters that can be used in the search query.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": [ "all", "asn", "bitcoin.ip", "bitcoin.ip_count", "..." ] } } } } } }, "/shodan/host/search/tokens": { "get": { "operationId": "listSearchTokens", "tags": ["Search Methods"], "summary": "Break the search query into tokens", "description": "This method lets you determine which filters are being used by the query string and what parameters were provided to the filters.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "query", "required": true, "in": "query", "schema": { "type": "string" }, "description": "Shodan search query. The provided string is used to search the database of banners in Shodan, with the additional option to provide filters inside the search query using a \"filter:value\" format. For example, the following search query would find Apache Web servers located in Germany: \"apache country:DE\".", "example": "Raspbian port:22" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "attributes": { "ports": [22] }, "errors": [], "string": "Raspbian", "filters": ["port"] } } } } } } }, "/shodan/ports": { "get": { "operationId": "listAllPorts", "tags": ["On-Demand Scanning"], "summary": "List all ports that Shodan is crawling on the Internet.", "description": "This method returns a list of port numbers that the crawlers are looking for.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": [7, 11, 13, 15] } } } } } }, "/shodan/protocols": { "get": { "operationId": "listAllProtocols", "tags": ["On-Demand Scanning"], "summary": "List all protocols that can be used when performing on-demand Internet scans via Shodan", "description": "This method returns an object containing all the protocols that can be used when launching an Internet scan.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "afp": "AFP server information grabbing module", "ajp": "Check whether the Tomcat server running AJP protocol", "amqp": "Grab information from an AMQP service" } } } } } } }, "/shodan/scan": { "post": { "operationId": "requestScan", "tags": ["On-Demand Scanning"], "summary": "Request Shodan to crawl an IP/ netblock", "description": "Use this method to request Shodan to crawl a network.\n\n## **Requirements**\n\nThis method uses API scan credits: 1 IP consumes 1 scan credit. You must have a paid API plan (either one-time payment or subscription) in order to use this method.", "requestBody": { "content": { "application/x-www-form-urlencoded": { "schema": { "properties": { "ips": { "type": "number", "description": "- A comma-separated list of IPs or netblocks (in CIDR notation) that should get crawled.\n- A list of services that should get scanned, where a service is defined as a [port, protocol].", "example": "8.8.8.8,1.1.1.1" } } } } } }, "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "examples": { "example-0": { "summary": "Request Shodan to crawl an IP/ netblock", "value": { "count": 1, "id": "3bPx0St3TvEHr24Y", "credits_left": 100000 } }, "example-1": { "summary": "Request Shodan to crawl an IP/ netblock", "value": { "count": 2, "id": "0lFnrjdEWW05QvUQ", "credits_left": 100000 } } } } } } } } }, "/shodan/scan/internet": { "post": { "operationId": "scanInternet", "tags": ["On-Demand Scanning"], "summary": "Crawl the Internet for a specific port and protocol using Shodan", "description": "Use this method to request Shodan to crawl the Internet for a specific port.\n\n## **Requirements**\n\nThis method is restricted to security researchers and companies with a Shodan Enterprise Data license. To apply for access to this method as a researcher, please email [jmath@shodan.io](mailto:jmath@shodan.io) with information about your project. Access is restricted to prevent abuse.", "requestBody": { "content": { "application/x-www-form-urlencoded": { "schema": { "properties": { "port": { "type": "integer", "description": "The port that Shodan should crawl the Internet for", "example": "80" }, "protocol": { "type": "string", "description": "he name of the protocol that should be used to interrogate the port. See /shodan/protocols for a list of supported protocols", "example": "http" } } } } } }, "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "id": "DQdcm6QYgENbGj0R" } } } } } } }, "/shodan/scans": { "get": { "operationId": "listScans", "tags": ["On-Demand Scanning"], "summary": "Get list of all the created scans", "description": "Returns a listing of all the on-demand scans that are currently active on the account.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "matches": [ { "status": "PROCESSING", "created": "2021-01-26T08:17:43.794000", "status_check": "2021-01-26T08:17:43.900000", "credits_left": 100000, "api_key": "toH56DpDulOnvyxLhOSIxaUgZQeg1gFX", "id": "Mo8W7itcWumiy9Ay", "size": 1 }, { "status": "DONE", "created": "2021-01-26T08:08:26.296000", "status_check": "2021-01-26T08:09:39.636000", "credits_left": 100000, "api_key": "toH56DpDulOnvyxLhOSIxaUgZQeg1gFX", "id": "04GjMnUkQx9HsFhA", "size": 1 } ], "total": 19 } } } } } } }, "/shodan/scans/{id}": { "get": { "operationId": "getScanStatus", "tags": ["On-Demand Scanning"], "summary": "Get the status of a scan request", "description": "Check the progress of a previously submitted scan request. Possible values for the status are:\n\n- SUBMITTING\n- QUEUE\n- PROCESSING\n- DONE", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "The unique scan ID that was returned by /shodan/scan.", "example": "DQdcm6QYgENbGj0R" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "schema": { "type": "object" }, "example": { "count": 1, "status": "DONE", "id": "Mo8W7itcWumiy9Ay", "created": "2021-01-26T08:17:43.794000" } } } } } } }, "/shodan/alert": { "post": { "operationId": "createAlert", "tags": ["Network Alerts"], "summary": "Create an alert to monitor a network range", "description": "Use this method to create a network alert for a defined IP/ netblock which can be used to subscribe to changes/ events that are discovered within that range.\n\n## **Parameters**\n\nThe alert is created by sending a JSON encoded object that has the structure:\n\n``` json\n{\n \"name\": {name},\n \"filters\": {\n \"ip\": {ip},\n },\n \"expires\": {expires},\n}\n```\n\n- **name:** \\[String\\] The name to describe the network alert.\n- **filters:** \\[Object\\] An object specifying the criteria that an alert should trigger. The only supported option at the moment is the \"ip\" filter.\n- **filters.ip:** \\[String\\] A list of IPs or network ranges defined using CIDR notation.\n- **expires (optional):** \\[Integer\\] Number of seconds that the alert should be active.", "requestBody": { "content": { "application/json": { "schema": { "type": "object", "example": { "name": "DNS Alert", "filters": { "ip": ["8.8.8.8", "1.1.1.1"] }, "expires": 0 } } } } }, "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "name": "DNS Alert", "created": "2021-01-27T03:44:22.989575", "triggers": {}, "has_triggers": false, "expires": 0, "expiration": null, "filters": { "ip": ["8.8.8.8", "1.1.1.1"] }, "id": "OYPRB8IR9Z35AZPR", "size": 2 } } } } } } }, "/shodan/alert/{id}/info": { "get": { "operationId": "getAlertInfo", "tags": ["Network Alerts"], "summary": "Get the details for a network alert", "description": "Returns the information about a specific network alert.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Alert ID", "example": "0DC55K0N2HHZS3D1" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "name": "DNS Alert", "created": "2021-01-27T03:50:24.277000", "triggers": {}, "has_triggers": false, "expires": 0, "notify": {}, "expiration": null, "filters": { "ip": ["8.8.8.8", "1.1.1.1"] }, "notifiers": [], "id": "67UQ4JM3NGJKROR9", "size": 2 } } } } } } }, "/shodan/alert/{id}": { "delete": { "operationId": "deleteAlert", "tags": ["Network Alerts"], "summary": "Delete an alert", "description": "Remove the specified network alert.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Alert ID", "example": "AIW105ULY10RKIHX" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "success": true } } } } } }, "post": { "operationId": "editAlert", "tags": ["Network Alerts"], "summary": "Edit the networks monitored in an alert", "description": "Use this method to edit a network alert with a new list of IPs/ networks to keep track of.\n\n## **Parameters**\n\nThe alert is edited by sending a JSON encoded object that has the structure:\n\n``` json\n{\n \"filters\": {\n \"ip\": {ip},\n },\n}\n```\n\n- **filters:** \\[Object\\] An object specifying the criteria that an alert should trigger. The only supported option at the moment is the \"ip\" filter.\n- **filters.ip:** \\[String\\] A list of IPs or network ranges defined using CIDR notation.", "requestBody": { "content": { "application/json": { "schema": { "type": "object", "example": { "filters": { "ip": ["8.8.8.8", "1.1.1.1"] } } } } } }, "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "example": "0DC55K0N2HHZS3D1" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "name": "DNS Alert", "created": "2021-01-27T03:44:22.989575", "triggers": {}, "has_triggers": false, "expires": 0, "expiration": null, "filters": { "ip": ["8.8.8.8", "1.1.1.1"] }, "id": "67UQ4JM3NGJKROR9", "size": 2 } } } } } } }, "/shodan/alert/info": { "get": { "operationId": "getAlertsInfo", "tags": ["Network Alerts"], "summary": "Get a list of all the created alerts", "description": "Returns a listing of all the network alerts that are currently active on the account.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": [ { "name": "DNS Alert", "created": "2021-01-27T03:44:22.989000", "triggers": {}, "has_triggers": false, "expires": 0, "notify": {}, "expiration": null, "filters": { "ip": ["8.8.8.8", "1.1.1.1"] }, "notifiers": [], "id": "OYPRB8IR9Z35AZPR", "size": 2 }, { "name": "Google DNS Alert", "created": "2021-01-27T03:42:50.908000", "triggers": {}, "has_triggers": false, "expires": 0, "notify": {}, "expiration": null, "filters": { "ip": ["8.8.8.8"] }, "notifiers": [], "id": "RIO8WNQZMI4ZQXW6", "size": 1 } ] } } } } } }, "/shodan/alert/triggers": { "get": { "operationId": "listTriggers", "tags": ["Network Alerts"], "summary": "Get a list of available triggers", "description": "Returns a list of all the triggers that can be enabled on network alerts.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": [ { "name": "any", "rule": "*", "description": "Match any service that is discovered" }, { "name": "industrial_control_system", "rule": "tag:ics", "description": "Services associated with industrial control systems" }, { "name": "malware", "rule": "tag:compromised,malware", "description": "Compromised or malware-related services" }, { "name": "uncommon", "rule": "-port:22,80,443,7547", "description": "Services that generally shouldn't be publicly available" } ] } } } } } }, "/shodan/alert/{id}/trigger/{trigger}": { "put": { "operationId": "enableTrigger", "tags": ["Network Alerts"], "summary": "Enable a trigger", "description": "Get notifications when the specified trigger is met.", "requestBody": { "content": {} }, "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Alert ID", "example": "0DC55K0N2HHZS3D1" }, { "name": "trigger", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of trigger names", "example": "open_database,iot" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "success": true } } } } } }, "delete": { "operationId": "disableTrigger", "tags": ["Network Alerts"], "summary": "Disable a trigger", "description": "Stop getting notifications for the specified trigger.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Alert ID", "example": "0DC55K0N2HHZS3D1" }, { "name": "trigger", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of trigger names", "example": "open_database,iot" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "success": true } } } } } } }, "/shodan/alert/{id}/trigger/{trigger}/ignore/{service}": { "put": { "operationId": "addToWhitelist", "tags": ["Network Alerts"], "summary": "Add to Whitelist", "description": "Ignore the specified service when it is matched for the trigger.", "requestBody": { "content": {} }, "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Alert ID", "example": "0DC55K0N2HHZS3D1" }, { "name": "trigger", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of trigger names", "example": "open_database,iot" }, { "name": "service", "in": "path", "schema": { "type": "number" }, "required": true, "description": "Service specified in the format \"ip:port\" (ex. \"1.1.1.1:80\")", "example": "1.1.1.1:53" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "success": true } } } } } }, "delete": { "operationId": "removeFromWhitelist", "tags": ["Network Alerts"], "summary": "Remove from Whitelist", "description": "Start getting notifications again for the specified trigger.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Alert ID", "example": "G20GRU32X1R6AYTB" }, { "name": "trigger", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of trigger names", "example": "open_database,iot" }, { "name": "service", "in": "path", "schema": { "type": "number" }, "required": true, "description": "Service specified in the format \"ip:port\" (ex. \"1.1.1.1:80\")", "example": "1.1.1.1:53" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": {} } } } } }, "/shodan/alert/{id}/notifier/{notifier_id}": { "put": { "operationId": "addNotifier", "tags": ["Network Alerts"], "summary": "Add the notifier to the alert", "description": "Add the specified notifier to the network alert. Notifications are only sent if triggers have also been enabled. For each created user, there is a **default** notifier which will sent via email.", "requestBody": { "content": {} }, "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Alert ID", "example": "G20GRU32X1R6AYTB" }, { "name": "notifier_id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Notifier ID" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "success": true } } } } } }, "delete": { "operationId": "removeNotifier", "tags": ["Network Alerts"], "summary": "Remove the notifier from the alert", "description": "Remove the notification service from the alert. Notifications are only sent if triggers have also been enabled.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Alert ID", "example": "G20GRU32X1R6AYTB" }, { "name": "notifier_id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Notifier ID" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "success": true } } } } } } }, "/notifier": { "get": { "operationId": "listNotifiers", "tags": ["Notifiers"], "summary": "List all user-created notifiers", "description": "Get a list of all the notifiers that the user has created.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "matches": [ { "description": null, "args": { "to": "jmath@shodan.io" }, "provider": "email", "id": "default" } ], "total": 2 } } } } } }, "post": { "operationId": "createNotifier", "tags": ["Notifiers"], "summary": "Create a new notification service for the user", "description": "Use this method to create a new notification service endpoint that Shodan services can send notifications through.", "requestBody": { "content": { "application/x-www-form-urlencoded": { "schema": { "properties": { "provider": { "type": "string", "description": "Provider name as returned by /notifier/provider", "example": "email" }, "description": { "type": "string", "description": "Description of the notifier", "example": "Email" }, "to": { "type": "string", "description": "Arguments required by the provider", "example": "email@shodan.io" } } } } } }, "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "id": "1VxiaJb93Gn8TUnM", "success": true } } } } } } }, "/notifier/provider": { "get": { "operationId": "listProviders", "tags": ["Notifiers"], "summary": "List of available notification providers", "description": "Get a list of all the notification providers that are available and the parameters to submit when creating them.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "pagerduty": { "required": ["routing_key"] }, "slack": { "required": ["webhook_url"] }, "telegram": { "required": ["chat_id", "token"] }, "webhook": { "required": ["url"] }, "phone": { "required": ["to"] }, "email": { "required": ["to"] }, "gitter": { "required": ["room_id", "token"] } } } } } } } }, "/notifier/{id}": { "delete": { "operationId": "deleteNotifier", "tags": ["Notifiers"], "summary": "Delete a notification service", "description": "Remove the notification service created for the user.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Notifier ID", "example": "XEmmdaPJxE1kknJq" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "success": true } } } } } }, "get": { "operationId": "getNotifierInfo", "tags": ["Notifiers"], "summary": "Get information about a notifier", "description": "Use this method to create a new notification service endpoint that Shodan services can send notifications through.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Notifier ID", "example": "kLlNZVxaBKRQkcsl" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "description": "Email notifier", "args": { "to": "jmath@shodan.io" }, "provider": "email", "id": "1VxiaJb93Gn8TUnM" } } } } } }, "put": { "operationId": "editNotifier", "tags": ["Notifiers"], "summary": "Edit a notifier", "description": "Use this method to update the parameters of a notifier.", "requestBody": { "content": { "application/x-www-form-urlencoded": { "schema": { "properties": { "to": { "type": "string", "description": "Arguments required by the provider", "example": "email@shodan.io" } } } } } }, "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Notifier ID", "example": "XEmmdaPJxE1kknJq" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "id": "1VxiaJb93Gn8TUnM", "success": true } } } } } } }, "/shodan/query": { "get": { "operationId": "listQueries", "tags": ["Directory Methods"], "summary": "List the saved search queries", "description": "Use this method to obtain a list of search queries that users have saved in Shodan.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "matches": [ { "votes": 1, "description": "Danieverton", "tags": [""], "timestamp": "2021-01-26T19:41:50.961000", "title": "ip camera", "query": "ip camera BR" }, { "votes": 3, "description": "This is Moxa Nport Devices ICS system with Authentication disabled Author: A1C3VENOM", "tags": ["ics", "iot", "moxa"], "timestamp": "2021-01-24T07:44:08.889000", "title": "Moxa Nport Devices with Authentication disabled", "query": "\"Moxa Nport Device\" Status: Authentication disabled port:\"4800\"" } ], "total": 6746 } } } } } } }, "/shodan/query/search": { "get": { "operationId": "searchQueries", "tags": ["Directory Methods"], "summary": "Search the directory of saved search queries", "description": "Use this method to search the directory of search queries that users have saved in Shodan.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "query", "required": true, "in": "query", "schema": { "type": "string" }, "description": "What to search for in the directory of saved search queries", "example": "webcam" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "matches": [ { "votes": 2, "description": "", "title": "Webcam", "timestamp": "2019-07-07T02:54:45.194000", "tags": [""], "query": "IP Webcam has_screenshot: -port:3269 -port:3288 -port:7000 -port:7001 -port:8000 country:\"KR\"" }, { "votes": 3, "description": "", "title": "webcam", "timestamp": "2020-10-08T14:54:14.599000", "tags": [""], "query": "Test org:\"Test\"" } ], "total": 309 } } } } } } }, "/shodan/query/tags": { "get": { "operationId": "listQueryTags", "tags": ["Directory Methods"], "summary": "List the most popular tags", "description": "Use this method to obtain a list of popular tags for the saved search queries in Shodan.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "matches": [ { "count": 209, "value": "webcam" }, { "count": 172, "value": "cam" }, { "count": 159, "value": "camera" } ], "total": 7580 } } } } } } }, "/shodan/data": { "get": { "operationId": "listDatasets", "tags": ["Bulk Data (Enterprise)"], "summary": "Get a list of available datasets", "description": "Use this method to see a list of the datasets that are available for download.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": [ { "scope": "monthly", "name": "internetdb", "description": "Minified database containing network information about all IPs on the Internet" }, { "scope": "monthly", "name": "dnsdb", "description": "DNS data for active domains on the Internet" }, { "scope": "daily", "name": "raw-daily", "description": "Data files containing all the information collected during a day" } ] } } } } } }, "/shodan/data/{dataset}": { "get": { "operationId": "listFiles", "tags": ["Bulk Data (Enterprise)"], "summary": "List the files for a dataset", "description": "Get a list of files that are available for download from the provided dataset.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "dataset", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Name of the dataset", "example": "raw-daily" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": [ { "url": "https://...", "timestamp": 1611711401000, "sha1": "5a91f49c90da5ab8856c83c84846941115c55441", "name": "2021-01-26.json.gz", "size": 104650655998 }, { "url": "https://...", "timestamp": 1611655444000, "sha1": "ea29acc25fc154ac64dde0ab294824ae7f1f64c9", "name": "2021-01-25.json.gz", "size": 152517565458 }, { "url": "https://...", "timestamp": 1611540775000, "sha1": "aed18f2a952df7731fec447d81ead8a96907000d", "name": "2021-01-24.json.gz", "size": 161275556509 } ] } } } } } }, "/org": { "get": { "operationId": "getOrganization", "tags": ["Manage Organization (Enterprise)"], "summary": "General Information", "description": "Get information about your organization such as the list of its members, upgrades, authorized domains and more.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "name": "Shodan Organization", "created": "2020-09-30T15:41:48.073000", "admins": [ { "username": "admin", "email": "admin@shodan.io" } ], "members": [ { "username": "member", "email": "member@shodan.io" } ], "upgrade_type": "stream-100", "domains": ["shodan.io"], "logo": false, "id": "p3cEAmoDapAPeP7w" } } } } } } }, "/org/member/{user}": { "put": { "operationId": "addMember", "tags": ["Manage Organization (Enterprise)"], "summary": "Add a new member", "description": "Add a Shodan user to the organization and upgrade them.", "requestBody": { "content": {} }, "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "notify", "in": "query", "schema": { "type": "boolean" }, "description": "Whether or not to send an email notification", "example": "false" }, { "name": "user", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Username or email of the Shodan user", "example": "new-member@shodan.io" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "success": true } } } } } }, "delete": { "operationId": "removeMember", "tags": ["Manage Organization (Enterprise)"], "summary": "Remove a member", "description": "Remove and downgrade the provided member from the organization.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "user", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Username or email of the Shodan user", "example": "new-member@shodan.io" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "success": true } } } } } } }, "/account/profile": { "get": { "operationId": "getProfile", "tags": ["Account Methods"], "summary": "Account Methods", "description": "Returns information about the Shodan account linked to this API key.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "member": true, "credits": 0, "display_name": null, "created": "2020-06-15T10:44:43.148000" } } } } } } }, "/dns/domain/{domain}": { "get": { "operationId": "getDomainInfo", "tags": ["DNS Methods"], "summary": "Domain Information", "description": "Get all the subdomains and other DNS entries for the given domain. Uses 1 query credit per lookup.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "domain", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Domain name to lookup; example \"cnn.com\"", "example": "google.com" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "domain": "google.com", "tags": ["ipv6"], "data": [ { "subdomain": "", "type": "MX", "value": "aspmx.l.google.com", "last_seen": "2021-01-19T22:23:15.978799+00:00" }, { "subdomain": "*.auth.corp", "type": "CNAME", "value": "uberproxy.l.google.com", "last_seen": "2021-01-26T13:04:34.018114+00:00" }, { "subdomain": "*.cloud.sandbox", "type": "A", "value": "74.125.142.81", "last_seen": "2021-01-15T12:57:18.133727+00:00" } ], "subdomains": [ "*.auth.corp", "*.cloud.sandbox", "*.composer-staging.cloud" ], "more": true } } } } } } }, "/dns/resolve": { "get": { "operationId": "resolveDNS", "tags": ["DNS Methods"], "summary": "DNS Lookup", "description": "Look up the IP address for the provided list of hostnames.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "hostnames", "in": "query", "schema": { "type": "string" }, "description": "Comma-separated list of hostnames; example \"google.com,bing.com\"", "example": "google.com,facebook.com" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "facebook.com": "31.13.93.35", "google.com": "142.251.32.174" } } } } } } }, "/dns/reverse": { "get": { "operationId": "reverseDNS", "tags": ["DNS Methods"], "summary": "Reverse DNS Lookup", "description": "Look up the hostnames that have been defined for the given list of IP addresses.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "ips", "in": "query", "schema": { "type": "number" }, "description": "Comma-separated list of IP addresses; example \"74.125.227.230,204.79.197.200\"", "example": "8.8.8.8,1.1.1.1" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "8.8.8.8": ["dns.google"], "1.1.1.1": ["one.one.one.one"] } } } } } } }, "/tools/httpheaders": { "get": { "operationId": "getHTTPHeaders", "tags": ["Utility Methods"], "summary": "HTTP Headers", "description": "Shows the HTTP headers that your client sends when connecting to a webserver.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "Successful response", "content": { "application/json": { "example": { "Content-Length": "", "Cf-Visitor": "{\"scheme\":\"https\"}", "Accept-Encoding": "gzip", "X-Forwarded-For": "113.161.57.41", "Host": "api.shodan.io", "Cf-Request-Id": "07e880ae180000d1cfb309a000000001", "User-Agent": "curl/7.64.1", "Connection": "Keep-Alive", "X-Forwarded-Proto": "https", "Accept": "*/*", "Cdn-Loop": "cloudflare", "Cf-Connecting-Ip": "113.161.57.41", "Cf-Ray": "61876a29cdf8d1cf-DFW", "Content-Type": "" } } } } } } }, "/tools/myip": { "get": { "operationId": "getMyIP", "tags": ["Utility Methods"], "summary": "My IP Address", "description": "Get your current IP address as seen from the Internet.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": "113.161.57.41" } } } } } }, "/api-info": { "get": { "operationId": "getAPIInfo", "tags": ["API Status Methods"], "summary": "API Plan Information", "description": "Returns information about the API plan belonging to the given API key.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "scan_credits": 100000, "usage_limits": { "scan_credits": -1, "query_credits": -1, "monitored_ips": -1 }, "plan": "stream-100", "https": false, "unlocked": true, "query_credits": 100000, "monitored_ips": 19, "unlocked_left": 100000, "telnet": false } } } } } } } } } ``` --- # Shodan Developer * [Shodan](https://www.shodan.io/) * [Maps](https://maps.shodan.io/) * [Images](https://images.shodan.io/) * [Monitor](https://monitor.shodan.io/) * [More...](https://www.shodan.io/about/products) ### API Reference _API_ Documentation =================== 1. [Requirements](https://developer.shodan.io/api/requirements) 2. [Introduction](https://developer.shodan.io/api/introduction) 3. [Clients](https://developer.shodan.io/api/clients) 4. [REST API Documentation](https://developer.shodan.io/api) 5. [Streaming API Documentation](https://developer.shodan.io/api/stream) 6. [Trends API Documentation](https://developer.shodan.io/api/trends) _Appendix_ ========== 1. [Banner Specification](https://datapedia.shodan.io/) 2. [Search Filters](https://www.shodan.io/search/filters) For some of the popular programming languages there are libraries that make it easy to access the Shodan API. Want your client listed here? Contact us at [support@shodan.io](mailto:support@shodan.io) with a link to the documentation/ source code repository. Python ====== | | | | | | --- | --- | --- | --- | | shodan | [Github Repository](https://www.github.com/achillean/shodan-python)

[Documentation](https://shodan.readthedocs.org/) | [@shodanhq](https://twitter.com/shodanhq) | Official Shodan library for Python | Ruby ==== | | | | | | --- | --- | --- | --- | | shodanz | [Github Repository](https://github.com/picatz/shodanz) | [@kentgruber](https://twitter.com/kentgruber) | Modern Ruby gem for Shodan | PHP === | | | | | | --- | --- | --- | --- | | Shodan-PHP-REST-API | [Github Repository](https://github.com/ScadaExposure/Shodan-PHP-REST-API) | [@ISGroupSRL](https://twitter.com/ISGroupSRL) | Lean and easily extendible PHP API for Shodan.io, supporting both the free API and the paid one. | C++ === | | | | | | --- | --- | --- | --- | | ShodanCPP | [Github Repository](https://github.com/prophetl33t/ShodanCPP) | prophetl33t | A C++ library for accessing the Shodan API. | C# == | | | | | | --- | --- | --- | --- | | Shodan | [Nuget Package](https://www.nuget.org/packages/Shodan/) | [@shadowscatcher](https://twitter.com/shadowscatcher) | .NET Standard 2.0 port of my own Go client library | | Shodan.Net | [Github Repository](https://github.com/tparnell8/Shodan.Net) | [@TerribleDev](https://twitter.com/TerribleDev) | A C# API client that supports all of the REST API. Streaming API support is still in-progress. | Crystal ======= | | | | | | --- | --- | --- | --- | | Shodan Crystal | [Github Repository](https://github.com/PercussiveElbow/Shodan) | [@mil0sec](https://twitter.com/mil0sec) | A Crystal library for the Shodan REST API. | Go == | | | | | | --- | --- | --- | --- | | shodan | [Github Repository](https://github.com/shadowscatcher/shodan) | [@shadowscatcher](https://twitter.com/shadowscatcher) | Go library with comprehensive data models and accompanying query syntax. | | go-shodan | [Github Repository](https://github.com/ns3777k/go-shodan) | [@ns3777k](https://twitter.com/ns3777k) | A Go library for accessing the Shodan API. | | shodan | [Project Website](https://code.vighnesh.org/shodan) | [vighnesh.org](https://vighnesh.org/) | A Go library for accessing the Shodan API. | Haskell ======= | | | | | | --- | --- | --- | --- | | shodan | [Github Repository](https://github.com/iomonad/shodan) | [iomonad](https://inother.space/) | Shodan web API wrapper in Haskell. | Java ==== | | | | | | --- | --- | --- | --- | | jShodan | [Github Repository](https://github.com/fooock/jshodan) | [fooock](http://www.fooock.com/) | Shodan API client using RxJava and Retrofit | Node.js ======= | | | | | | --- | --- | --- | --- | | shodan-client.js | [Github Repository](https://github.com/jesusprubio/shodan-client.js) | [@jesusprubio](https://twitter.com/jesusprubio) | A Node.js (JavaScript) library for accessing the new Shodan API. | Perl ==== | | | | | | --- | --- | --- | --- | | WWW::Shodan::API | [Github Repository](https://github.com/Dudley5000/WWW-Shodan-API)
  [Documentation](https://metacpan.org/pod/WWW::Shodan::API) | [@dudley\_adams](https://twitter.com/dudley_adams) | Perl interface for the Shodan API | PowerShell ========== | | | | | | --- | --- | --- | --- | | Posh-Shodan | [Github Repository](https://github.com/darkoperator/Posh-Shodan) | [@Carlos\_Perez](https://twitter.com/Carlos_Perez) | PowerShell Module to interact with the Shodan REST API provided with the proper API key. | Rust ==== | | | | | | --- | --- | --- | --- | | shodan | [Github Repository](https://github.com/femiagbabiaka/shodan-rust) | [Femi Agbabiaka](http://femiagbabiaka.xyz/) | A Rusty wrapper for the Shodan.io API. | [Next: REST API Documentation](https://developer.shodan.io/api) ###### Products * [Monitor](https://monitor.shodan.io/) * [Search Engine](https://beta.shodan.io/) * [Developer API](https://developer.shodan.io/) * [Maps](https://maps.shodan.io/) * [Bulk Data](https://enterprise.shodan.io/) * [Images](https://images.shodan.io/) * [Snippets](https://snippets.shodan.io/) ###### Pricing * [Membership](https://www.shodan.io/store/member) * [API Subscriptions](https://developer.shodan.io/pricing) * [Enterprise](https://enterprise.shodan.io/) ###### Contact Us * [support@shodan.io](mailto:support@shodan.io) * ##### [](https://twitter.com/shodanhq)   [](https://www.linkedin.com/company/shodan)   [](https://www.facebook.com/shodan.io) Shodan ® - All rights reserved --- # Shodan Developer * [Shodan](https://www.shodan.io/) * [Maps](https://maps.shodan.io/) * [Images](https://images.shodan.io/) * [Monitor](https://monitor.shodan.io/) * [More...](https://www.shodan.io/about/products) ### API Reference _API_ Documentation =================== 1. [Requirements](https://developer.shodan.io/api/requirements) 2. [Introduction](https://developer.shodan.io/api/introduction) 3. [Clients](https://developer.shodan.io/api/clients) 4. [REST API Documentation](https://developer.shodan.io/api) 5. [Streaming API Documentation](https://developer.shodan.io/api/stream) 6. [Trends API Documentation](https://developer.shodan.io/api/trends) _Appendix_ ========== 1. [Banner Specification](https://datapedia.shodan.io/) 2. [Search Filters](https://www.shodan.io/search/filters) [![](https://developer.shodan.io/static/img/shields/shields-openapi.svg)](https://developer.shodan.io/api/openapi-trends.json) [![](https://developer.shodan.io/static/img/shields/shields-postman-collection.svg)](https://www.postman.com/shodanhq/workspace/shodan/collection/27459245-eb8691b1-2677-45fa-b68f-032dad693aa6) The Trends API which used by Shodan Trends provides a month-to-month breakdown of Shodan historical results. The base URL for all of these methods is: https://trends.shodan.io Historical _Data_ **Enterprise** ================================ ###### GET/api/v1/search ###### **Trends** Get breakdown of historical results aggregate by facet field. ###### **Request URL** https://trends.shodan.io/api/v1/search?query={query}&facets={facets}&key={YOUR_API_KEY} ###### **Parameters** * **query:** \[String\] Search query used to search the historical database, e.g. product:nginx * **facets (optional):** \[String\] A comma-separated list of properties to get summary information on. e.g. country **Examples** cURL Shodan CLI Python Request $ curl -X GET "https://trends.shodan.io/api/v1/search?query=product:nginx&facets=country:10&key={YOUR_API_KEY}" Response { "total": 1464808820, "matches": [\ {\ "month": "2017-06",\ "count": 9038297\ },\ {\ "month": "2017-07",\ "count": 9622979\ },\ {\ "month": "2017-08",\ "count": 9567365\ },\ {\ "month": "2017-09",\ "count": 9336625\ },\ {\ "month": "2017-10",\ "count": 9980807\ },\ {\ "month": "2017-11",\ "count": 10304751\ },\ {\ "month": "2017-12",\ "count": 10588246\ },\ {\ "month": "2018-01",\ "count": 10869472\ },\ {\ "month": "2018-02",\ "count": 10761630\ },\ {\ "month": "2018-03",\ "count": 11029917\ },\ {\ "month": "2018-04",\ "count": 11720458\ },\ {\ "month": "2018-05",\ "count": 12290757\ },\ {\ "month": "2018-06",\ "count": 12486140\ },\ {\ "month": "2018-07",\ "count": 12716243\ },\ {\ "month": "2018-08",\ "count": 13264770\ },\ {\ "month": "2018-09",\ "count": 13628101\ },\ {\ "month": "2018-10",\ "count": 14120929\ },\ {\ "month": "2018-11",\ "count": 14490904\ },\ {\ "month": "2018-12",\ "count": 14941899\ },\ {\ "month": "2019-01",\ "count": 15198471\ },\ {\ "month": "2019-02",\ "count": 15516717\ },\ {\ "month": "2019-03",\ "count": 15873412\ },\ {\ "month": "2019-04",\ "count": 16240612\ },\ {\ "month": "2019-05",\ "count": 16907413\ },\ {\ "month": "2019-06",\ "count": 16725925\ },\ {\ "month": "2019-07",\ "count": 17162899\ },\ {\ "month": "2019-08",\ "count": 17825397\ },\ {\ "month": "2019-09",\ "count": 18199228\ },\ {\ "month": "2019-10",\ "count": 18747143\ },\ {\ "month": "2019-11",\ "count": 19265986\ },\ {\ "month": "2019-12",\ "count": 19904296\ },\ {\ "month": "2020-01",\ "count": 19972114\ },\ {\ "month": "2020-02",\ "count": 20669843\ },\ {\ "month": "2020-03",\ "count": 22023516\ },\ {\ "month": "2020-04",\ "count": 21957936\ },\ {\ "month": "2020-05",\ "count": 21342924\ },\ {\ "month": "2020-06",\ "count": 21120320\ },\ {\ "month": "2020-07",\ "count": 22127722\ },\ {\ "month": "2020-08",\ "count": 22681946\ },\ {\ "month": "2020-09",\ "count": 22644841\ },\ {\ "month": "2020-10",\ "count": 22567317\ },\ {\ "month": "2020-11",\ "count": 22809743\ },\ {\ "month": "2020-12",\ "count": 23112365\ },\ {\ "month": "2021-01",\ "count": 23352274\ },\ {\ "month": "2021-02",\ "count": 22511781\ },\ {\ "month": "2021-03",\ "count": 23287526\ },\ {\ "month": "2021-04",\ "count": 23631594\ },\ {\ "month": "2021-05",\ "count": 24017127\ },\ {\ "month": "2021-06",\ "count": 24225740\ },\ {\ "month": "2021-07",\ "count": 24691114\ },\ {\ "month": "2021-08",\ "count": 24945559\ },\ {\ "month": "2021-09",\ "count": 25244005\ },\ {\ "month": "2021-10",\ "count": 25523330\ },\ {\ "month": "2021-11",\ "count": 25672889\ },\ {\ "month": "2021-12",\ "count": 26201167\ },\ {\ "month": "2022-01",\ "count": 26589219\ },\ {\ "month": "2022-02",\ "count": 26533100\ },\ {\ "month": "2022-03",\ "count": 27588784\ },\ {\ "month": "2022-04",\ "count": 27378939\ },\ {\ "month": "2022-05",\ "count": 27411974\ },\ {\ "month": "2022-06",\ "count": 27251911\ },\ {\ "month": "2022-07",\ "count": 27531147\ },\ {\ "month": "2022-08",\ "count": 27437822\ },\ {\ "month": "2022-09",\ "count": 26997984\ },\ {\ "month": "2022-10",\ "count": 26459164\ },\ {\ "month": "2022-11",\ "count": 26505647\ },\ {\ "month": "2022-12",\ "count": 27028252\ },\ {\ "month": "2023-01",\ "count": 26411568\ },\ {\ "month": "2023-02",\ "count": 25070023\ },\ {\ "month": "2023-03",\ "count": 25733428\ },\ {\ "month": "2023-04",\ "count": 25428367\ },\ {\ "month": "2023-05",\ "count": 36164482\ },\ {\ "month": "2023-06",\ "count": 16624527\ }\ ], "facets": { "country": [\ {\ "key": "2017-06",\ "values": [\ {\ "count": 3050586,\ "value": "US"\ },\ {\ "count": 977320,\ "value": "CN"\ },\ {\ "count": 780431,\ "value": "DE"\ },\ {\ "count": 572521,\ "value": "FR"\ },\ {\ "count": 420314,\ "value": "RU"\ },\ {\ "count": 331331,\ "value": "NL"\ },\ {\ "count": 302899,\ "value": "GB"\ },\ {\ "count": 194184,\ "value": "JP"\ },\ {\ "count": 179499,\ "value": "IE"\ },\ {\ "count": 173166,\ "value": "HK"\ }\ ]\ },\ {\ "key": "2017-07",\ "values": [\ {\ "count": 3212240,\ "value": "US"\ },\ {\ "count": 1111340,\ "value": "CN"\ },\ {\ "count": 842439,\ "value": "DE"\ },\ {\ "count": 593350,\ "value": "FR"\ },\ {\ "count": 438983,\ "value": "RU"\ },\ {\ "count": 345139,\ "value": "NL"\ },\ {\ "count": 324624,\ "value": "GB"\ },\ {\ "count": 205120,\ "value": "JP"\ },\ {\ "count": 192695,\ "value": "HK"\ },\ {\ "count": 187919,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2017-08",\ "values": [\ {\ "count": 3240638,\ "value": "US"\ },\ {\ "count": 1098987,\ "value": "CN"\ },\ {\ "count": 828453,\ "value": "DE"\ },\ {\ "count": 583432,\ "value": "FR"\ },\ {\ "count": 391038,\ "value": "RU"\ },\ {\ "count": 345197,\ "value": "NL"\ },\ {\ "count": 324335,\ "value": "GB"\ },\ {\ "count": 203638,\ "value": "JP"\ },\ {\ "count": 196578,\ "value": "HK"\ },\ {\ "count": 187529,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2017-09",\ "values": [\ {\ "count": 3189853,\ "value": "US"\ },\ {\ "count": 1065540,\ "value": "CN"\ },\ {\ "count": 796529,\ "value": "DE"\ },\ {\ "count": 583445,\ "value": "FR"\ },\ {\ "count": 385482,\ "value": "RU"\ },\ {\ "count": 345160,\ "value": "NL"\ },\ {\ "count": 294485,\ "value": "GB"\ },\ {\ "count": 206418,\ "value": "JP"\ },\ {\ "count": 200695,\ "value": "HK"\ },\ {\ "count": 187044,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2017-10",\ "values": [\ {\ "count": 3514906,\ "value": "US"\ },\ {\ "count": 1070632,\ "value": "CN"\ },\ {\ "count": 858516,\ "value": "DE"\ },\ {\ "count": 615056,\ "value": "FR"\ },\ {\ "count": 404242,\ "value": "RU"\ },\ {\ "count": 361080,\ "value": "NL"\ },\ {\ "count": 313330,\ "value": "GB"\ },\ {\ "count": 218864,\ "value": "JP"\ },\ {\ "count": 218684,\ "value": "HK"\ },\ {\ "count": 194867,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2017-11",\ "values": [\ {\ "count": 3652666,\ "value": "US"\ },\ {\ "count": 1141820,\ "value": "CN"\ },\ {\ "count": 862161,\ "value": "DE"\ },\ {\ "count": 620593,\ "value": "FR"\ },\ {\ "count": 440130,\ "value": "RU"\ },\ {\ "count": 364814,\ "value": "NL"\ },\ {\ "count": 317462,\ "value": "GB"\ },\ {\ "count": 231706,\ "value": "HK"\ },\ {\ "count": 227484,\ "value": "JP"\ },\ {\ "count": 200426,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2017-12",\ "values": [\ {\ "count": 3738143,\ "value": "US"\ },\ {\ "count": 1215129,\ "value": "CN"\ },\ {\ "count": 903019,\ "value": "DE"\ },\ {\ "count": 636506,\ "value": "FR"\ },\ {\ "count": 424603,\ "value": "RU"\ },\ {\ "count": 366994,\ "value": "NL"\ },\ {\ "count": 323643,\ "value": "GB"\ },\ {\ "count": 230824,\ "value": "HK"\ },\ {\ "count": 226367,\ "value": "JP"\ },\ {\ "count": 205024,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2018-01",\ "values": [\ {\ "count": 3861672,\ "value": "US"\ },\ {\ "count": 1281415,\ "value": "CN"\ },\ {\ "count": 908437,\ "value": "DE"\ },\ {\ "count": 642109,\ "value": "FR"\ },\ {\ "count": 428831,\ "value": "RU"\ },\ {\ "count": 374396,\ "value": "NL"\ },\ {\ "count": 330122,\ "value": "GB"\ },\ {\ "count": 244976,\ "value": "HK"\ },\ {\ "count": 230880,\ "value": "JP"\ },\ {\ "count": 205999,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2018-02",\ "values": [\ {\ "count": 3827102,\ "value": "US"\ },\ {\ "count": 1226215,\ "value": "CN"\ },\ {\ "count": 896637,\ "value": "DE"\ },\ {\ "count": 640314,\ "value": "FR"\ },\ {\ "count": 425552,\ "value": "RU"\ },\ {\ "count": 370944,\ "value": "NL"\ },\ {\ "count": 323073,\ "value": "GB"\ },\ {\ "count": 241976,\ "value": "HK"\ },\ {\ "count": 235821,\ "value": "JP"\ },\ {\ "count": 207621,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2018-03",\ "values": [\ {\ "count": 3925628,\ "value": "US"\ },\ {\ "count": 1267901,\ "value": "CN"\ },\ {\ "count": 916694,\ "value": "DE"\ },\ {\ "count": 647998,\ "value": "FR"\ },\ {\ "count": 439599,\ "value": "RU"\ },\ {\ "count": 374738,\ "value": "NL"\ },\ {\ "count": 326288,\ "value": "GB"\ },\ {\ "count": 246910,\ "value": "HK"\ },\ {\ "count": 237306,\ "value": "JP"\ },\ {\ "count": 214476,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2018-04",\ "values": [\ {\ "count": 4073656,\ "value": "US"\ },\ {\ "count": 1397472,\ "value": "CN"\ },\ {\ "count": 999349,\ "value": "DE"\ },\ {\ "count": 672516,\ "value": "FR"\ },\ {\ "count": 480599,\ "value": "RU"\ },\ {\ "count": 396119,\ "value": "NL"\ },\ {\ "count": 347135,\ "value": "GB"\ },\ {\ "count": 280729,\ "value": "JP"\ },\ {\ "count": 259366,\ "value": "HK"\ },\ {\ "count": 220981,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2018-05",\ "values": [\ {\ "count": 4293839,\ "value": "US"\ },\ {\ "count": 1494306,\ "value": "CN"\ },\ {\ "count": 1015577,\ "value": "DE"\ },\ {\ "count": 683767,\ "value": "FR"\ },\ {\ "count": 501699,\ "value": "RU"\ },\ {\ "count": 407596,\ "value": "NL"\ },\ {\ "count": 357045,\ "value": "GB"\ },\ {\ "count": 290926,\ "value": "JP"\ },\ {\ "count": 256114,\ "value": "HK"\ },\ {\ "count": 234072,\ "value": "VN"\ }\ ]\ },\ {\ "key": "2018-06",\ "values": [\ {\ "count": 4368791,\ "value": "US"\ },\ {\ "count": 1565342,\ "value": "CN"\ },\ {\ "count": 1019682,\ "value": "DE"\ },\ {\ "count": 692723,\ "value": "FR"\ },\ {\ "count": 503521,\ "value": "RU"\ },\ {\ "count": 404879,\ "value": "NL"\ },\ {\ "count": 355990,\ "value": "GB"\ },\ {\ "count": 298404,\ "value": "HK"\ },\ {\ "count": 294777,\ "value": "JP"\ },\ {\ "count": 249868,\ "value": "VN"\ }\ ]\ },\ {\ "key": "2018-07",\ "values": [\ {\ "count": 4484383,\ "value": "US"\ },\ {\ "count": 1560523,\ "value": "CN"\ },\ {\ "count": 1042289,\ "value": "DE"\ },\ {\ "count": 692151,\ "value": "FR"\ },\ {\ "count": 512872,\ "value": "RU"\ },\ {\ "count": 408121,\ "value": "NL"\ },\ {\ "count": 359108,\ "value": "GB"\ },\ {\ "count": 308425,\ "value": "HK"\ },\ {\ "count": 303178,\ "value": "JP"\ },\ {\ "count": 251805,\ "value": "VN"\ }\ ]\ },\ {\ "key": "2018-08",\ "values": [\ {\ "count": 4636336,\ "value": "US"\ },\ {\ "count": 1646708,\ "value": "CN"\ },\ {\ "count": 1073007,\ "value": "DE"\ },\ {\ "count": 682793,\ "value": "FR"\ },\ {\ "count": 521107,\ "value": "RU"\ },\ {\ "count": 412708,\ "value": "NL"\ },\ {\ "count": 364834,\ "value": "GB"\ },\ {\ "count": 323305,\ "value": "HK"\ },\ {\ "count": 317330,\ "value": "JP"\ },\ {\ "count": 293598,\ "value": "VN"\ }\ ]\ },\ {\ "key": "2018-09",\ "values": [\ {\ "count": 4786179,\ "value": "US"\ },\ {\ "count": 1702605,\ "value": "CN"\ },\ {\ "count": 1042671,\ "value": "DE"\ },\ {\ "count": 687910,\ "value": "FR"\ },\ {\ "count": 528417,\ "value": "RU"\ },\ {\ "count": 424443,\ "value": "NL"\ },\ {\ "count": 379318,\ "value": "GB"\ },\ {\ "count": 341409,\ "value": "HK"\ },\ {\ "count": 325258,\ "value": "VN"\ },\ {\ "count": 319061,\ "value": "JP"\ }\ ]\ },\ {\ "key": "2018-10",\ "values": [\ {\ "count": 5087425,\ "value": "US"\ },\ {\ "count": 1774711,\ "value": "CN"\ },\ {\ "count": 1091509,\ "value": "DE"\ },\ {\ "count": 709686,\ "value": "FR"\ },\ {\ "count": 526380,\ "value": "RU"\ },\ {\ "count": 436821,\ "value": "NL"\ },\ {\ "count": 393559,\ "value": "GB"\ },\ {\ "count": 363196,\ "value": "HK"\ },\ {\ "count": 334500,\ "value": "JP"\ },\ {\ "count": 251641,\ "value": "ZA"\ }\ ]\ },\ {\ "key": "2018-11",\ "values": [\ {\ "count": 5277809,\ "value": "US"\ },\ {\ "count": 1735645,\ "value": "CN"\ },\ {\ "count": 1180170,\ "value": "DE"\ },\ {\ "count": 743253,\ "value": "FR"\ },\ {\ "count": 546464,\ "value": "RU"\ },\ {\ "count": 452861,\ "value": "NL"\ },\ {\ "count": 409807,\ "value": "GB"\ },\ {\ "count": 350845,\ "value": "HK"\ },\ {\ "count": 340691,\ "value": "JP"\ },\ {\ "count": 245437,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2018-12",\ "values": [\ {\ "count": 5361042,\ "value": "US"\ },\ {\ "count": 1862368,\ "value": "CN"\ },\ {\ "count": 1203923,\ "value": "DE"\ },\ {\ "count": 744990,\ "value": "FR"\ },\ {\ "count": 553490,\ "value": "RU"\ },\ {\ "count": 461710,\ "value": "NL"\ },\ {\ "count": 409236,\ "value": "GB"\ },\ {\ "count": 365875,\ "value": "HK"\ },\ {\ "count": 347999,\ "value": "JP"\ },\ {\ "count": 287186,\ "value": "VN"\ }\ ]\ },\ {\ "key": "2019-01",\ "values": [\ {\ "count": 5498756,\ "value": "US"\ },\ {\ "count": 2004928,\ "value": "CN"\ },\ {\ "count": 1200364,\ "value": "DE"\ },\ {\ "count": 748100,\ "value": "FR"\ },\ {\ "count": 541899,\ "value": "RU"\ },\ {\ "count": 459659,\ "value": "NL"\ },\ {\ "count": 407115,\ "value": "GB"\ },\ {\ "count": 366968,\ "value": "HK"\ },\ {\ "count": 348713,\ "value": "JP"\ },\ {\ "count": 264409,\ "value": "VN"\ }\ ]\ },\ {\ "key": "2019-02",\ "values": [\ {\ "count": 5669749,\ "value": "US"\ },\ {\ "count": 2015687,\ "value": "CN"\ },\ {\ "count": 1223231,\ "value": "DE"\ },\ {\ "count": 754624,\ "value": "FR"\ },\ {\ "count": 561708,\ "value": "RU"\ },\ {\ "count": 464200,\ "value": "NL"\ },\ {\ "count": 412617,\ "value": "GB"\ },\ {\ "count": 362027,\ "value": "HK"\ },\ {\ "count": 355711,\ "value": "JP"\ },\ {\ "count": 257220,\ "value": "VN"\ }\ ]\ },\ {\ "key": "2019-03",\ "values": [\ {\ "count": 5904610,\ "value": "US"\ },\ {\ "count": 2186025,\ "value": "CN"\ },\ {\ "count": 1228333,\ "value": "DE"\ },\ {\ "count": 753927,\ "value": "FR"\ },\ {\ "count": 546782,\ "value": "RU"\ },\ {\ "count": 469225,\ "value": "NL"\ },\ {\ "count": 413096,\ "value": "GB"\ },\ {\ "count": 384812,\ "value": "HK"\ },\ {\ "count": 359253,\ "value": "JP"\ },\ {\ "count": 250195,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2019-04",\ "values": [\ {\ "count": 6109769,\ "value": "US"\ },\ {\ "count": 2338975,\ "value": "CN"\ },\ {\ "count": 1203252,\ "value": "DE"\ },\ {\ "count": 753299,\ "value": "FR"\ },\ {\ "count": 546801,\ "value": "RU"\ },\ {\ "count": 467556,\ "value": "NL"\ },\ {\ "count": 414264,\ "value": "GB"\ },\ {\ "count": 384128,\ "value": "HK"\ },\ {\ "count": 362579,\ "value": "JP"\ },\ {\ "count": 245557,\ "value": "IE"\ }\ ]\ },\ {\ "key": "2019-05",\ "values": [\ {\ "count": 6374597,\ "value": "US"\ },\ {\ "count": 2462819,\ "value": "CN"\ },\ {\ "count": 1229066,\ "value": "DE"\ },\ {\ "count": 761255,\ "value": "FR"\ },\ {\ "count": 564888,\ "value": "RU"\ },\ {\ "count": 475207,\ "value": "NL"\ },\ {\ "count": 420594,\ "value": "GB"\ },\ {\ "count": 394061,\ "value": "HK"\ },\ {\ "count": 367622,\ "value": "JP"\ },\ {\ "count": 253440,\ "value": "IN"\ }\ ]\ },\ {\ "key": "2019-06",\ "values": [\ {\ "count": 6280709,\ "value": "US"\ },\ {\ "count": 2276476,\ "value": "CN"\ },\ {\ "count": 1196272,\ "value": "DE"\ },\ {\ "count": 763656,\ "value": "FR"\ },\ {\ "count": 574488,\ "value": "RU"\ },\ {\ "count": 476243,\ "value": "NL"\ },\ {\ "count": 419785,\ "value": "GB"\ },\ {\ "count": 399110,\ "value": "HK"\ },\ {\ "count": 364594,\ "value": "JP"\ },\ {\ "count": 314042,\ "value": "ZA"\ }\ ]\ },\ {\ "key": "2019-07",\ "values": [\ {\ "count": 6280356,\ "value": "US"\ },\ {\ "count": 2380660,\ "value": "CN"\ },\ {\ "count": 1234898,\ "value": "DE"\ },\ {\ "count": 773293,\ "value": "FR"\ },\ {\ "count": 579773,\ "value": "RU"\ },\ {\ "count": 478250,\ "value": "NL"\ },\ {\ "count": 429342,\ "value": "GB"\ },\ {\ "count": 417483,\ "value": "HK"\ },\ {\ "count": 416924,\ "value": "ZA"\ },\ {\ "count": 374017,\ "value": "JP"\ }\ ]\ },\ {\ "key": "2019-08",\ "values": [\ {\ "count": 6043360,\ "value": "US"\ },\ {\ "count": 2848665,\ "value": "CN"\ },\ {\ "count": 1336811,\ "value": "DE"\ },\ {\ "count": 757440,\ "value": "FR"\ },\ {\ "count": 614848,\ "value": "RU"\ },\ {\ "count": 540934,\ "value": "HK"\ },\ {\ "count": 516530,\ "value": "ZA"\ },\ {\ "count": 476113,\ "value": "NL"\ },\ {\ "count": 451293,\ "value": "GB"\ },\ {\ "count": 390397,\ "value": "JP"\ }\ ]\ },\ {\ "key": "2019-09",\ "values": [\ {\ "count": 6021273,\ "value": "US"\ },\ {\ "count": 3109097,\ "value": "CN"\ },\ {\ "count": 1293971,\ "value": "DE"\ },\ {\ "count": 794551,\ "value": "FR"\ },\ {\ "count": 662941,\ "value": "ZA"\ },\ {\ "count": 618445,\ "value": "RU"\ },\ {\ "count": 580178,\ "value": "HK"\ },\ {\ "count": 464429,\ "value": "NL"\ },\ {\ "count": 451993,\ "value": "GB"\ },\ {\ "count": 391482,\ "value": "JP"\ }\ ]\ },\ {\ "key": "2019-10",\ "values": [\ {\ "count": 6255133,\ "value": "US"\ },\ {\ "count": 3142858,\ "value": "CN"\ },\ {\ "count": 1326684,\ "value": "DE"\ },\ {\ "count": 804943,\ "value": "ZA"\ },\ {\ "count": 764824,\ "value": "FR"\ },\ {\ "count": 617602,\ "value": "RU"\ },\ {\ "count": 594214,\ "value": "HK"\ },\ {\ "count": 475566,\ "value": "NL"\ },\ {\ "count": 462042,\ "value": "GB"\ },\ {\ "count": 398314,\ "value": "JP"\ }\ ]\ },\ {\ "key": "2019-11",\ "values": [\ {\ "count": 6727457,\ "value": "US"\ },\ {\ "count": 3121426,\ "value": "CN"\ },\ {\ "count": 1319932,\ "value": "DE"\ },\ {\ "count": 841116,\ "value": "ZA"\ },\ {\ "count": 766034,\ "value": "FR"\ },\ {\ "count": 612775,\ "value": "HK"\ },\ {\ "count": 612604,\ "value": "RU"\ },\ {\ "count": 474582,\ "value": "NL"\ },\ {\ "count": 469480,\ "value": "GB"\ },\ {\ "count": 397482,\ "value": "JP"\ }\ ]\ },\ {\ "key": "2019-12",\ "values": [\ {\ "count": 6889177,\ "value": "US"\ },\ {\ "count": 3317695,\ "value": "CN"\ },\ {\ "count": 1326099,\ "value": "DE"\ },\ {\ "count": 1023921,\ "value": "ZA"\ },\ {\ "count": 744518,\ "value": "FR"\ },\ {\ "count": 638086,\ "value": "HK"\ },\ {\ "count": 617314,\ "value": "RU"\ },\ {\ "count": 473999,\ "value": "GB"\ },\ {\ "count": 467989,\ "value": "NL"\ },\ {\ "count": 399329,\ "value": "JP"\ }\ ]\ },\ {\ "key": "2020-01",\ "values": [\ {\ "count": 6884546,\ "value": "US"\ },\ {\ "count": 3255345,\ "value": "CN"\ },\ {\ "count": 1315178,\ "value": "DE"\ },\ {\ "count": 1136135,\ "value": "ZA"\ },\ {\ "count": 741716,\ "value": "FR"\ },\ {\ "count": 635266,\ "value": "HK"\ },\ {\ "count": 600410,\ "value": "RU"\ },\ {\ "count": 479234,\ "value": "GB"\ },\ {\ "count": 467116,\ "value": "NL"\ },\ {\ "count": 397921,\ "value": "JP"\ }\ ]\ },\ {\ "key": "2020-02",\ "values": [\ {\ "count": 7475515,\ "value": "US"\ },\ {\ "count": 3187150,\ "value": "CN"\ },\ {\ "count": 1341747,\ "value": "DE"\ },\ {\ "count": 1143111,\ "value": "ZA"\ },\ {\ "count": 761579,\ "value": "FR"\ },\ {\ "count": 631529,\ "value": "HK"\ },\ {\ "count": 602020,\ "value": "RU"\ },\ {\ "count": 487723,\ "value": "GB"\ },\ {\ "count": 468750,\ "value": "NL"\ },\ {\ "count": 406400,\ "value": "JP"\ }\ ]\ },\ {\ "key": "2020-03",\ "values": [\ {\ "count": 8050115,\ "value": "US"\ },\ {\ "count": 3454490,\ "value": "CN"\ },\ {\ "count": 1452193,\ "value": "DE"\ },\ {\ "count": 1185622,\ "value": "ZA"\ },\ {\ "count": 793177,\ "value": "FR"\ },\ {\ "count": 660782,\ "value": "HK"\ },\ {\ "count": 632884,\ "value": "RU"\ },\ {\ "count": 516855,\ "value": "GB"\ },\ {\ "count": 486978,\ "value": "NL"\ },\ {\ "count": 425567,\ "value": "JP"\ }\ ]\ },\ {\ "key": "2020-04",\ "values": [\ {\ "count": 8274558,\ "value": "US"\ },\ {\ "count": 3298127,\ "value": "CN"\ },\ {\ "count": 1555430,\ "value": "DE"\ },\ {\ "count": 945107,\ "value": "HK"\ },\ {\ "count": 840086,\ "value": "FR"\ },\ {\ "count": 699342,\ "value": "ZA"\ },\ {\ "count": 691188,\ "value": "RU"\ },\ {\ "count": 532020,\ "value": "GB"\ },\ {\ "count": 528488,\ "value": "NL"\ },\ {\ "count": 458011,\ "value": "JP"\ }\ ]\ },\ {\ "key": "2020-05",\ "values": [\ {\ "count": 8021952,\ "value": "US"\ },\ {\ "count": 3100526,\ "value": "CN"\ },\ {\ "count": 1523207,\ "value": "DE"\ },\ {\ "count": 1205361,\ "value": "HK"\ },\ {\ "count": 832986,\ "value": "FR"\ },\ {\ "count": 679149,\ "value": "RU"\ },\ {\ "count": 541815,\ "value": "NL"\ },\ {\ "count": 537833,\ "value": "GB"\ },\ {\ "count": 456446,\ "value": "JP"\ },\ {\ "count": 379888,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2020-06",\ "values": [\ {\ "count": 7832719,\ "value": "US"\ },\ {\ "count": 3156624,\ "value": "CN"\ },\ {\ "count": 1509173,\ "value": "DE"\ },\ {\ "count": 1162273,\ "value": "HK"\ },\ {\ "count": 824920,\ "value": "FR"\ },\ {\ "count": 672055,\ "value": "RU"\ },\ {\ "count": 550332,\ "value": "GB"\ },\ {\ "count": 538574,\ "value": "NL"\ },\ {\ "count": 460209,\ "value": "JP"\ },\ {\ "count": 383257,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2020-07",\ "values": [\ {\ "count": 8107446,\ "value": "US"\ },\ {\ "count": 3392420,\ "value": "CN"\ },\ {\ "count": 1635129,\ "value": "DE"\ },\ {\ "count": 1186628,\ "value": "HK"\ },\ {\ "count": 850571,\ "value": "FR"\ },\ {\ "count": 699360,\ "value": "RU"\ },\ {\ "count": 587086,\ "value": "GB"\ },\ {\ "count": 559087,\ "value": "NL"\ },\ {\ "count": 485753,\ "value": "JP"\ },\ {\ "count": 415843,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2020-08",\ "values": [\ {\ "count": 8087567,\ "value": "US"\ },\ {\ "count": 3459264,\ "value": "CN"\ },\ {\ "count": 1717733,\ "value": "DE"\ },\ {\ "count": 1224390,\ "value": "HK"\ },\ {\ "count": 870345,\ "value": "FR"\ },\ {\ "count": 728713,\ "value": "RU"\ },\ {\ "count": 610581,\ "value": "GB"\ },\ {\ "count": 584754,\ "value": "NL"\ },\ {\ "count": 510021,\ "value": "JP"\ },\ {\ "count": 456066,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2020-09",\ "values": [\ {\ "count": 7971991,\ "value": "US"\ },\ {\ "count": 3424262,\ "value": "CN"\ },\ {\ "count": 1750637,\ "value": "DE"\ },\ {\ "count": 1197963,\ "value": "HK"\ },\ {\ "count": 886566,\ "value": "FR"\ },\ {\ "count": 736560,\ "value": "RU"\ },\ {\ "count": 628815,\ "value": "GB"\ },\ {\ "count": 598498,\ "value": "NL"\ },\ {\ "count": 514848,\ "value": "JP"\ },\ {\ "count": 473774,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2020-10",\ "values": [\ {\ "count": 7892122,\ "value": "US"\ },\ {\ "count": 3231179,\ "value": "CN"\ },\ {\ "count": 1803579,\ "value": "DE"\ },\ {\ "count": 1290093,\ "value": "HK"\ },\ {\ "count": 895681,\ "value": "FR"\ },\ {\ "count": 733504,\ "value": "RU"\ },\ {\ "count": 635628,\ "value": "GB"\ },\ {\ "count": 607060,\ "value": "NL"\ },\ {\ "count": 518597,\ "value": "JP"\ },\ {\ "count": 483299,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2020-11",\ "values": [\ {\ "count": 7884790,\ "value": "US"\ },\ {\ "count": 3132291,\ "value": "CN"\ },\ {\ "count": 1799488,\ "value": "DE"\ },\ {\ "count": 1635656,\ "value": "HK"\ },\ {\ "count": 905679,\ "value": "FR"\ },\ {\ "count": 734442,\ "value": "RU"\ },\ {\ "count": 633970,\ "value": "GB"\ },\ {\ "count": 606874,\ "value": "NL"\ },\ {\ "count": 516459,\ "value": "JP"\ },\ {\ "count": 485677,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2020-12",\ "values": [\ {\ "count": 7903236,\ "value": "US"\ },\ {\ "count": 2939801,\ "value": "CN"\ },\ {\ "count": 1912513,\ "value": "DE"\ },\ {\ "count": 1770469,\ "value": "HK"\ },\ {\ "count": 943264,\ "value": "FR"\ },\ {\ "count": 745976,\ "value": "RU"\ },\ {\ "count": 643121,\ "value": "GB"\ },\ {\ "count": 623126,\ "value": "NL"\ },\ {\ "count": 516471,\ "value": "JP"\ },\ {\ "count": 504976,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-01",\ "values": [\ {\ "count": 7983171,\ "value": "US"\ },\ {\ "count": 3011184,\ "value": "CN"\ },\ {\ "count": 2004196,\ "value": "DE"\ },\ {\ "count": 1697084,\ "value": "HK"\ },\ {\ "count": 947215,\ "value": "FR"\ },\ {\ "count": 742940,\ "value": "RU"\ },\ {\ "count": 653585,\ "value": "GB"\ },\ {\ "count": 611650,\ "value": "NL"\ },\ {\ "count": 527379,\ "value": "JP"\ },\ {\ "count": 502152,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-02",\ "values": [\ {\ "count": 7708495,\ "value": "US"\ },\ {\ "count": 2859368,\ "value": "CN"\ },\ {\ "count": 1945876,\ "value": "DE"\ },\ {\ "count": 1508050,\ "value": "HK"\ },\ {\ "count": 944804,\ "value": "FR"\ },\ {\ "count": 740926,\ "value": "RU"\ },\ {\ "count": 640081,\ "value": "GB"\ },\ {\ "count": 603521,\ "value": "NL"\ },\ {\ "count": 528165,\ "value": "JP"\ },\ {\ "count": 505943,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-03",\ "values": [\ {\ "count": 7630210,\ "value": "US"\ },\ {\ "count": 2812504,\ "value": "CN"\ },\ {\ "count": 2286695,\ "value": "HK"\ },\ {\ "count": 2082998,\ "value": "DE"\ },\ {\ "count": 907172,\ "value": "FR"\ },\ {\ "count": 757673,\ "value": "RU"\ },\ {\ "count": 670143,\ "value": "NL"\ },\ {\ "count": 643005,\ "value": "GB"\ },\ {\ "count": 597939,\ "value": "JP"\ },\ {\ "count": 485762,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-04",\ "values": [\ {\ "count": 7807820,\ "value": "US"\ },\ {\ "count": 2772019,\ "value": "CN"\ },\ {\ "count": 2469773,\ "value": "HK"\ },\ {\ "count": 2117202,\ "value": "DE"\ },\ {\ "count": 774279,\ "value": "RU"\ },\ {\ "count": 717466,\ "value": "FR"\ },\ {\ "count": 698911,\ "value": "NL"\ },\ {\ "count": 638738,\ "value": "GB"\ },\ {\ "count": 593185,\ "value": "JP"\ },\ {\ "count": 491501,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-05",\ "values": [\ {\ "count": 7966005,\ "value": "US"\ },\ {\ "count": 2845406,\ "value": "CN"\ },\ {\ "count": 2575747,\ "value": "HK"\ },\ {\ "count": 2114948,\ "value": "DE"\ },\ {\ "count": 865473,\ "value": "FR"\ },\ {\ "count": 776948,\ "value": "RU"\ },\ {\ "count": 693525,\ "value": "NL"\ },\ {\ "count": 634506,\ "value": "GB"\ },\ {\ "count": 572596,\ "value": "JP"\ },\ {\ "count": 476360,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-06",\ "values": [\ {\ "count": 7919726,\ "value": "US"\ },\ {\ "count": 3024772,\ "value": "CN"\ },\ {\ "count": 2547344,\ "value": "HK"\ },\ {\ "count": 2135776,\ "value": "DE"\ },\ {\ "count": 872853,\ "value": "FR"\ },\ {\ "count": 768666,\ "value": "RU"\ },\ {\ "count": 676067,\ "value": "NL"\ },\ {\ "count": 625278,\ "value": "GB"\ },\ {\ "count": 569287,\ "value": "JP"\ },\ {\ "count": 469076,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-07",\ "values": [\ {\ "count": 8206940,\ "value": "US"\ },\ {\ "count": 3005242,\ "value": "CN"\ },\ {\ "count": 2655712,\ "value": "HK"\ },\ {\ "count": 2143096,\ "value": "DE"\ },\ {\ "count": 843381,\ "value": "FR"\ },\ {\ "count": 778677,\ "value": "RU"\ },\ {\ "count": 680726,\ "value": "NL"\ },\ {\ "count": 628531,\ "value": "GB"\ },\ {\ "count": 616193,\ "value": "JP"\ },\ {\ "count": 501406,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-08",\ "values": [\ {\ "count": 8247896,\ "value": "US"\ },\ {\ "count": 3052351,\ "value": "CN"\ },\ {\ "count": 2712821,\ "value": "HK"\ },\ {\ "count": 2142934,\ "value": "DE"\ },\ {\ "count": 842832,\ "value": "FR"\ },\ {\ "count": 793292,\ "value": "RU"\ },\ {\ "count": 713524,\ "value": "NL"\ },\ {\ "count": 648939,\ "value": "JP"\ },\ {\ "count": 636958,\ "value": "GB"\ },\ {\ "count": 515606,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-09",\ "values": [\ {\ "count": 8178225,\ "value": "US"\ },\ {\ "count": 3112008,\ "value": "CN"\ },\ {\ "count": 2842380,\ "value": "HK"\ },\ {\ "count": 2201122,\ "value": "DE"\ },\ {\ "count": 872510,\ "value": "FR"\ },\ {\ "count": 801369,\ "value": "RU"\ },\ {\ "count": 687876,\ "value": "NL"\ },\ {\ "count": 661463,\ "value": "JP"\ },\ {\ "count": 641623,\ "value": "GB"\ },\ {\ "count": 526307,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-10",\ "values": [\ {\ "count": 8233903,\ "value": "US"\ },\ {\ "count": 3200392,\ "value": "CN"\ },\ {\ "count": 2783334,\ "value": "HK"\ },\ {\ "count": 2206270,\ "value": "DE"\ },\ {\ "count": 858972,\ "value": "FR"\ },\ {\ "count": 802824,\ "value": "RU"\ },\ {\ "count": 685397,\ "value": "NL"\ },\ {\ "count": 679273,\ "value": "JP"\ },\ {\ "count": 643753,\ "value": "GB"\ },\ {\ "count": 510727,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-11",\ "values": [\ {\ "count": 8185476,\ "value": "US"\ },\ {\ "count": 3405539,\ "value": "CN"\ },\ {\ "count": 2954825,\ "value": "HK"\ },\ {\ "count": 2213089,\ "value": "DE"\ },\ {\ "count": 846683,\ "value": "FR"\ },\ {\ "count": 801821,\ "value": "RU"\ },\ {\ "count": 692263,\ "value": "NL"\ },\ {\ "count": 690559,\ "value": "JP"\ },\ {\ "count": 641495,\ "value": "GB"\ },\ {\ "count": 543230,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2021-12",\ "values": [\ {\ "count": 8505195,\ "value": "US"\ },\ {\ "count": 3432428,\ "value": "CN"\ },\ {\ "count": 2975159,\ "value": "HK"\ },\ {\ "count": 2237776,\ "value": "DE"\ },\ {\ "count": 857796,\ "value": "FR"\ },\ {\ "count": 804941,\ "value": "RU"\ },\ {\ "count": 718103,\ "value": "JP"\ },\ {\ "count": 698351,\ "value": "NL"\ },\ {\ "count": 656866,\ "value": "GB"\ },\ {\ "count": 557580,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-01",\ "values": [\ {\ "count": 8618233,\ "value": "US"\ },\ {\ "count": 3512542,\ "value": "CN"\ },\ {\ "count": 2919276,\ "value": "HK"\ },\ {\ "count": 2304980,\ "value": "DE"\ },\ {\ "count": 884273,\ "value": "FR"\ },\ {\ "count": 816021,\ "value": "RU"\ },\ {\ "count": 726609,\ "value": "JP"\ },\ {\ "count": 705368,\ "value": "NL"\ },\ {\ "count": 668269,\ "value": "GB"\ },\ {\ "count": 580822,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-02",\ "values": [\ {\ "count": 8780379,\ "value": "US"\ },\ {\ "count": 3450254,\ "value": "CN"\ },\ {\ "count": 2882163,\ "value": "HK"\ },\ {\ "count": 2283078,\ "value": "DE"\ },\ {\ "count": 862501,\ "value": "FR"\ },\ {\ "count": 798990,\ "value": "RU"\ },\ {\ "count": 722443,\ "value": "JP"\ },\ {\ "count": 710385,\ "value": "NL"\ },\ {\ "count": 670082,\ "value": "GB"\ },\ {\ "count": 574664,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-03",\ "values": [\ {\ "count": 9157770,\ "value": "US"\ },\ {\ "count": 3569479,\ "value": "CN"\ },\ {\ "count": 3107503,\ "value": "HK"\ },\ {\ "count": 2323422,\ "value": "DE"\ },\ {\ "count": 874413,\ "value": "FR"\ },\ {\ "count": 822468,\ "value": "RU"\ },\ {\ "count": 745009,\ "value": "JP"\ },\ {\ "count": 732740,\ "value": "NL"\ },\ {\ "count": 693676,\ "value": "GB"\ },\ {\ "count": 591958,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-04",\ "values": [\ {\ "count": 9014523,\ "value": "US"\ },\ {\ "count": 3542052,\ "value": "CN"\ },\ {\ "count": 3191589,\ "value": "HK"\ },\ {\ "count": 2294526,\ "value": "DE"\ },\ {\ "count": 841047,\ "value": "FR"\ },\ {\ "count": 813662,\ "value": "RU"\ },\ {\ "count": 780950,\ "value": "JP"\ },\ {\ "count": 724050,\ "value": "NL"\ },\ {\ "count": 690278,\ "value": "GB"\ },\ {\ "count": 623720,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-05",\ "values": [\ {\ "count": 8925134,\ "value": "US"\ },\ {\ "count": 3562358,\ "value": "CN"\ },\ {\ "count": 3194015,\ "value": "HK"\ },\ {\ "count": 2295253,\ "value": "DE"\ },\ {\ "count": 842567,\ "value": "FR"\ },\ {\ "count": 819042,\ "value": "RU"\ },\ {\ "count": 776267,\ "value": "JP"\ },\ {\ "count": 720592,\ "value": "NL"\ },\ {\ "count": 701723,\ "value": "GB"\ },\ {\ "count": 628504,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-06",\ "values": [\ {\ "count": 9003862,\ "value": "US"\ },\ {\ "count": 3633414,\ "value": "CN"\ },\ {\ "count": 3031289,\ "value": "HK"\ },\ {\ "count": 2235243,\ "value": "DE"\ },\ {\ "count": 856429,\ "value": "FR"\ },\ {\ "count": 798364,\ "value": "RU"\ },\ {\ "count": 785679,\ "value": "JP"\ },\ {\ "count": 712332,\ "value": "NL"\ },\ {\ "count": 689760,\ "value": "GB"\ },\ {\ "count": 626394,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-07",\ "values": [\ {\ "count": 9052786,\ "value": "US"\ },\ {\ "count": 3703914,\ "value": "CN"\ },\ {\ "count": 2964913,\ "value": "HK"\ },\ {\ "count": 2294334,\ "value": "DE"\ },\ {\ "count": 860906,\ "value": "FR"\ },\ {\ "count": 802756,\ "value": "RU"\ },\ {\ "count": 794979,\ "value": "JP"\ },\ {\ "count": 739510,\ "value": "NL"\ },\ {\ "count": 704568,\ "value": "GB"\ },\ {\ "count": 636669,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-08",\ "values": [\ {\ "count": 9029120,\ "value": "US"\ },\ {\ "count": 3615406,\ "value": "CN"\ },\ {\ "count": 2899078,\ "value": "HK"\ },\ {\ "count": 2273969,\ "value": "DE"\ },\ {\ "count": 842145,\ "value": "FR"\ },\ {\ "count": 813699,\ "value": "RU"\ },\ {\ "count": 810402,\ "value": "JP"\ },\ {\ "count": 741605,\ "value": "NL"\ },\ {\ "count": 708525,\ "value": "GB"\ },\ {\ "count": 655388,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-09",\ "values": [\ {\ "count": 8738658,\ "value": "US"\ },\ {\ "count": 3580990,\ "value": "CN"\ },\ {\ "count": 2858085,\ "value": "HK"\ },\ {\ "count": 2218715,\ "value": "DE"\ },\ {\ "count": 860269,\ "value": "FR"\ },\ {\ "count": 808995,\ "value": "RU"\ },\ {\ "count": 799835,\ "value": "JP"\ },\ {\ "count": 738421,\ "value": "NL"\ },\ {\ "count": 683597,\ "value": "GB"\ },\ {\ "count": 634799,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-10",\ "values": [\ {\ "count": 8444678,\ "value": "US"\ },\ {\ "count": 3527650,\ "value": "CN"\ },\ {\ "count": 2871371,\ "value": "HK"\ },\ {\ "count": 2199075,\ "value": "DE"\ },\ {\ "count": 861246,\ "value": "FR"\ },\ {\ "count": 811757,\ "value": "JP"\ },\ {\ "count": 807936,\ "value": "RU"\ },\ {\ "count": 721670,\ "value": "NL"\ },\ {\ "count": 674542,\ "value": "GB"\ },\ {\ "count": 642547,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-11",\ "values": [\ {\ "count": 8366581,\ "value": "US"\ },\ {\ "count": 3621566,\ "value": "CN"\ },\ {\ "count": 2993512,\ "value": "HK"\ },\ {\ "count": 2173666,\ "value": "DE"\ },\ {\ "count": 845704,\ "value": "FR"\ },\ {\ "count": 805183,\ "value": "JP"\ },\ {\ "count": 802826,\ "value": "RU"\ },\ {\ "count": 716129,\ "value": "NL"\ },\ {\ "count": 659536,\ "value": "GB"\ },\ {\ "count": 644204,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2022-12",\ "values": [\ {\ "count": 8366345,\ "value": "US"\ },\ {\ "count": 3834305,\ "value": "CN"\ },\ {\ "count": 3189882,\ "value": "HK"\ },\ {\ "count": 2186270,\ "value": "DE"\ },\ {\ "count": 815628,\ "value": "RU"\ },\ {\ "count": 806829,\ "value": "JP"\ },\ {\ "count": 731139,\ "value": "FR"\ },\ {\ "count": 720143,\ "value": "NL"\ },\ {\ "count": 695829,\ "value": "GB"\ },\ {\ "count": 647306,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2023-01",\ "values": [\ {\ "count": 7971216,\ "value": "US"\ },\ {\ "count": 3655723,\ "value": "CN"\ },\ {\ "count": 3195539,\ "value": "HK"\ },\ {\ "count": 2181171,\ "value": "DE"\ },\ {\ "count": 827645,\ "value": "FR"\ },\ {\ "count": 814161,\ "value": "RU"\ },\ {\ "count": 803636,\ "value": "JP"\ },\ {\ "count": 731403,\ "value": "NL"\ },\ {\ "count": 674526,\ "value": "GB"\ },\ {\ "count": 641548,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2023-02",\ "values": [\ {\ "count": 7517417,\ "value": "US"\ },\ {\ "count": 3445323,\ "value": "CN"\ },\ {\ "count": 2999832,\ "value": "HK"\ },\ {\ "count": 2069510,\ "value": "DE"\ },\ {\ "count": 793056,\ "value": "JP"\ },\ {\ "count": 792405,\ "value": "FR"\ },\ {\ "count": 788631,\ "value": "RU"\ },\ {\ "count": 703665,\ "value": "NL"\ },\ {\ "count": 643075,\ "value": "GB"\ },\ {\ "count": 635976,\ "value": "SG"\ }\ ]\ },\ {\ "key": "2023-03",\ "values": [\ {\ "count": 7594501,\ "value": "US"\ },\ {\ "count": 3654450,\ "value": "CN"\ },\ {\ "count": 3202689,\ "value": "HK"\ },\ {\ "count": 2101095,\ "value": "DE"\ },\ {\ "count": 813291,\ "value": "JP"\ },\ {\ "count": 808025,\ "value": "RU"\ },\ {\ "count": 801658,\ "value": "FR"\ },\ {\ "count": 709502,\ "value": "NL"\ },\ {\ "count": 660476,\ "value": "SG"\ },\ {\ "count": 637092,\ "value": "GB"\ }\ ]\ },\ {\ "key": "2023-04",\ "values": [\ {\ "count": 7458199,\ "value": "US"\ },\ {\ "count": 3686191,\ "value": "CN"\ },\ {\ "count": 3204505,\ "value": "HK"\ },\ {\ "count": 2070362,\ "value": "DE"\ },\ {\ "count": 801620,\ "value": "RU"\ },\ {\ "count": 782797,\ "value": "FR"\ },\ {\ "count": 781625,\ "value": "JP"\ },\ {\ "count": 697022,\ "value": "NL"\ },\ {\ "count": 654356,\ "value": "SG"\ },\ {\ "count": 617204,\ "value": "GB"\ }\ ]\ },\ {\ "key": "2023-05",\ "values": [\ {\ "count": 9206970,\ "value": "US"\ },\ {\ "count": 7554422,\ "value": "CN"\ },\ {\ "count": 4191755,\ "value": "HK"\ },\ {\ "count": 2472756,\ "value": "DE"\ },\ {\ "count": 1606691,\ "value": "JP"\ },\ {\ "count": 1080430,\ "value": "RU"\ },\ {\ "count": 980460,\ "value": "SG"\ },\ {\ "count": 979048,\ "value": "FR"\ },\ {\ "count": 857580,\ "value": "NL"\ },\ {\ "count": 741169,\ "value": "GB"\ }\ ]\ },\ {\ "key": "2023-06",\ "values": [\ {\ "count": 4551750,\ "value": "US"\ },\ {\ "count": 2907689,\ "value": "CN"\ },\ {\ "count": 1853804,\ "value": "HK"\ },\ {\ "count": 1229259,\ "value": "DE"\ },\ {\ "count": 702268,\ "value": "JP"\ },\ {\ "count": 547271,\ "value": "RU"\ },\ {\ "count": 514044,\ "value": "FR"\ },\ {\ "count": 449945,\ "value": "SG"\ },\ {\ "count": 443064,\ "value": "NL"\ },\ {\ "count": 384831,\ "value": "GB"\ }\ ]\ }\ ] } } Request $ shodan trends nginx --facets country:10 Response 2017-06 country US 9026331 CN 4905409 DE 923447 FR 708383 RU 497894 NL 371335 GB 342757 JP 235102 IE 226368 HK 188262 2017-07 country US 9382280 CN 5469201 DE 1003935 FR 730901 RU 519394 NL 386722 GB 367332 JP 246765 IE 237202 HK 209385 ... Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') print(api.trends.search('nginx', [('country', 10)])) Response { "total": 2223828570, "matches": [\ {"month": "2017-06", "count": 19799459},\ {"month": "2017-07", "count": 21077099},\ ...\ ], "facets": { "country": [\ {\ "key": "2017-06",\ "values": [\ {"count": 9026331, "value": "US"},\ {"count": 4905409, "value": "CN"},\ {"count": 923447, "value": "DE"},\ {"count": 708383, "value": "FR"},\ {"count": 497894, "value": "RU"},\ {"count": 371335, "value": "NL"},\ {"count": 342757, "value": "GB"},\ {"count": 235102, "value": "JP"},\ {"count": 226368, "value": "IE"},\ {"count": 188262, "value": "HK"},\ ],\ },\ {\ "key": "2017-07",\ "values": [\ {"count": 9382280, "value": "US"},\ {"count": 5469201, "value": "CN"},\ {"count": 1003935, "value": "DE"},\ {"count": 730901, "value": "FR"},\ {"count": 519394, "value": "RU"},\ {"count": 386722, "value": "NL"},\ {"count": 367332, "value": "GB"},\ {"count": 246765, "value": "JP"},\ {"count": 237202, "value": "IE"},\ {"count": 209385, "value": "HK"},\ ],\ },\ ...\ ] }, } ###### GET/api/v1/search/filters ###### **List all filters that can be used when searching** This method returns a list of search filters that can be used in the search query. ###### **Request URL** https://trends.shodan.io/api/v1/search/filters?key={YOUR_API_KEY} **Examples** cURL Python Request $ curl -X GET "https://trends.shodan.io/api/v1/search/filters?key={YOUR_API_KEY}" Response [\ "all",\ "asn",\ "city",\ "country",\ "cpe",\ "has_ipv6",\ "has_screenshot",\ "has_ssl",\ "has_vuln",\ "hash",\ "hostname",\ "http.component",\ "http.component_category",\ "http.favicon.hash",\ "http.html_hash",\ "http.robots_hash",\ "http.securitytxt",\ "http.status",\ "http.title",\ "http.waf",\ "ip",\ "isp",\ "net",\ "org",\ "os",\ "port",\ "product",\ "region",\ "screenshot.label",\ "ssh.fingerprint",\ "ssl",\ "ssl.alpn",\ "ssl.cert.fingerprint",\ "ssl.cert.issuer.cn",\ "ssl.cert.serial",\ "ssl.cert.subject.cn",\ "ssl.ja3s",\ "ssl.jarm",\ "ssl.version",\ "state",\ "tag",\ "title",\ "version",\ "vuln"\ ] Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') print(api.trends.search_filters()) Response [\ "all",\ "asn",\ "city",\ "country",\ "cpe",\ "has_ipv6",\ "has_screenshot",\ "has_ssl",\ "has_vuln",\ "hash",\ "hostname",\ "http.component",\ "http.component_category",\ "http.favicon.hash",\ "http.html_hash",\ "http.robots_hash",\ "http.securitytxt",\ "http.status",\ "http.title",\ "http.waf",\ "ip",\ "isp",\ "net",\ "org",\ "os",\ "port",\ "product",\ "region",\ "screenshot.label",\ "ssh.fingerprint",\ "ssl",\ "ssl.alpn",\ "ssl.cert.fingerprint",\ "ssl.cert.issuer.cn",\ "ssl.cert.serial",\ "ssl.cert.subject.cn",\ "ssl.ja3s",\ "ssl.jarm",\ "ssl.version",\ "state",\ "tag",\ "title",\ "version",\ "vuln",\ ] ###### GET/api/v1/search/facets ###### **List all search facets** This method returns a list of facets that can be used to get a breakdown of the top values for a property. ###### **Request URL** https://trends.shodan.io/api/v1/search/facets?key={YOUR_API_KEY} **Examples** cURL Python Request $ curl -X GET "https://trends.shodan.io/api/v1/search/facets?key={YOUR_API_KEY}" Response [\ "asn",\ "city",\ "country",\ "domain",\ "has_screenshot",\ "hash",\ "http.component",\ "http.component_category",\ "http.favicon.hash",\ "http.html_hash",\ "http.robots_hash",\ "http.status",\ "http.title",\ "http.waf",\ "ip",\ "isp",\ "mongodb.database.name",\ "org",\ "os",\ "port",\ "product",\ "redis.key",\ "region",\ "rsync.module",\ "screenshot.label",\ "ssh.fingerprint",\ "ssl.alpn",\ "ssl.cert.fingerprint",\ "ssl.cert.issuer.cn",\ "ssl.cert.serial",\ "ssl.cert.subject.cn",\ "ssl.ja3s",\ "ssl.jarm",\ "ssl.version",\ "state",\ "tag",\ "version",\ "vuln",\ "vuln.verified"\ ] Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') print(api.trends.search_facets()) Response [\ "asn",\ "city",\ "country",\ "domain",\ "has_screenshot",\ "hash",\ "http.component",\ "http.component_category",\ "http.favicon.hash",\ "http.html_hash",\ "http.robots_hash",\ "http.status",\ "http.title",\ "http.waf",\ "ip",\ "isp",\ "mongodb.database.name",\ "org",\ "os",\ "port",\ "product",\ "redis.key",\ "region",\ "rsync.module",\ "screenshot.label",\ "ssh.fingerprint",\ "ssl.alpn",\ "ssl.cert.fingerprint",\ "ssl.cert.issuer.cn",\ "ssl.cert.serial",\ "ssl.cert.subject.cn",\ "ssl.ja3s",\ "ssl.jarm",\ "ssl.version",\ "state",\ "tag",\ "version",\ "vuln",\ "vuln.verified",\ ] ###### Products * [Monitor](https://monitor.shodan.io/) * [Search Engine](https://beta.shodan.io/) * [Developer API](https://developer.shodan.io/) * [Maps](https://maps.shodan.io/) * [Bulk Data](https://enterprise.shodan.io/) * [Images](https://images.shodan.io/) * [Snippets](https://snippets.shodan.io/) ###### Pricing * [Membership](https://www.shodan.io/store/member) * [API Subscriptions](https://developer.shodan.io/pricing) * [Enterprise](https://enterprise.shodan.io/) ###### Contact Us * [support@shodan.io](mailto:support@shodan.io) * ##### [](https://twitter.com/shodanhq)   [](https://www.linkedin.com/company/shodan)   [](https://www.facebook.com/shodan.io) Shodan ® - All rights reserved --- # Shodan Developer * [Shodan](https://www.shodan.io/) * [Maps](https://maps.shodan.io/) * [Images](https://images.shodan.io/) * [Monitor](https://monitor.shodan.io/) * [More...](https://www.shodan.io/about/products) ### API Reference _API_ Documentation =================== 1. [Requirements](https://developer.shodan.io/api/requirements) 2. [Introduction](https://developer.shodan.io/api/introduction) 3. [Clients](https://developer.shodan.io/api/clients) 4. [REST API Documentation](https://developer.shodan.io/api) 5. [Streaming API Documentation](https://developer.shodan.io/api/stream) 6. [Trends API Documentation](https://developer.shodan.io/api/trends) _Appendix_ ========== 1. [Banner Specification](https://datapedia.shodan.io/) 2. [Search Filters](https://www.shodan.io/search/filters) [![](https://developer.shodan.io/static/img/shields/shields-openapi.svg)](https://developer.shodan.io/api/openapi-stream.json) [![](https://developer.shodan.io/static/img/shields/shields-postman-collection.svg)](https://www.postman.com/shodanhq/workspace/shodan/collection/27459245-eb8691b1-2677-45fa-b68f-032dad693aa6) The Streaming API is an HTTP-based service that returns a real-time stream of data collected by Shodan. The stream returns the information as a JSON-encoded string using 2 output formats that can be set using the "t" URL parameter: * **json:**Each item is separated by a newline. For example, the Banners stream returns 1 banner per line where the banner contains all of the data that was just collected for a given service on the Internet. * **sse:**Outputs the JSON data using the Server-Sent Events protocol, making it easy to consume directly in the browser. Each method also supports an optional **debug** query parameter that adds a JSON object to the stream whenever messages are discarded. This can be helpful when debugging possible connection issues between the Streaming API servers and the client. Add **debug=1** to the query URL and then a JSON object as follows gets included in the stream: { "event": "debug", "discarded": 41 } The base URL for all of these methods is: https://stream.shodan.io Data _Streams_ **Enterprise** ============================= ###### GET/shodan/banners ###### **Banners** This stream provides ALL of the data that Shodan collects. Use this stream if you need access to everything and/ or want to store your own Shodan database locally. If you only care about specific ports, please use the Ports stream. ###### **Request URL** https://stream.shodan.io/shodan/banners?key={YOUR_API_KEY} **Examples** cURL Shodan CLI Python Request $ curl -X GET "https://stream.shodan.io/shodan/banners?key={YOUR_API_KEY}" Response { "hash": 1015805840, "timestamp": "2021-01-28T04:16:08.387364", "hostnames": [\ "177-70-193-184-msltr-cw-1.visaonet.com.br"\ ], "org": "L M Tiko Kamide - Sva", "data": "SIP/2.0 404 Not Found\r\nFrom: ;tag=root\r\nTo: ;tag=b235f0-b146c1b8-13c4-50029-ec2e4-6c44dfcf-ec2e4\r\nCall-ID: 50000\r\nCSeq: 42 OPTIONS\r\nVia: SIP/2.0/UDP nm;received=224.238.62.40;rport=26810;branch=foo\r\nSupported: replaces,100rel,timer\r\nAccept: application/sdp\r\nAllow: INVITE,ACK,CANCEL,BYE,OPTIONS,REFER,INFO,NOTIFY,PRACK,MESSAGE\r\nContent-Length: 0\r\n\r\n", "port": 5060, "transport": "udp", "info": "SIP end point; Status: 404 Not Found", "isp": "L M Tiko Kamide - Sva", "asn": "AS28359", "location": { "country_code3": null, "city": "Jardim Alegre", "region_code": "PR", "postal_code": null, "longitude": -51.7213, "country_code": "BR", "latitude": -24.2123, "country_name": "Brazil", "area_code": null, "dma_code": null }, "ip": 2974204344, "domains": [\ "visaonet.com.br"\ ], "ip_str": "177.70.193.184", "_id": "45ad6383-1b1d-4c5d-8584-d586fbdefbc3", "os": null, "_shodan": { "crawler": "bf213bc419cc8491376c12af31e32623c1b6f467", "options": {}, "id": "220ef463-756f-4446-a89f-685053da8865", "module": "sip", "ptr": true }, "opts": {} } { "hash": 999960243, "product": "nginx", "http": { "robots_hash": null, "redirects": [], "securitytxt": null, "title": "400 The plain HTTP request was sent to HTTPS port", "sitemap_hash": null, "robots": null, "server": "nginx", "host": "64.120.103.17", "html": "\r\n400 The plain HTTP request was sent to HTTPS port\r\n\r\n400 Bad Request\r\nThe plain HTTP request was sent to HTTPS port\r\nnginx\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n", "location": "/", "components": {}, "html_hash": 556516568, "sitemap": null, "securitytxt_hash": null }, "timestamp": "2021-01-28T04:16:07.200581", "hostnames": [], "org": "Leaseweb USA", "data": "HTTP/1.1 400 Bad Request\r\nServer: nginx\r\nDate: Thu, 28 Jan 2021 04:16:06 GMT\r\nContent-Type: text/html\r\nContent-Length: 666\r\nConnection: close\r\n\r\n", "port": 443, "transport": "tcp", "isp": "Leaseweb USA", "cpe23": [\ "cpe:2.3:a:igor_sysoev:nginx"\ ], "cpe": [\ "cpe:/a:igor_sysoev:nginx"\ ], "asn": "AS395954", "location": { "country_code3": null, "city": null, "region_code": null, "postal_code": null, "longitude": -97.822, "country_code": "US", "latitude": 37.751, "country_name": "United States", "area_code": null, "dma_code": null }, "ip": 1081632529, "domains": [], "ip_str": "64.120.103.17", "_id": "d4289648-469a-465d-abb7-2c62700a0ce6", "os": null, "_shodan": { "crawler": "6d64feef3c6422575abbbf34b1a2e0d9a29b812d", "options": {}, "id": "03a63049-a9dd-4194-8d99-9e342ade5089", "module": "auto", "ptr": true }, "opts": {} } ... Request $ shodan stream Response 109.70.101.126 10443 HTTP/1.1 200 OK\r\nDate: Thu, 28 Jan 2021 04:19:19 GMT\r\nServer: xxxxxxxx-xxxxx\r\nVary: Accept-Encoding\r\nContent-Length: 79\r\nContent-Type: text/html; charset=utf-8\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nX-XSS-Protection: 1; mode=block\r\nX-UA-Compatible: IE=Edge\r\n\r\n 198.1.94.209 2083 thehovercam.thehovercam.com HTTP/1.1 401 Access Denied\r\nConnection: close\r\nContent-Type: text/html; charset="utf-8"\r\nDate: Thu, 28 Jan 2021 04:19:45 GMT\r\nSet-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\r\nSet-Cookie: cpsession=%3aKF7VjeDJlFfsEZ7y%2c19ed6a6b5dfd4383c6c1b334518bb6d7; HttpOnly; path=/; port=2083; secure\r\nSet-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\r\nSet-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2083; secure\r\nSet-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\r\nSet-Cookie: imp_key=expired; HttpOnly; domain=198.1.94.209; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2083; secure\r\nSet-Cookie: key=expired; HttpOnly; domain=198.1.94.209; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/3rdparty/squirrelmail/; port=2083; secure\r\nSet-Cookie: SQMSESSID=expired; HttpOnly; domain=198.1.94.209; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\r\nCache-Control: no-cache, must-revalidate\r\nContent-Length: 42455\r\n\r\n 54.208.97.80 80 ec2-54-208-97-80.compute-1.amazonaws.com HTTP/1.1 401 Unauthorized\r\nServer: nginx/1.10.3 (Ubuntu)\r\nDate: Thu, 28 Jan 2021 04:19:58 GMT\r\nContent-Type: text/html\r\nContent-Length: 606\r\nConnection: keep-alive\r\nWWW-Authenticate: Basic realm="Prometheus server authentication"\r\n\r\n ... Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') for banner in api.stream.banners(raw=False, timeout=None): print(banner) Response { "hash": 1025854405, "product": "nginx", "http": { "robots_hash": None, "redirects": [], "securitytxt": None, "title": "没有找到站点", "sitemap_hash": None, "robots": None, "server": "nginx", "host": "45.32.85.231", "html": '\n\n\n\n没有找到站点\n\n*{margin: 0;padding: 0;color:#444}\nbody{font-size: 14px;font-family: "宋体"}\n.main{width: 600px;margin: 10% auto;}\n.title{background: #20a53a;color: #fff;font-size: 16px;height: 40px;line-height: 40px;padding-left: 20px;}\n.content{background-color:#f3f7f9; height: 300px;border: 1px dashed #c6d9b6;padding: 20px}\n.t1{border-bottom: 1px dashed #c6d9b6;color: #ff4000;font-weight: bold; margin: 0 0 20px; padding-bottom: 18px;}\n.t2{margin-bottom: 8px; font-weight:bold}\nol{margin: 0 0 20px 22px;padding: 0;}\nol li{line-height: 30px}\n\n\n\n\n\t\n\t\t没有找到站点\n\t\t\n\t\t\t您的请求在Web服务器中没有找到对应的站点！\n\t\t\t可能原因：\n\t\t\t\n\t\t\t\t您没有将此域名或IP绑定到对应站点!\n\t\t\t\t配置文件未生效!\n\t\t\t\n\t\t\t如何解决：\n\t\t\t\n\t\t\t\t检查是否已经绑定到对应站点，若确认已绑定，请尝试重载Web服务；\n\t\t\t\t检查端口是否正确；\n\t\t\t\t若您使用了CDN产品，请尝试清除CDN缓存；\n\t\t\t\t普通网站访客，请联系网站管理员；\n\t\t\t\n\t\t\n\t\n\n\n', "location": "/", "components": {}, "html_hash": 617769728, "sitemap": None, "securitytxt_hash": None, }, "tags": ["cloud"], "timestamp": "2021-01-28T04:23:43.750718", "cloud": {"region": None, "service": None, "provider": "Vultr"}, "hostnames": ["45.32.85.231.vultr.com"], "org": "Choopa, LLC", "data": 'HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu,28 Jan 2021 04: 23: 43 GMT\r\nContent-Type: text/html\r\nContent-Length: 1326\r\nLast-Modified: Wed,26 Apr 2017 08: 03: 47 GMT\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: "59005463-52e"\r\nAccept-Ranges: bytes\r\n\r\n', "port": 80, "cpe23": ["cpe:2.3:a:igor_sysoev:nginx"], "isp": "Choopa, LLC", "transport": "tcp", "cpe": ["cpe:/a:igor_sysoev:nginx"], "asn": "AS20473", "location": { "country_code3": None, "city": "Los Angeles", "region_code": "CA", "postal_code": None, "longitude": -118.2606, "country_code": "US", "latitude": 34.0729, "country_name": "United States", "area_code": None, "dma_code": 803, }, "ip": 757093863, "domains": ["vultr.com"], "ip_str": "45.32.85.231", "_id": "1f0c3474-d644-46b0-9981-b65b78ee1122", "os": None, "_shodan": { "crawler": "3ef1c9c3e19275ff8681372c71e65f4535fc5760", "options": {}, "id": "ae1c6bfd-31c5-47e4-8ae0-2e3fc07ef609", "module": "http", "ptr": True, }, "opts": {}, } { "hash": -170658834, "http": { "robots_hash": None, "redirects": [], "securitytxt": None, "title": "401 Unauthorized", "sitemap_hash": None, "robots": None, "server": None, "host": "37.152.229.10", "html": '\n\n 401 Unauthorized\n\n\n 401 Unauthorized\n \n\n\n', "location": "/", "components": {}, "html_hash": -1603531589, "sitemap": None, "securitytxt_hash": None, }, "timestamp": "2021-01-28T04:23:46.822454", "hostnames": [], "org": "Plusnet", "data": 'HTTP/1.1 401 Unauthorized\r\nWWW-Authenticate: Digest realm="", qop="auth", nonce="903dc1d70fb04c9855ec9cb1c2f3f5a9:60123c50:199b94d5", opaque="0"\r\nContent-Type: text/html\r\nCache-Control: public\r\nPragma: cache\r\nExpires: Thu,28 Jan 2021 04: 23: 44 GMT\r\nDate: Thu,28 Jan 2021 04: 23: 44 GMT\r\nLast-Modified: Thu,08 Nov 2018 16: 22: 35 GMT\r\nAccept-Ranges: bytes\r\nConnection: close\r\n\r\n', "port": 4567, "transport": "tcp", "isp": "Plusnet", "asn": "AS6871", "location": { "country_code3": None, "city": "East Linton", "region_code": "SCT", "postal_code": None, "longitude": -2.6547, "country_code": "GB", "latitude": 55.9875, "country_name": "United Kingdom", "area_code": None, "dma_code": None, }, "ip": 630777098, "domains": [], "ip_str": "37.152.229.10", "_id": "0334876b-68d1-44b4-9cd9-0b0f8b119bd7", "os": None, "_shodan": { "crawler": "3ef1c9c3e19275ff8681372c71e65f4535fc5760", "options": {}, "id": "154e6d4a-263e-4fce-bc65-43138b063379", "module": "http-simple-new", "ptr": True, }, "opts": {}, } ... ###### GET/shodan/asn/{asn} ###### **Filtered by ASN** This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in devices located in certain ASNs. ###### **Request URL** https://stream.shodan.io/shodan/asn/{asn}?key={YOUR_API_KEY} ###### **Parameters** * **asn:** \[String\] Comma-separated list of ASNs; example "3303,32475" **Examples** cURL Shodan CLI Python Request $ curl -X GET "https://stream.shodan.io/shodan/asn/3303,32475?key={YOUR_API_KEY}" Response { "hash": 1574478560, "http": { "robots_hash": null, "redirects": [], "securitytxt": null, "title": null, "sitemap_hash": null, "robots": null, "server": "LiteSpeed", "host": "96.127.186.100", "html": "", "location": "/", "html_hash": 0, "sitemap": null, "securitytxt_hash": null }, "timestamp": "2021-01-28T04:29:02.206862", "hostnames": [\ "ams-pnode1.websitehostserver.net"\ ], "org": "SingleHop LLC", "data": "HTTP/1.0 301 Moved Permanently\r\nLocation: https://96.127.186.100/\r\nCache-Control: private, no-cache, max-age=0\r\nPragma: no-cache\r\nServer:LiteSpeed\r\nContent-Length: 0\r\nConnection: Close\r\n\r\n", "port": 443, "transport": "tcp", "isp": "SingleHop LLC", "asn": "AS32475", "location": { "country_code3": null, "city": null, "region_code": null, "postal_code": null, "longitude": -97.822, "country_code": "US", "latitude": 37.751, "country_name": "United States", "area_code": null, "dma_code": null }, "ip": 1618983524, "domains": [\ "websitehostserver.net"\ ], "ip_str": "96.127.186.100", "_id": "97533624-bd22-46ce-9395-17ad28b304d6", "os": null, "_shodan": { "crawler": "6d64feef3c6422575abbbf34b1a2e0d9a29b812d", "options": {}, "id": "1dbb01bb-5cd8-46b5-94d0-aee415b8c9ed", "module": "auto", "ptr": true }, "opts": {} } { "hash": -1008615971, "product": "AkamaiGHost", "http": { "robots_hash": null, "redirects": [], "securitytxt": null, "title": "Invalid URL", "sitemap_hash": null, "robots": null, "server": "AkamaiGHost", "host": "104.66.169.60", "html": '...', "location": "/", "components": {}, "html_hash": 1470236789, "sitemap": null, "securitytxt_hash": null, }, "timestamp": "2021-01-28T04:29:01.265871", "hostnames": ["a104-66-169-60.deploy.static.akamaitechnologies.com"], "org": "Akamai Technologies", "data": "HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 208\r\nExpires: Thu, 28 Jan 2021 04:29:01 GMT\r\nDate: Thu, 28 Jan 2021 04:29:01 GMT\r\nConnection: close\r\n\r\n", "port": 80, "transport": "tcp", "info": "Akamai's HTTP Acceleration & Mirror service", "isp": "Akamai Technologies", "asn": "AS3303", "location": { "country_code3": null, "city": "Zurich", "region_code": "ZH", "postal_code": null, "longitude": 8.5394, "country_code": "CH", "latitude": 47.3624, "country_name": "Switzerland", "area_code": null, "dma_code": null, }, "ip": 1749199164, "domains": ["akamaitechnologies.com"], "ip_str": "104.66.169.60", "_id": "93aa0f66-a2fb-44bc-9b04-6488b776b915", "os": null, "_shodan": { "crawler": "530935e60964ee0af497843f10b63adf84a753e3", "options": {}, "id": "81d22eeb-60e5-4937-93af-557fcd7c089e", "module": "http", "ptr": true, }, "opts": {}, } ... Request $ shodan stream --asn 3303,32475 Response 108.178.33.110 465 nts.newtechservics.net 220-nts.newtechservics.net ESMTP Exim 4.93 #2 Wed, 27 Jan 2021 22:30:46 -0600 \r\n220-We do not authorize the use of this system to transport unsolicited, \r\n220 and/or bulk e-mail.\r\n250-nts.newtechservics.net Hello 224.211.96.163 [224.211.96.163]\r\n250-SIZE 104857600\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-AUTH PLAIN LOGIN\r\n250 HELP\r\n 194.209.127.35 443 HTTP/1.1 400 Bad Request\r\nDate: Thu, 28 Jan 2021 04:30:55 GMT\r\nServer: Apache\r\nContent-Length: 362\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n 198.91.83.212 587 220-so7.infinitysrv.com ESMTP Exim 4.93 #2 Wed, 27 Jan 2021 23:30:14 -0500 \r\n220-We do not authorize the use of this system to transport unsolicited, \r\n220 and/or bulk e-mail.\r\n250-so7.infinitysrv.com Hello 224.102.202.156 [224.102.202.156]\r\n250-SIZE 52428800\r\n250-8BITMIME\r\n250-PIPELINING\r\n250-STARTTLS\r\n250 HELP\r\n ... Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') for banner in api.stream.asn(asn=['3303', '32475'], raw=False, timeout=None): print(banner) Response { "product": "OpenSSH", "hash": -1466980181, "timestamp": "2021-01-28T04:32:43.847222", "hostnames": ["198.69.174.178.static.wline.lns.sme.cust.swisscom.ch"], "ssh": { "hassh": "95bb891b9ee1c49ec74906ec70b53766", "fingerprint": "93:34:09:e1:83:8c:b9:14:24:f1:47:dc:87:db:d5:13", "mac": "hmac-sha2-256", "cipher": "aes128-ctr", "key": "AAAAB3NzaC1yc2EAAAADAQABAAABAQDIU zXYBIxlp9lna4xcY3WZou5L55r9rMgMDBYrDkg3y6V\nGLIQZUFo nxZFq6Lwvl29G3jTZoFRTnZvuuJiHzM5iAqbVLPwjMglD1VBTGt M9SPL85T/ltBys\n/kBp0aOFmJ50MqBBpmJBoGxSRruIlrdeWrpomT3T4D3VvfE2iTtZr15GREN/829CX0D8cDe5FU8J\nL7FxCiY8jmKjCh3d5PCyflK7xV6vNiueUXVGwTM7SaqggOjIRWpLq x9FtfVSUhlPC61vEdqbwvO\ncmMCpYCX81chG/ARrbGwTKPKZpEpdGUJIsrqYRiNO47Wtqubu4qgwsAxNwfvpuTqRn6F\n", "kex": { "languages": [""], "server_host_key_algorithms": [\ "ssh-rsa",\ "ssh-dss",\ "ecdsa-sha2-nistp256",\ "ssh-ed25519",\ ], "encryption_algorithms": [\ "chacha20-poly1305@openssh.com",\ "aes256-gcm@openssh.com",\ "aes128-gcm@openssh.com",\ "aes256-ctr",\ "aes192-ctr",\ "aes128-ctr",\ ], "kex_follows": False, "unused": 0, "kex_algorithms": [\ "curve25519-sha256@libssh.org",\ "ecdh-sha2-nistp256",\ "ecdh-sha2-nistp384",\ "ecdh-sha2-nistp521",\ "diffie-hellman-group-exchange-sha256",\ "diffie-hellman-group-exchange-sha1",\ "diffie-hellman-group14-sha1",\ "diffie-hellman-group1-sha1",\ ], "compression_algorithms": ["none", "zlib@openssh.com"], "mac_algorithms": [\ "umac-128-etm@openssh.com",\ "hmac-sha2-256-etm@openssh.com",\ "hmac-sha2-512-etm@openssh.com",\ "umac-128@openssh.com",\ "hmac-sha2-256",\ "hmac-sha2-512",\ ], }, "type": "ssh-rsa", }, "org": "Swisscom", "data": "SSH-2.0-OpenSSH_6.6.1\nKey type: ssh-rsa\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQDIU zXYBIxlp9lna4xcY3WZou5L55r9rMgMDBYrDkg3y6V\nGLIQZUFo nxZFq6Lwvl29G3jTZoFRTnZvuuJiHzM5iAqbVLPwjMglD1VBTGt M9SPL85T/ltBys\n/kBp0aOFmJ50MqBBpmJBoGxSRruIlrdeWrpomT3T4D3VvfE2iTtZr15GREN/829CX0D8cDe5FU8J\nL7FxCiY8jmKjCh3d5PCyflK7xV6vNiueUXVGwTM7SaqggOjIRWpLq x9FtfVSUhlPC61vEdqbwvO\ncmMCpYCX81chG/ARrbGwTKPKZpEpdGUJIsrqYRiNO47Wtqubu4qgwsAxNwfvpuTqRn6F\nFingerprint: 93:34:09:e1:83:8c:b9:14:24:f1:47:dc:87:db:d5:13\n\nKex Algorithms:\n\tcurve25519-sha256@libssh.org\n\tecdh-sha2-nistp256\n\tecdh-sha2-nistp384\n\tecdh-sha2-nistp521\n\tdiffie-hellman-group-exchange-sha256\n\tdiffie-hellman-group-exchange-sha1\n\tdiffie-hellman-group14-sha1\n\tdiffie-hellman-group1-sha1\n\nServer Host Key Algorithms:\n\tssh-rsa\n\tssh-dss\n\tecdsa-sha2-nistp256\n\tssh-ed25519\n\nEncryption Algorithms:\n\tchacha20-poly1305@openssh.com\n\taes256-gcm@openssh.com\n\taes128-gcm@openssh.com\n\taes256-ctr\n\taes192-ctr\n\taes128-ctr\n\nMAC Algorithms:\n\tumac-128-etm@openssh.com\n\thmac-sha2-256-etm@openssh.com\n\thmac-sha2-512-etm@openssh.com\n\tumac-128@openssh.com\n\thmac-sha2-256\n\thmac-sha2-512\n\nCompression Algorithms:\n\tnone\n\tzlib@openssh.com\n\n", "port": 22, "cpe23": ["cpe:2.3:a:openbsd:openssh:6.6.1"], "info": "protocol 2.0", "isp": "Swisscom", "transport": "tcp", "cpe": ["cpe:/a:openbsd:openssh:6.6.1"], "asn": "AS3303", "version": "6.6.1", "location": { "country_code3": None, "city": "Rotkreuz", "region_code": "ZG", "postal_code": None, "longitude": 8.4237, "country_code": "CH", "latitude": 47.1412, "country_name": "Switzerland", "area_code": None, "dma_code": None, }, "ip": 2997765574, "domains": ["swisscom.ch"], "ip_str": "178.174.69.198", "_id": "869b9926-ec14-4f8f-9874-958ac0f594e2", "os": None, "_shodan": { "crawler": "78039f81a0245caa8ab71c98182f0eff0ce52aab", "options": {}, "id": "a25352e1-c6ee-4f16-9644-c5f0123b3c07", "module": "ssh", "ptr": True, }, "opts": {}, } { "ip": 2999022327, "hash": 1615177765, "timestamp": "2021-01-28T04:32:31.377469", "hostnames": ["247.114.193.178.dynamic.wline.res.cust.swisscom.ch"], "org": "Swisscom", "data": "NTP\nprotocolversion: 3\nstratum: 3\nleap: 0\nprecision: -19\nrootdelay: 0.0144958496094\nrootdisp: 0.0212249755859\nrefid: 3283747942\nreftime: 3820795962.41\npoll: 0\n\n", "port": 123, "transport": "udp", "isp": "Swisscom", "asn": "AS3303", "location": { "country_code3": None, "city": "Bedano", "region_code": "TI", "postal_code": None, "longitude": 8.9194, "country_code": "CH", "latitude": 46.0512, "country_name": "Switzerland", "area_code": None, "dma_code": None, }, "ntp": { "root_delay": 0.014495849609375, "clock_offset": -0.16389727592468262, "precision": -19, "reftime": 1611807162.412037, "refid": 3283747942, "delay": 0.35701704025268555, "leap": 0, "version": 3, "root_dispersion": 0.0212249755859375, "stratum": 3, "poll": 0, "monlist": None, }, "domains": ["swisscom.ch"], "ip_str": "178.193.114.247", "_id": "6948a7a3-b461-4085-beea-12a81054f0ea", "os": None, "_shodan": { "crawler": "6f55d367cbfc8dfe8f206264b1aea3853dd5b496", "options": {}, "id": "027c411a-59aa-48ca-a87c-558ad6b39708", "module": "ntp", "ptr": True, }, "opts": { "raw": "1c0300ed000003b60000056fc3ba0466e3bcb83a697b40f3e3bcbcdf04f9b000e3bcbcdf08b73d09e3bcbcdf08e0a83c", "ntp": {}, }, } ... ###### GET/shodan/countries/{countries} ###### **Filtered by Country** This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in devices located in certain countries. ###### **Request URL** https://stream.shodan.io/shodan/countries/{countries}?key={YOUR_API_KEY} ###### **Parameters** * **countries:** \[String\] Comma-separated list of countries indicated by their 2 letter code; example "DE,US" **Examples** cURL Shodan CLI Python Request $ curl -X GET "https://stream.shodan.io/shodan/countries/DE,US?key={YOUR_API_KEY}" Response { "hash": -947592388, "product": "Apache httpd", "http": { "robots_hash": null, "redirects": [], "securitytxt": null, "title": null, "sitemap_hash": null, "robots": null, "server": "Apache", "host": "50.63.119.180", "html": "\n\n\npageok\n\n", "location": "/", "components": {}, "html_hash": -295716025, "sitemap": null, "securitytxt_hash": null }, "timestamp": "2021-01-28T04:37:03.375136", "hostnames": [\ "ip-50-63-119-180.ip.secureserver.net"\ ], "org": "GoDaddy.com, LLC", "data": "HTTP/1.1 200 OK\r\nDate: Thu, 28 Jan 2021 04:36:59 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 26 Apr 2013 01:57:05 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 76\r\nVary: Accept-Encoding\r\nContent-Type: text/html\r\n\r\n", "port": 80, "transport": "tcp", "isp": "GoDaddy.com, LLC", "cpe23": [\ "cpe:2.3:a:apache:http_server"\ ], "cpe": [\ "cpe:/a:apache:http_server"\ ], "asn": "AS26496", "location": { "country_code3": null, "city": null, "region_code": null, "postal_code": null, "longitude": -97.822, "country_code": "US", "latitude": 37.751, "country_name": "United States", "area_code": null, "dma_code": null }, "ip": 843020212, "domains": [\ "secureserver.net"\ ], "ip_str": "50.63.119.180", "_id": "85efede2-0730-422c-9e50-bb78054c6d82", "os": null, "_shodan": { "crawler": "6d64feef3c6422575abbbf34b1a2e0d9a29b812d", "options": {}, "id": "e418aa3b-c938-4124-be79-1ae40eaec50c", "module": "auto", "ptr": true }, "opts": {} } { "hash": 561623480, "tags": [\ "cloud"\ ], "timestamp": "2021-01-28T04:37:05.314514", "hostnames": [\ "server-13-249-211-149.blr50.r.cloudfront.net"\ ], "org": "Amazon CloudFront", "data": "HTTP/1.1 400 Bad Request\r\nServer: CloudFront\r\nDate: Thu, 28 Jan 2021 04:37:05 GMT\r\nContent-Type: text/html\r\nContent-Length: 915\r\nConnection: close\r\nX-Cache: Error from cloudfront\r\nVia: 1.1 b5f6daf006d688b2f5eef74923ab8562.cloudfront.net (CloudFront)\r\nX-Amz-Cf-Pop: BLR50-C3\r\nX-Amz-Cf-Id: jxkyP17GNCKAKARB8a3XpoQBB2yCkyNFv16WnkukSV5z8Sm-vcNBiA==\r\n\r\n\n\nERROR: The request could not be satisfied\n\n400 ERROR\nThe request could not be satisfied.\n\nBad request.\nWe can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.\n\nIf you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.\n\n\n\nGenerated by cloudfront (CloudFront)\nRequest ID: jxkyP17GNCKAKARB8a3XpoQBB2yCkyNFv16WnkukSV5z8Sm-vcNBiA==\n\n\n\n", "port": 443, "cloud": { "region": "GLOBAL", "service": "AMAZON", "provider": "Amazon" }, "isp": "Amazon CloudFront", "transport": "tcp", "asn": "AS16509", "location": { "country_code3": null, "city": null, "region_code": null, "postal_code": null, "longitude": -97.822, "country_code": "US", "latitude": 37.751, "country_name": "United States", "area_code": null, "dma_code": null }, "ip": 234476437, "domains": [\ "cloudfront.net"\ ], "ip_str": "13.249.211.149", "_id": "da4400f5-e491-4b6b-a59d-87daa61f5a6f", "os": null, "_shodan": { "crawler": "cdd92e2d835a37d2798fa6c7105171f4d214012f", "options": {}, "id": "fccd014d-c1fb-4ccc-9608-c0f918994cd6", "module": "https", "ptr": true }, "opts": {} } ... Request $ shodan stream --countries DE,US Response 104.119.235.104 443 a104-119-235-104.deploy.static.akamaitechnologies.com HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 208\r\nExpires: Thu, 28 Jan 2021 04:42:31 GMT\r\nDate: Thu, 28 Jan 2021 04:42:31 GMT\r\nConnection: close\r\n\r\n 94.217.105.167 5060 dslb-094-217-105-167.094.217.pools.vodafone-ip.de SIP/2.0 404 Not Found\r\nVia: SIP/2.0/UDP nm;branch=foo;rport=26810;received=224.81.229.144\r\nFrom: ;tag=root\r\nTo: ;tag=264F54AE66322F72\r\nCall-ID: 50000\r\nCSeq: 42 OPTIONS\r\nUser-Agent: FRITZ!OS\r\nContent-Length: 0\r\n\r\n 217.245.253.62 5060 pd9f5fd3e.dip0.t-ipconnect.de SIP/2.0 404 Not Found\r\nVia: SIP/2.0/UDP nm;branch=foo;rport=26810;received=224.233.255.101\r\nFrom: ;tag=root\r\nTo: ;tag=BE51C3DE7CA9410B\r\nCall-ID: 50000\r\nCSeq: 42 OPTIONS\r\nUser-Agent: FRITZ!OS\r\nContent-Length: 0\r\n\r\n ... Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') for banner in api.stream.countries(countries=['DE', 'US'], raw=False, timeout=None): print(banner) Response { "hash": 1811259547, "product": "AkamaiGHost", "http": { "robots_hash": None, "redirects": [], "securitytxt": None, "title": "Invalid URL", "sitemap_hash": None, "robots": None, "server": "AkamaiGHost", "host": "104.65.171.116", "html": "...", "location": "/", "components": {}, "html_hash": 519667384, "sitemap": None, "securitytxt_hash": None, }, "timestamp": "2021-01-28T04: 48: 43.016220", "hostnames": [\ "a104-65-171-116.deploy.static.akamaitechnologies.com"\ ], "org": "Akamai Technologies", "data": "HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 208\r\nExpires: Thu,28 Jan 2021 04: 48: 42 GMT\r\nDate: Thu,28 Jan 2021 04: 48: 42 GMT\r\nConnection: close\r\n\r\n", "port": 80, "transport": "tcp", "info": "Akamai's HTTP Acceleration & Mirror service", "isp": "Akamai Technologies", "asn": "AS16625", "location": { "country_code3": None, "city": "Seattle", "region_code": "WA", "postal_code": None, "longitude": -122.3412, "country_code": "US", "latitude": 47.6032, "country_name": "United States", "area_code": None, "dma_code": 819, }, "ip": 1749134196, "domains": [\ "akamaitechnologies.com"\ ], "ip_str": "104.65.171.116", "_id": "55628ae0-4e44-4718-b54a-b111def82a1f", "os": None, "_shodan": { "crawler": "7c8a517854004745d56289900cdd23806e84f988", "options": {}, "id": "62879cde-6746-4e74-92b9-4ae6bd262042", "module": "http", "ptr": True, }, "opts": {}, } { "hash": -1235910801, "timestamp": "2021-01-28T04: 48: 43.598569", "hostnames": [\ "dynamic-095-115-022-014.95.115.pool.telefonica.de"\ ], "org": "O2 Deutschland", "data": "HTTP/1.1 404 Not Found\r\nContent-Length: 0\r\n\r\n", "port": 8089, "transport": "tcp", "isp": "O2 Deutschland", "asn": "AS6805", "location": { "country_code3": None, "city": "Munich", "region_code": "BY", "postal_code": None, "longitude": 11.5816, "country_code": "DE", "latitude": 48.1441, "country_name": "Germany", "area_code": None, "dma_code": None, }, "ip": 1601377806, "domains": [\ "telefonica.de"\ ], "ip_str": "95.115.22.14", "_id": "07296d34-6421-45d9-9c39-a2f8054829b0", "os": None, "_shodan": { "crawler": "a63b71ce4b8ab943fe83502b265dc615867966e1", "options": {}, "id": "46e37486-bf21-49b2-bd78-3e43693ff1f5", "module": "https-simple-new", "ptr": True, }, "opts": {}, } ... ###### GET/shodan/ports/{ports} ###### **Filtered by Ports** Only returns banner data for the list of specified ports. This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in a specific list of ports. ###### **Request URL** https://stream.shodan.io/shodan/ports/{ports}?key={YOUR_API_KEY} ###### **Parameters** * **ports:** \[String\] Comma-separated list of ports; example "22,443" **Examples** cURL Shodan CLI Python Request $ curl -X GET "https://stream.shodan.io/shodan/ports/22,443?key={YOUR_API_KEY}" Response { "hash": 1592590585, "product": "AkamaiGHost", "http": { "robots_hash": null, "redirects": [], "securitytxt": null, "title": "Invalid URL", "sitemap_hash": null, "robots": null, "server": "AkamaiGHost", "host": "23.8.80.84", "html": "\nInvalid URL\n\nInvalid URL\nThe requested URL \"[no URL]\", is invalid.\nReference #9.4ede3717.1611810347.6c0f8ec\n\n", "location": "/", "components": {}, "html_hash": 1809591553, "sitemap": null, "securitytxt_hash": null }, "timestamp": "2021-01-28T05:05:47.864200", "ssl": { "chain_sha256": [\ "555a575d447769003b96bc6b6849ffecc710831ccf648082dbcb0a6e81f0037f",\ "14363822517e2989b087d0c9a42eef134a774bd0b2a0664d455af784bc08f4d0",\ "68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b",\ "d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4"\ ], "jarm": "2ad2ad0002ad2ad22c42d42d00000061cdb625ec378ec3fce160d347caef64", "chain": [\ "-----BEGIN CERTIFICATE-----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\nfVvWpv/iYwvgQ3gOxP5FkRI2masF\n-----END CERTIFICATE-----\n",\ "-----BEGIN CERTIFICATE-----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\nKw/4P1yG/5xtH6HrU2uqz3qOmM4yWg==\n-----END CERTIFICATE-----\n",\ "-----BEGIN CERTIFICATE-----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\nvGp4z7h/jnZymQyd/teRCBaho1+V\n-----END CERTIFICATE-----\n",\ "-----BEGIN CERTIFICATE-----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\nsmPi9WIsgtRqAEFQ8TmDn5XpNpaYbg==\n-----END CERTIFICATE-----\n"\ ], "dhparams": null, "versions": [\ "TLSv1",\ "-SSLv2",\ "-SSLv3",\ "TLSv1.1",\ "TLSv1.2",\ "TLSv1.3"\ ], "acceptable_cas": [], "tlsext": [\ {\ "id": 65281,\ "name": "renegotiation_info"\ },\ {\ "id": 11,\ "name": "ec_point_formats"\ },\ {\ "id": 35,\ "name": "session_ticket"\ }\ ], "ja3s": "e35df3e00ca4ef31d42b34bebaa2f86e", "cert": { "sig_alg": "sha256WithRSAEncryption", "issued": "20210115000000Z", "expires": "20220215235959Z", "expired": false, "version": 2, "extensions": [\ {\ "data": "0\\x16\\x80\\x14\\xf2\\xbbU\\xee\\xfc\\x8f\\xcf\\xd0?\\x14h\\x1a\\x95~y\\x0e\\xab\\x170\\xf4",\ "name": "authorityKeyIdentifier"\ },\ {\ "data": "\\x04\\x14\\xb5~R\\xa4\\x99\\xbd\\x84\\xc2\\xd5q\\xb6\\xc9\\x03\\x0e\\x02\\'\\x14\\xe2\\xa4\\xc4",\ "name": "subjectKeyIdentifier"\ },\ {\ "critical": true,\ "data": "\\x03\\x02\\x05\\xa0",\ "name": "keyUsage"\ },\ {\ "critical": true,\ "data": "0\\x00",\ "name": "basicConstraints"\ },\ {\ "data": "0\\x14\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x02",\ "name": "extendedKeyUsage"\ },\ {\ "data": "0B06\\x06\\x0b+\\x06\\x01\\x04\\x01\\xb21\\x01\\x02\\x02\\x080\\'0%\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x02\\x01\\x16\\x19https://cps.usertrust.com0\\x08\\x06\\x06g\\x81\\x0c\\x01\\x02\\x02",\ "name": "certificatePolicies"\ },\ {\ "data": "0G0E\\xa0C\\xa0A\\x86?http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl",\ "name": "crlDistributionPoints"\ },\ {\ "data": "0t0K\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x86?http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt0%\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x01\\x86\\x19http://ocsp.usertrust.com",\ "name": "authorityInfoAccess"\ },\ {\ "data": "\\x04\\x81\\xf1\\x00\\xef\\x00u\\x00F\\xa5U\\xebu\\xfa\\x91 0\\xb5\\xa2\\x89i\\xf4\\xf3}\\x11,At\\xbe\\xfdI\\xb8\\x85\\xab\\xf2\\xfcp\\xfemG\\x00\\x00\\x01w\\x05\\x02\\x06\\xa0\\x00\\x00\\x04\\x03\\x00F0D\\x02 Zp\\x87\"\\xe7.k\\x1c+\\xd8\\x06\\x96_\\x80\\x96\\x1a\\xe5\\xc9\\xc5\\xb0\\xc6\\xb9\\xfe\\xda\\xd5\\x00\\xcf\\xbf,\\xeaC\\xf9\\x02 V\\xa0\\xd7\\xb56\\x8d?\\x08i\\xecK\\x17s\\xceT\\'\\xfe\\x18\\xdd\\xf1\\x84e#\\x80\\xe5\\x0c*\\x00\\x8b/k\\xc9\\x00v\\x00\\xdf\\xa5^\\xabh\\x82O\\x1fl\\xad\\xee\\xb8_N>Z\\xea\\xcd\\xa2\\x12\\xa4j^\\x8e;\\x12\\xc0 D\\\\*s\\x00\\x00\\x01w\\x05\\x02\\x06\\xc7\\x00\\x00\\x04\\x03\\x00G0E\\x02 S\\xb1\"$\\x15\\xf6\\x91\\xc0\\xb0\\x16\\x91 \\xa1I\\x85\\xa0\\x1d{\\x84\\xb0\\xf9Y\\xe3J^\\x19g\\xa2=d\\xe1\\t\\x02!\\x00\\x92\\x8b\\x85\\x91d\\xff\\xcb\\xa6\\x1dF\\xc8(\\xa9\\xff\\xa6i\\xbfYq\\x8ec\\x01{\\xb6\\xa9\\xe5\\xcc3\\xc2!\\xe8\\xe6",\ "name": "ct_precert_scts"\ },\ {\ "data": "0\\x82\\n\\xb2\\x82\\x17pft.bayercropscience.us\\x82\\x15admin.hot-potatoes.ca\\x82\\x11agro.bayer-ca.com\\x82\\x18alumni.youthagsummit.com\\x82\\x10api.bayerweb.com\\x82\\x19appportfolio.bayer.com.br\\x82\\x14aprendecon.bayer.com\\x82\\x18cropscience.bayer.com.ar\\x82\\x15enmovimiento.bayer.es\\x82\\x13focus.bayer-agri.fr\\x82\\x17grants4traits.bayer.com\\x82\\x13imagebank.bayer.com\\x82\\x1ainfo.cropscience.bayer.com\\x82\\x0fleaps.bayer.com\\x82\\x11maverick.bayer.us\\x82#mdmwebservice.cropscience.bayer.com\\x82\\x17melangespublic.bayer.fr\\x82\\x1bmobileapi.backedbybayer.com\\x82\\'mobileapi.environmentalscience.bayer.us\\x82\\x1cnewsletter.youthagsummit.com\\x82\\rnps.bayer.com\\x82\\x16phytobac.bayer-agri.fr\\x82\\x1bphytoprogress.bayer-agri.fr\\x82/platformadystrybucyjna.cropscience.bayer.com.pl\\x82\\x13pontos.bayer.com.br\\x82&ppmlogin.environmentalscience.bayer.us\\x82\\x1eprod2.cropscience.bayer.com.py\\x82\\x1eprod2.cropscience.bayer.com.uy\\x82\\x13protecmais.bayer.fr\\x82\\x18proveedores.bayer.com.mx\\x82\\x16publichealth.bayer.com\\x82\\x19publichealthmag.bayer.com\\x82\\x16stage.api.bayerweb.com\\x82\\x1dstage.bayercropscience.com.ar\\x82\\x1dstage.bayercropscience.com.co\\x82\\x1dstage.bayercropscience.com.ec\\x82\\x1dstage.bayercropscience.com.py\\x82\\x1dstage.bayercropscience.com.ve\\x82\\x17stage.beja.bayerweb.com\\x82\\x18stage.bicanada.bayer.com\\x82\\x1cstage.circulo13.bayer.com.mx\\x82\\x1estage.cropscience.bayer.com.ar\\x82\\x1estage.cropscience.bayer.com.bo\\x82\\x1estage.cropscience.bayer.com.py\\x82\\x1estage.cropscience.bayer.com.uy\\x82\\x12stage.feedabee.com\\x82)stage.mdmwebservice.cropscience.bayer.com\\x82\\x1cstage.micultivo.bayer.com.mx\\x82\\x18stage.miportal.bayer.com\\x82!stage.mobileapi.backedbybayer.com\\x82\\x1estage.proveedores.bayer.com.mx\\x82\\x1bstage.saludambiental.com.mx\\x82%stage.seedtag.bayercropscience.us.com\\x82,stage.stewardshipmtg.bayercropscience.us.com\\x82\\x10stardl.bayer.com\\x82\\x12stardlqa.bayer.com\\x82\\x10starqa.bayer.com\\x82\"stewardship.bayercropscienceus.com\\x82&stewardshipmtg.bayercropscience.us.com\\x82\\x1bszkolenia.agro.bayer.com.pl\\x82)test.bcsfieldbids.bayercropscience.us.com\\x82#test.digital-marketing.cs.bayer.com\\x82\\x17test.int.agrar.bayer.de\\x82\\x1ctest.net.mybayerservices.com\\x82\\x15test.pft.bayerweb.com\\x82\\rwww.baydir.cl\\x82\\x11www.bayer-agri.fr\\x82\\x1bwww.bayercropscience.com.ar\\x82\\x14www.bayertoolbox.com\\x82\\x10www.bayexpert.cz\\x82\\x10www.bayexpert.sk\\x82\\x10www.bayprofit.cz\\x82\\x10www.bayprofit.sk\\x82(www.bcsfieldbids.bayercropscience.us.com\\x82&www.bulkrepack.bayercropscience.us.com\\x82\\x16www.colturaecultura.it\\x82\\x18www.covoiturage.bayer.fr\\x82\\x18www.cropscience.bayer.cl\\x82\\x1cwww.cropscience.bayer.com.py\\x82\\x1cwww.cropscience.bayer.com.uy\\x82\\x18www.cropscience.bayer.ro\\x82\\x18www.cropscience.bayer.sk\\x82\\x0fwww.csavazas.hu\\x82\"www.digital-marketing.cs.bayer.com\\x82&www.katalograstitelnazashtita.bayer.bg\\x82\\x15www.momentos.bayer.mx\\x82\\x1ewww.monitoraggiococciniglia.it\\x82\\x18www.monografias.bayer.mx\\x82\\x16www.mybayeraccount.com\\x82\\x17www.mybayerservices.com\\x82\\x1ewww.proteccionambiental.com.ar\\x82\\x1cwww.proveedores.bayer.com.mx\\x82\\x1dwww.publichealthmag.bayer.com\\x82\\x16www.smartagro.bayer.ec\\x82!www.stage.bayercropscience.com.ar\\x82!www.stage.bayercropscience.com.uy\\x82\\x16www.tarim.bayer.com.tr\\x82\\x1awww.xn--h1apeh1c.xn--p1acf",\ "name": "subjectAltName"\ }\ ], "fingerprint": { "sha256": "555a575d447769003b96bc6b6849ffecc710831ccf648082dbcb0a6e81f0037f", "sha1": "39c0a00060c1a0df4b9dea017c8d87950fe0250a" }, "serial": 2.3917953139147504e+38, "subject": { "C": "DE", "CN": "pft.bayercropscience.us", "L": "Leverkusen", "O": "Bayer AG", "ST": "Nordrhein-Westfalen", "street": "Kaiser-Wilhelm-Allee 1", "postalCode": "51368", "OU": "Bayer Business Services GmbH" }, "pubkey": { "type": "rsa", "bits": 2048 }, "issuer": { "C": "US", "L": "Wilmington", "CN": "Trusted Secure Certificate Authority 5", "O": "Corporation Service Company", "ST": "DE" } }, "cipher": { "version": "TLSv1/SSLv3", "bits": 256, "name": "ECDHE-RSA-AES256-GCM-SHA384" }, "trust": { "revoked": false, "browser": { "mozilla": true, "apple": true, "microsoft": true } }, "alpn": [\ "http/1.1",\ "http/1.0"\ ], "ocsp": {} }, "hostnames": [\ "a23-8-80-84.deploy.static.akamaitechnologies.com"\ ], "org": "Akamai Technologies", "data": "HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 208\r\nExpires: Thu, 28 Jan 2021 05:05:47 GMT\r\nDate: Thu, 28 Jan 2021 05:05:47 GMT\r\nConnection: close\r\n\r\n", "port": 443, "transport": "tcp", "info": "Akamai's HTTP Acceleration & Mirror service", "isp": "Akamai Technologies", "asn": "AS16625", "location": { "country_code3": null, "city": "Adelaide", "region_code": "SA", "postal_code": null, "longitude": 138.6005, "country_code": "AU", "latitude": -34.9274, "country_name": "Australia", "area_code": null, "dma_code": null }, "ip": 386420820, "domains": [\ "akamaitechnologies.com"\ ], "ip_str": "23.8.80.84", "_id": "95d23749-3a9f-40fb-aa32-5e64fe763da7", "os": null, "_shodan": { "crawler": "91597136eb9b132d7cc954511e0d9cbe7ce2e377", "options": {}, "id": "7d720834-91ea-42dc-8b41-0100933116f1", "module": "https", "ptr": true }, "opts": { "vulns": [], "heartbleed": "2021/01/28 05:06:04 23.8.80.84:443 - SAFE\n" } } { "hash": -1180342095, "product": "Microsoft IIS httpd", "http": { "robots_hash": null, "redirects": [], "securitytxt": null, "title": "Object moved", "sitemap_hash": null, "robots": null, "server": "Microsoft-IIS/10.0", "host": "104.208.220.204", "html": "Object moved\r\nObject moved to here.\r\n\r\n", "location": "/", "components": {}, "html_hash": -1401938847, "sitemap": null, "securitytxt_hash": null }, "tags": [\ "cloud"\ ], "timestamp": "2021-01-28T05:06:00.832166", "ssl": { "chain_sha256": [\ "9e9296f5bdfafaa18ded4e605b4bde781d7e6ed3120ea3c7f4d6a2a2ad82c926",\ "04eeea8e50b4775b3c24797262917ee50002ec4c75b56cdf3ee1c18cfca5ba52",\ "16af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb"\ ], "jarm": "2ad2ad0000000000002ad2ad2ad2ad0f0dcb2ae084f34cae790be1eab88c30", "chain": [\ "-----BEGIN CERTIFICATE-----\nMIIHyTCCBbGgAwIBAgITawAAR4RWz3h/fZyp4QAAAABHhDANBgkqhkiG9w0BAQsF\nADBPMQswCQYDVQQGEwJVUzEeMBwGA1UEChMVTWljcm9zb2Z0IENvcnBvcmF0aW9u\nMSAwHgYDVQQDExdNaWNyb3NvZnQgUlNBIFRMUyBDQSAwMTAeFw0yMDEwMDExODA1\nNDlaFw0yMTEwMDExODA1NDlaMCgxJjAkBgNVBAMTHXBvZHMuZWRvZy5vZmZpY2Vh\ncHBzLmxpdmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxtb\njXVQXjqmR22C+arRPNFo2geQs1RXh5r3XwRc6n5+rW34dpPMOHJ+n37JL32IN4KT\nq8DLiI63K41Z3KX5+AkxWg+PvlYWQZe0TmYYTTXiWkIcLWoEjwZknT8A5PQ4cmqh\nn/WWwAh7pNesKLveJIUp7t29JUG2xDVNL7OOqk0/C/tLcEhbe3XqresGMesWZ6Ka\nxm19rRSwRUnz6wlfsn1Qg+pPXkMrPyQUDwbS8LBWDeZDLInFFIA8G/J0Rkwk9Wnt\nxhnOXsEr14PXyWxP/mEb3fMXSTKiZBkm/MifyKyTaftFP6QU7v3syfRC9pj/OOUr\nUzCRt8EOYkRPyd9lsQIDAQABo4IDwzCCA78wggEFBgorBgEEAdZ5AgQCBIH2BIHz\nAPEAdwD2XJQv0XcwIhRUGAgwlFaO400TGTO/3wwvIAvMTvFk4wAAAXTlYLMIAAAE\nAwBIMEYCIQDhMKCTjFF/NWefgai00VKkTuFewZYqx6hp+KEW0UCsugIhAMO0nsg7\nvRWO+tslhGaqwQp6QZhw+YzoKDU0zZ10ZHzpAHYARJRlLrDuzq/EQAfYqP4owNrm\ngr7YyzG1P9MzlrW2gagAAAF05WCzBwAABAMARzBFAiEAiCCq6PTFY/YQ79qIxBrP\nUd+94xuM83qS5WlhDzNrngACIDOdkaZ+lekAK3MIPR9qAwgu+86nxe01r+lXc2C6\nGsIeMCcGCSsGAQQBgjcVCgQaMBgwCgYIKwYBBQUHAwEwCgYIKwYBBQUHAwIwPgYJ\nKwYBBAGCNxUHBDEwLwYnKwYBBAGCNxUIh9qGdYPu2QGCyYUbgbWeYYX062CBXYWG\njkGHwphQAgFkAgElMIGHBggrBgEFBQcBAQR7MHkwUwYIKwYBBQUHMAKGR2h0dHA6\nLy93d3cubWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL01pY3Jvc29mdCUyMFJTQSUy\nMFRMUyUyMENBJTIwMDEuY3J0MCIGCCsGAQUFBzABhhZodHRwOi8vb2NzcC5tc29j\nc3AuY29tMB0GA1UdDgQWBBS6YxlUnWNuzh6qN4Z396dACGJKfjALBgNVHQ8EBAMC\nBLAwSQYDVR0RBEIwQIIdcG9kcy5lZG9nLm9mZmljZWFwcHMubGl2ZS5jb22CHyou\ncG9kcy5lZG9nLm9mZmljZWFwcHMubGl2ZS5jb20wgbAGA1UdHwSBqDCBpTCBoqCB\nn6CBnIZNaHR0cDovL21zY3JsLm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcmwv\nTWljcm9zb2Z0JTIwUlNBJTIwVExTJTIwQ0ElMjAwMS5jcmyGS2h0dHA6Ly9jcmwu\nbWljcm9zb2Z0LmNvbS9wa2kvbXNjb3JwL2NybC9NaWNyb3NvZnQlMjBSU0ElMjBU\nTFMlMjBDQSUyMDAxLmNybDBXBgNVHSAEUDBOMEIGCSsGAQQBgjcqATA1MDMGCCsG\nAQUFBwIBFidodHRwOi8vd3d3Lm1pY3Jvc29mdC5jb20vcGtpL21zY29ycC9jcHMw\nCAYGZ4EMAQIBMB8GA1UdIwQYMBaAFLV2DDARzseSQk1Mx1wsyKkM6AtkMB0GA1Ud\nJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjANBgkqhkiG9w0BAQsFAAOCAgEAi7Hk\nhCBIqlXo1RKiz4zrhuFjduHehfcM+DJAPyWX5yqu6rkVykMDK9q8eGg6LDJ4BsZC\nPR2RaUy8UbMTiJSD6LpZd9p3EwupxYA4p8wuz8SHahKpy0Ou0Kv0cv/ge6NwE6XB\n/yv62Wmrhr0ZYe3Opcaus0xTn8ToxO3lQpa2xgdH30oVzVNQw/sGdPlO2dxUfggC\ngHhZH9lFM0JKlJj63mYw8/nNzfO0rbJic38EPESdV8O7KW+5TRKBOVW4fNlCveXa\nqyfP3COfbjtCMIcxRxi1YpQ2QvG4G7UaegShpfcfDDNFO6teV6x8Ft208wjSkiEQ\nzTiEkmPmBQo8QZsy5fJRkuVFzAqBmCgKnd2dhP67IQqzpx9I5iKg8YCo0dRniJt+\nBJn/NPZWYkBtWVJQL5y5RhH40FcGKwa3D6uNfqIm2JQInPOKxXoEzvtxyuuvXhOb\n9tLOOjijwnEz0Flz6yBRivIB37Kv0+e6uTs/MYsT/GVLGAlpKgpuK4SGoPDPOr1i\nmi+AiLXHDuTmMGVOtSEMXNr5l0on6coEUFpBf3TmYud2ZJ3JZdGbsreES4qQwDhp\nRQDUobsFXHYq4wmXyvMPICH7JYlm4aiYTGwN/HKpDfTke1h/Mw5dW/cxUHWCS+cs\nvmvOoX+Uqrupd8sFyF5Alhzt3wfofG+lqREYmYQ=\n-----END CERTIFICATE-----\n",\ "-----BEGIN CERTIFICATE-----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\ncGHTBPK4R28F44qIMCtHRV55VMX53ev6P3hRddJb\n-----END CERTIFICATE-----\n",\ "-----BEGIN CERTIFICATE-----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\nR9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp\n-----END CERTIFICATE-----\n"\ ], "dhparams": null, "versions": [\ "-TLSv1",\ "-SSLv2",\ "-SSLv3",\ "-TLSv1.1",\ "TLSv1.2",\ "-TLSv1.3"\ ], "acceptable_cas": [], "tlsext": [\ {\ "id": 5,\ "name": "status_request"\ },\ {\ "id": 65281,\ "name": "renegotiation_info"\ }\ ], "ja3s": "1d9c3e8c45ab7a2112263449a3ad9ece", "cert": { "sig_alg": "sha256WithRSAEncryption", "issued": "20201001180549Z", "expires": "20211001180549Z", "expired": false, "version": 2, "extensions": [\ {\ "data": "\\x04\\x81\\xf3\\x00\\xf1\\x00w\\x00\\xf6\\\\\\x94/\\xd1w0\"\\x14T\\x18\\x080\\x94V\\x8e\\xe3M\\x13\\x193\\xbf\\xdf\\x0c/ \\x0b\\xccN\\xf1d\\xe3\\x00\\x00\\x01t\\xe5`\\xb3\\x08\\x00\\x00\\x04\\x03\\x00H0F\\x02!\\x00\\xe10\\xa0\\x93\\x8cQ\\x7f5g\\x9f\\x81\\xa8\\xb4\\xd1R\\xa4N\\xe1^\\xc1\\x96*\\xc7\\xa8i\\xf8\\xa1\\x16\\xd1@\\xac\\xba\\x02!\\x00\\xc3\\xb4\\x9e\\xc8;\\xbd\\x15\\x8e\\xfa\\xdb%\\x84f\\xaa\\xc1\\nzA\\x98p\\xf9\\x8c\\xe8(54\\xcd\\x9dtd|\\xe9\\x00v\\x00D\\x94e.\\xb0\\xee\\xce\\xaf\\xc4@\\x07\\xd8\\xa8\\xfe(\\xc0\\xda\\xe6\\x82\\xbe\\xd8\\xcb1\\xb5?\\xd33\\x96\\xb5\\xb6\\x81\\xa8\\x00\\x00\\x01t\\xe5`\\xb3\\x07\\x00\\x00\\x04\\x03\\x00G0E\\x02!\\x00\\x88 \\xaa\\xe8\\xf4\\xc5c\\xf6\\x10\\xef\\xda\\x88\\xc4\\x1a\\xcfQ\\xdf\\xbd\\xe3\\x1b\\x8c\\xf3z\\x92\\xe5ia\\x0f3k\\x9e\\x00\\x02 3\\x9d\\x91\\xa6~\\x95\\xe9\\x00+s\\x08=\\x1fj\\x03\\x08.\\xfb\\xce\\xa7\\xc5\\xed5\\xaf\\xe9Ws`\\xba\\x1a\\xc2\\x1e",\ "name": "ct_precert_scts"\ },\ {\ "data": "0\\x180\\n\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x010\\n\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x02",\ "name": "UNDEF"\ },\ {\ "data": "0/\\x06\\'+\\x06\\x01\\x04\\x01\\x827\\x15\\x08\\x87\\xda\\x86u\\x83\\xee\\xd9\\x01\\x82\\xc9\\x85\\x1b\\x81\\xb5\\x9ea\\x85\\xf4\\xeb`\\x81]\\x85\\x86\\x8eA\\x87\\xc2\\x98P\\x02\\x01d\\x02\\x01%", "name": "UNDEF" }, { "data": "0y0S\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x86Ghttp://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt0\"\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x01\\x86\\x16http://ocsp.msocsp.com", "name": "authorityInfoAccess" }, { "data": "\\x04\\x14\\xbac\\x19T\\x9dcn\\xce\\x1e\\xaa7\\x86w\\xf7\\xa7@\\x08bJ~", "name": "subjectKeyIdentifier" }, { "data": "\\x03\\x02\\x04\\xb0", "name": "keyUsage" }, { "data": "0@\\x82\\x1dpods.edog.officeapps.live.com\\x82\\x1f*.pods.edog.officeapps.live.com", "name": "subjectAltName" }, { "data": "0\\x81\\xa50\\x81\\xa2\\xa0\\x81\\x9f\\xa0\\x81\\x9c\\x86Mhttp://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl\\x86Khttp://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl", "name": "crlDistributionPoints" }, { "data": "0N0B\\x06\\t+\\x06\\x01\\x04\\x01\\x827*\\x010503\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x02\\x01\\x16\\'http://www.microsoft.com/pki/mscorp/cps0\\x08\\x06\\x06g\\x81\\x0c\\x01\\x02\\x01", "name": "certificatePolicies" }, { "data": "0\\x16\\x80\\x14\\xb5v\\x0c0\\x11\\xce\\xc7\\x92BML\\xc7\\\\,\\xc8\\xa9\\x0c\\xe8\\x0bd", "name": "authorityKeyIdentifier" }, { "data": "0\\x14\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x02", "name": "extendedKeyUsage" } ], "fingerprint": { "sha256": "9e9296f5bdfafaa18ded4e605b4bde781d7e6ed3120ea3c7f4d6a2a2ad82c926", "sha1": "9fa0354d790576aa30f02f21b16612fbb8773b21" }, "serial": 2.3861798313051083e+45, "subject": { "CN": "pods.edog.officeapps.live.com" }, "pubkey": { "type": "rsa", "bits": 2048 }, "issuer": { "C": "US", "CN": "Microsoft RSA TLS CA 01", "O": "Microsoft Corporation" } }, "cipher": { "version": "TLSv1/SSLv3", "bits": 256, "name": "ECDHE-RSA-AES256-GCM-SHA384" }, "trust": { "revoked": false, "browser": { "mozilla": true, "apple": true, "microsoft": true } }, "alpn": [], "ocsp": {} }, "cloud": { "region": "useast2", "service": null, "provider": "Azure" }, "hostnames": [], "org": "Microsoft Azure", "data": "HTTP/1.1 302 Found\r\nCache-Control: private\r\nContent-Type: text/html; charset=utf-8\r\nLocation: http://www.office.com/\r\nServer: Microsoft-IIS/10.0\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Expose-Headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode\r\nX-OfficeVersion: 16.0.13727.40505\r\nX-CorrelationId: 1f0ef74d-9cfc-4c22-a17e-8ef12d06ae9f\r\nX-UserSessionId: 1f0ef74d-9cfc-4c22-a17e-8ef12d06ae9f\r\nX-OfficeCluster: eus2-000.PODS.edog.officeapps.live.com\r\nX-AspNet-Version: 4.0.30319\r\nX-Powered-By: ASP.NET\r\nDate: Thu, 28 Jan 2021 05:06:00 GMT\r\nContent-Length: 139\r\n\r\n", "port": 443, "cpe23": [\ "cpe:2.3:a:microsoft:internet_information_server:10.0",\ "cpe:2.3:o:microsoft:windows"\ ], "isp": "Microsoft Corporation", "transport": "tcp", "cpe": [\ "cpe:/a:microsoft:internet_information_server:10.0",\ "cpe:/o:microsoft:windows"\ ], "asn": "AS8075", "version": "10.0", "location": { "country_code3": null, "city": "Boydton", "region_code": "VA", "postal_code": null, "longitude": -78.375, "country_code": "US", "latitude": 36.6534, "country_name": "United States", "area_code": null, "dma_code": 560 }, "ip": 1758518476, "domains": [], "ip_str": "104.208.220.204", "_id": "7c29cbd8-51d2-44ed-ade2-d2f75eb6617a", "os": null, "_shodan": { "crawler": "cdd92e2d835a37d2798fa6c7105171f4d214012f", "options": {}, "id": "d31f59c7-6d19-4277-b89d-3f1b8413e5bf", "module": "https", "ptr": true }, "opts": { "vulns": [], "heartbleed": "2021/01/28 05:06:08 104.208.220.204:443 - ERROR: write tcp 104.208.220.204:443: broken pipe\n" } } ... Request $ shodan stream --ports 22,443 Response 62.99.208.114 22 62-99-208-114.static.upcbusiness.at SSH-2.0-OpenSSH_6.6.1p1 Debian-4~bpo70+1\nKey type: ssh-rsa\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQC+cCt9g0zdS4Wd7Kvuej6D118thiH1SdVeaFVYq5KbpTuf\ngHVhQYTaBtwH4jufBgluo2m0qxSogICTvzytQha/m+H8BOH6ujm/6feubcux6tDC/pE/fxmj0+5R\nNl+Cd4vdjXaMMxxuXW6zrHOBw41bjjflW+YES7kZXzbvbEExz0YOsBbhmucolXl/O0cuTuo6K8jy\nKYnb0USYqO5gnGzdIl9QhbJWHsaAgXaUtRK2OPGJl2SwM1tNmTQ6faMPHiV4a75LvxKMQEsYINj+\npDIGnKkoBsP21W4oG47JOMwffxTMgjv3k2SRR65Hal8obu0sEf6vLp4oWiCxB43ZdxQL\nFingerprint: 63:2a:85:f1:a7:b2:c3:e7:dc:0c:65:0f:8c:c4:87:b6\n\nKex Algorithms:\n\tcurve25519-sha256@libssh.org\n\tecdh-sha2-nistp256\n\tecdh-sha2-nistp384\n\tecdh-sha2-nistp521\n\tdiffie-hellman-group-exchange-sha256\n\tdiffie-hellman-group-exchange-sha1\n\tdiffie-hellman-group14-sha1\n\tdiffie-hellman-group1-sha1\n\nServer Host Key Algorithms:\n\tssh-rsa\n\tssh-dss\n\tecdsa-sha2-nistp256\n\tssh-ed25519\n\nEncryption Algorithms:\n\tchacha20-poly1305@openssh.com\n\taes128-ctr\n\taes192-ctr\n\taes256-ctr\n\taes128-gcm@openssh.com\n\taes256-gcm@openssh.com\n\nMAC Algorithms:\n\tumac-64-etm@openssh.com\n\tumac-128-etm@openssh.com\n\thmac-sha2-256-etm@openssh.com\n\thmac-sha2-512-etm@openssh.com\n\thmac-sha1-etm@openssh.com\n\tumac-64@openssh.com\n\tumac-128@openssh.com\n\thmac-sha2-256\n\thmac-sha2-512\n\thmac-sha1\n\nCompression Algorithms:\n\tnone\n\tzlib@openssh.com\n\n 104.65.190.207 443 a104-65-190-207.deploy.static.akamaitechnologies.com HTTP/1.0 400 Bad Request\r\nServer: AkamaiGHost\r\nMime-Version: 1.0\r\nContent-Type: text/html\r\nContent-Length: 208\r\nExpires: Thu, 28 Jan 2021 05:12:33 GMT\r\nDate: Thu, 28 Jan 2021 05:12:33 GMT\r\nConnection: close\r\n\r\n 13.94.230.88 443 HTTP/1.1 404 Not Found\r\nDate: Thu, 28 Jan 2021 05:11:55 GMT\r\nServer: *\r\nStrict-Transport-Security: max-age=15724800\r\nAccept-Ranges: bytes\r\nContent-Type: text/html\r\nVary: User-Agent\r\nTransfer-Encoding: chunked\r\n\r\n ... Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') for banner in api.stream.ports(ports=[22, 443], raw=False, timeout=None): print(banner) Response { "hash": 1394961798, "product": "Apache httpd", "http": { "robots_hash": None, "redirects": [], "securitytxt": None, "title": "301 Moved Permanently", "sitemap_hash": None, "robots": None, "server": "Apache", "host": "oasissinks.com", "html": '\n\n301 Moved Permanently\n\nMoved Permanently\nThe document has moved here.\n\n', "location": "/", "components": {}, "html_hash": 565781495, "sitemap": None, "securitytxt_hash": None, }, "tags": [\ "cloud"\ ], "timestamp": "2021-01-28T05:13:42.379509", "ssl": { "chain_sha256": [\ "ad5781f7f03081cb44d28641803a76ef6297f237510f71d804b18024ce1f5483",\ "730c1bdcd85f57ce5dc0bba733e5f1ba5a925b2a771d640a26f7a454224dad3b",\ "0687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739",\ ], "jarm": "07d14d16d21d21d00042d43d00000076e5b3c488a88e5790970b78ffb8afc2", "chain": [\ "-----BEGIN CERTIFICATE-----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\n6qtOLW0O7QMA79CBDSk5Lo4gc5JmSt/nWgDrla1HNKsTNoJHglLmSKm1\n-----END CERTIFICATE-----\n",\ "-----BEGIN CERTIFICATE-----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\nUdHkhVNcsAKX1H7GNNLOEADksd86wuoXvg==\n-----END CERTIFICATE-----\n",\ "-----BEGIN CERTIFICATE-----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\nOb8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ\n-----END CERTIFICATE-----\n",\ ], "dhparams": { "prime": "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", "public_key": "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", "bits": 2048, "generator": 2, "fingerprint": "RFC3526/Oakley Group 14", }, "versions": [\ "-TLSv1",\ "-SSLv2",\ "-SSLv3",\ "-TLSv1.1",\ "TLSv1.2",\ "TLSv1.3"\ ], "acceptable_cas": [], "tlsext": [\ {\ "id": 65281,\ "name": "renegotiation_info"\ },\ {\ "id": 11,\ "name": "ec_point_formats"\ },\ {\ "id": 35,\ "name": "session_ticket"\ },\ {\ "id": 5,\ "name": "status_request"\ },\ ], "ja3s": "452c3b3abf0ed48df1b925f6977db72b", "cert": { "sig_alg": "sha256WithRSAEncryption", "issued": "20201221171855Z", "expires": "20210321171855Z", "expired": False, "version": 2, "extensions": [\ {\ "critical": True,\ "data": "\\x03\\x02\\x05\\xa0",\ "name": "keyUsage"\ },\ {\ "data": "0\\x14\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x01\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x03\\x02",\ "name": "extendedKeyUsage",\ },\ {\ "critical": True,\ "data": "0\\x00",\ "name": "basicConstraints"\ },\ {\ "data": "\\x04\\x14\\x80\\xc9{b?H6S\\xeainGC\\xf9K5Q~\\xb9a",\ "name": "subjectKeyIdentifier",\ },\ {\ "data": "0\\x16\\x80\\x14\\x14.\\xb3\\x17\\xb7XV\\xcb\\xaeP\\t@\\xe6\\x1f\\xaf\\x9d\\x8b\\x14\\xc2\\xc6",\ "name": "authorityKeyIdentifier",\ },\ {\ "data": '0G0!\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x01\\x86\\x15http: //r3.o.lencr.org0"\\x06\\x08+\\x06\\x01\\x05\\x05\\x070\\x02\\x86\\x16http://r3.i.lencr.org/',\ "name": "authorityInfoAccess",\ },\ {\ "data": '0"\\x82\\x10*.oasissinks.com\\x82\\x0eoasissinks.com',\ "name": "subjectAltName",\ },\ {\ "data": "0C0\\x08\\x06\\x06g\\x81\\x0c\\x01\\x02\\x0107\\x06\\x0b+\\x06\\x01\\x04\\x01\\x82\\xdf\\x13\\x01\\x01\\x010(0&\\x06\\x08+\\x06\\x01\\x05\\x05\\x07\\x02\\x01\\x16\\x1ahttp://cps.letsencrypt.org",\ "name": "certificatePolicies",\ },\ {\ "data": '\\x04\\x81\\xf2\\x00\\xf0\\x00v\\x00D\\x94e.\\xb0\\xee\\xce\\xaf\\xc4@\\x07\\xd8\\xa8\\xfe(\\xc0\\xda\\xe6\\x82\\xbe\\xd8\\xcb1\\xb5?\\xd33\\x96\\xb5\\xb6\\x81\\xa8\\x00\\x00\\x01v\\x86\\x86\\x93\\x18\\x00\\x00\\x04\\x03\\x00G0E\\x02 l\\xa0\\x8b\\x8a\\x1dDZ\\x92\\xe6%#\\x9b^\\xc1Z\\x83J\\x1bh\\xe8.\\xda\\x92y\\xd9\\x85\\xa5K\\xff\\x9f\\xe7\\x1e\\x02!\\x00\\xf0w\\xea[\\x10\\x83y\\xc2gL\\x99\\x93\\xf6\\x05\\xafdx\\xed\\x9b\\xca?paZp\\xa7\\xba\\xd9\\x99\\x0e\\x9c\\xb4\\x00v\\x00\\xf6\\\\\\x94/\\xd1w0"\\x14T\\x18\\x080\\x94V\\x8e\\xe3M\\x13\\x193\\xbf\\xdf\\x0c/ \\x0b\\xccN\\xf1d\\xe3\\x00\\x00\\x01v\\x86\\x86\\x92\\xfd\\x00\\x00\\x04\\x03\\x00G0E\\x02 .!s\\xa8\\x02K\\xab\\xedC\\xb1\\x85\\xa6u\\xe8\\xb0\\xa6\\xa7/\\xe8fV\\\\\\xbd\\xa0\\xd0\\x8e\\xbe:d\\xba\\x8c\\xaa\\x02!\\x00\\x9c\\xf3\\xfd\\x04\\x8c\\xc2\\n\\xd9\\x00~\\xb4\\xf1/@\\xd5D< m7\\xd0\\x95:\\x87]p6\\xcd\\x00\\x17"\\x1e',\ "name": "ct_precert_scts",\ },\ ], "fingerprint": { "sha256": "ad5781f7f03081cb44d28641803a76ef6297f237510f71d804b18024ce1f5483", "sha1": "f6b44d2c688e03f9d42acd0cfe253c106c079426", }, "serial": 389939982519069921483757352690759710903078, "subject": { "CN": "*.oasissinks.com" }, "pubkey": { "type": "rsa", "bits": 2048 }, "issuer": { "C": "US", "CN": "R3", "O": "Let's Encrypt" }, }, "cipher": { "version": "TLSv1/SSLv3", "bits": 256, "name": "ECDHE-RSA-AES256-GCM-SHA384", }, "trust": { "revoked": False, "browser": { "mozilla": True, "apple": True, "microsoft": True }, }, "alpn": [], "ocsp": { "version": "1", "response_status": "successful", "responder_id": "C = US, O = Let's Encrypt, CN = R3", "cert_status": "good", "produced_at": "2021-01-26 18:18:00", "signature_algorithm": "sha256WithRSAEncryption", "next_update": "2021-02-02 18:00:00", "this_update": "2021-01-26 18:00:00", "certificate_id": { "hash_algorithm": "sha1", "issuer_name_hash": "48DAC9A0FB2BD32D4FF0DE68D2F567B735F9B3C4", "issuer_name_key": "142EB317B75856CBAE500940E61FAF9D8B14C2C6", "serial_number": "03A1663F117331B98AFCA0DEB4B02739C3BA", }, }, }, "cloud": { "region": None, "service": None, "provider": "Linode" }, "hostnames": [\ "chemcore.com"\ ], "org": "Linode", "data": "HTTP/1.1 301 Moved Permanently\r\nDate: Thu, 28 Jan 2021 05:13:36 GMT\r\nServer: Apache\r\nLocation: http://www.chemcore.com\r\nContent-Length: 231\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n", "port": 443, "cpe23": [\ "cpe:2.3:a:apache:http_server"\ ], "isp": "Linode", "transport": "tcp", "cpe": [\ "cpe:/a:apache:http_server"\ ], "asn": "AS63949", "location": { "country_code3": None, "city": "Richardson", "region_code": "TX", "postal_code": None, "longitude": -96.7028, "country_code": "US", "latitude": 32.9473, "country_name": "United States", "area_code": None, "dma_code": 623, }, "ip": 1208922770, "domains": [\ "chemcore.com"\ ], "ip_str": "72.14.178.146", "_id": "5299001e-fb7e-4da4-b78e-9b468b398982", "os": None, "_shodan": { "crawler": "1bab892ab6866024db9a99b462f1ef21bb739f5c", "options": { "hostname": "oasissinks.com", "scan": "FlKR9617YSIozzg3" }, "id": "18cefda1-2b9c-4b92-b431-d92032e9ba99", "module": "https", "ptr": True, }, "opts": { "vulns": [], "heartbleed": "2021/01/28 05:13:54 72.14.178.146:443 - SAFE\n", }, } } { "product": "OpenSSH", "hash": -620132291, "timestamp": "2021-01-28T05:21:09.281831", "hostnames": [\ "ns3053083.ip-149-202-222.eu"\ ], "ssh": { "hassh": "b12d2871a1189eff20364cf5333619ee", "fingerprint": "ce:2c:92:a4:77:4d:f9:c2:d5:ef:4f:ce:99:07:ae:49", "mac": "hmac-sha2-256", "cipher": "aes128-ctr", "key": "AAAAB3NzaC1yc2EAAAADAQABAAABAQC6JDa9LOkPFyvBTRufDWJr0nUBPaHbcdgL2pLRp7gu9kSJ\n5gSMdpZrAlhWrBnCCGzKeyItrgXzhlEDpD+tDA3jOTYk5faRxnsIAG5x0Y2PPAhmJsk79nApW7f1\nuNv5UoRFd5ZJEMP2P8uqGJU6hAGA628t4GYhlMcJrzrRh3WC+D6+jrRENUyl+s6i9ixvUr5nRWoV\n3bZNLTvvRxDkzqdLlltYv5YnT04rhfepOo7osp4l7/jsDlCdyH6eC7WCLTyBpwXxh9WPjINsrcVa\nqdffWY3kt91YY4zRqVCCMhhQDndn/86KC5B2WTCZPiTBcZqNPHpPJf7XziuFwuvFjtA9\n", "kex": { "languages": [\ ""\ ], "server_host_key_algorithms": [\ "ssh-rsa",\ "rsa-sha2-512",\ "rsa-sha2-256",\ "ecdsa-sha2-nistp256",\ "ssh-ed25519",\ ], "encryption_algorithms": [\ "chacha20-poly1305@openssh.com",\ "aes128-ctr",\ "aes192-ctr",\ "aes256-ctr",\ "aes128-gcm@openssh.com",\ "aes256-gcm@openssh.com",\ ], "kex_follows": False, "unused": 0, "kex_algorithms": [\ "curve25519-sha256",\ "curve25519-sha256@libssh.org",\ "ecdh-sha2-nistp256",\ "ecdh-sha2-nistp384",\ "ecdh-sha2-nistp521",\ "diffie-hellman-group-exchange-sha256",\ "diffie-hellman-group16-sha512",\ "diffie-hellman-group18-sha512",\ "diffie-hellman-group14-sha256",\ "diffie-hellman-group14-sha1",\ ], "compression_algorithms": [\ "none",\ "zlib@openssh.com"\ ], "mac_algorithms": [\ "umac-64-etm@openssh.com",\ "umac-128-etm@openssh.com",\ "hmac-sha2-256-etm@openssh.com",\ "hmac-sha2-512-etm@openssh.com",\ "hmac-sha1-etm@openssh.com",\ "umac-64@openssh.com",\ "umac-128@openssh.com",\ "hmac-sha2-256",\ "hmac-sha2-512",\ "hmac-sha1",\ ], }, "type": "ssh-rsa", }, "org": "OVH SAS", "data": "SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.3\nKey type: ssh-rsa\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQC6JDa9LOkPFyvBTRufDWJr0nUBPaHbcdgL2pLRp7gu9kSJ\n5gSMdpZrAlhWrBnCCGzKeyItrgXzhlEDpD+tDA3jOTYk5faRxnsIAG5x0Y2PPAhmJsk79nApW7f1\nuNv5UoRFd5ZJEMP2P8uqGJU6hAGA628t4GYhlMcJrzrRh3WC+D6+jrRENUyl+s6i9ixvUr5nRWoV\n3bZNLTvvRxDkzqdLlltYv5YnT04rhfepOo7osp4l7/jsDlCdyH6eC7WCLTyBpwXxh9WPjINsrcVa\nqdffWY3kt91YY4zRqVCCMhhQDndn/86KC5B2WTCZPiTBcZqNPHpPJf7XziuFwuvFjtA9\nFingerprint: ce:2c:92:a4:77:4d:f9:c2:d5:ef:4f:ce:99:07:ae:49\n\nKex Algorithms:\n\tcurve25519-sha256\n\tcurve25519-sha256@libssh.org\n\tecdh-sha2-nistp256\n\tecdh-sha2-nistp384\n\tecdh-sha2-nistp521\n\tdiffie-hellman-group-exchange-sha256\n\tdiffie-hellman-group16-sha512\n\tdiffie-hellman-group18-sha512\n\tdiffie-hellman-group14-sha256\n\tdiffie-hellman-group14-sha1\n\nServer Host Key Algorithms:\n\tssh-rsa\n\trsa-sha2-512\n\trsa-sha2-256\n\tecdsa-sha2-nistp256\n\tssh-ed25519\n\nEncryption Algorithms:\n\tchacha20-poly1305@openssh.com\n\taes128-ctr\n\taes192-ctr\n\taes256-ctr\n\taes128-gcm@openssh.com\n\taes256-gcm@openssh.com\n\nMAC Algorithms:\n\tumac-64-etm@openssh.com\n\tumac-128-etm@openssh.com\n\thmac-sha2-256-etm@openssh.com\n\thmac-sha2-512-etm@openssh.com\n\thmac-sha1-etm@openssh.com\n\tumac-64@openssh.com\n\tumac-128@openssh.com\n\thmac-sha2-256\n\thmac-sha2-512\n\thmac-sha1\n\nCompression Algorithms:\n\tnone\n\tzlib@openssh.com\n\n", "port": 22, "transport": "tcp", "info": "protocol 2.0", "isp": "OVH SAS", "cpe23": [\ "cpe:2.3:a:openbsd:openssh:7.6p1 Ubuntu-4ubuntu0.3"\ ], "cpe": [\ "cpe:/a:openbsd:openssh:7.6p1 Ubuntu-4ubuntu0.3"\ ], "asn": "AS16276", "version": "7.6p1 Ubuntu-4ubuntu0.3", "location": { "country_code3": None, "city": None, "region_code": None, "postal_code": None, "longitude": 2.3387, "country_code": "FR", "latitude": 48.8582, "country_name": "France", "area_code": None, "dma_code": None, }, "ip": 2513100291, "domains": [\ "ip-149-202-222.eu"\ ], "ip_str": "149.202.222.3", "_id": "050f8982-a306-4f4e-bb29-8a32dc6d157a", "os": "Ubuntu", "_shodan": { "crawler": "91597136eb9b132d7cc954511e0d9cbe7ce2e377", "options": {}, "id": "b9885570-c914-41b5-a6d3-0755be1b4f92", "module": "ssh", "ptr": True, }, "opts": {}, } ... ###### GET/shodan/vulns/{vulns} ###### **Filtered by Vulnerabilities** Only returns banner data for the list of specified vulnerabilities. This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in a specific list of vulnerabilities. ###### **Request URL** https://stream.shodan.io/shodan/vulns/{vulns}?key={YOUR_API_KEY} * **vulns:** \[String\] Comma-separated list of case-insensitive vulnerabilities; example "CVE-2017-7679,CVE-2018-15919" **Examples** cURL Shodan CLI Python Request $ curl -X GET "https://stream.shodan.io/shodan/vulns/CVE-2017-7679,CVE-2018-15919?key={YOUR_API_KEY}" Response { "hash": -286560, "product": "Apache httpd", "http": { "status": 400, "robots_hash": -1022729730, "redirects": [\ {\ "host": "136.243.203.117",\ "html": "\n\n\n\t window.location.href=\"index.php\"; \n\t\n\n\n",\ "data": "HTTP/1.1 200 OK\r\nDate: Sun, 26 Dec 2021 13:50:37 GMT\r\nServer: Apache/2.4.25 (Debian)\r\nLast-Modified: Sat, 02 May 2020 19:49:04 GMT\r\nETag: \"9c-5a4af97139ebf\"\r\nAccept-Ranges: bytes\r\nContent-Length: 156\r\nVary: Accept-Encoding\r\nContent-Type: text/html\r\n\r\n",\ "location": "/"\ }\ ], "securitytxt": null, "title": null, "sitemap_hash": null, "robots": "User-agent: *\nDisallow: /\n", "server": "Apache/2.4.25 (Debian)", "host": "136.243.203.117", "html": "\n\n\n\t window.location.href=\"index.php\"; \n\t\n\n\n", "location": "/index.php", "components": { "PHP": { "categories": [] } }, "html_hash": 823453261, "sitemap": null, "securitytxt_hash": null }, "vulns": { "CVE-2019-0196": { "verified": false, "references": [\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",\ "http://www.apache.org/dist/httpd/CHANGES_2.4.39",\ "http://www.openwall.com/lists/oss-security/2019/04/02/1",\ "http://www.securityfocus.com/bid/107669",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/97a1c58e138ed58a364513b58d807a802e72bf6079ff81a10948ef7c@%3Ccvs.httpd.apache.org%3E",\ "https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85576ed9285686ac@%3Ccvs.httpd.apache.org%3E",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YTJPHI3E3OKW7OT7COQXVG7DE7IDQ2OT/",\ "https://seclists.org/bugtraq/2019/Apr/5",\ "https://security.netapp.com/advisory/ntap-20190617-0002/",\ "https://support.f5.com/csp/article/K44591505",\ "https://usn.ubuntu.com/3937-1/",\ "https://www.debian.org/security/2019/dsa-4422"\ ], "cvss": "5.0", "summary": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly." }, "CVE-2017-7679": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3896",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",\ "http://www.securityfocus.com/bid/99170",\ "http://www.securitytracker.com/id/1038711",\ "https://access.redhat.com/errata/RHSA-2017:2478",\ "https://access.redhat.com/errata/RHSA-2017:2479",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://access.redhat.com/errata/RHSA-2017:3195",\ "https://access.redhat.com/errata/RHSA-2017:3475",\ "https://access.redhat.com/errata/RHSA-2017:3476",\ "https://access.redhat.com/errata/RHSA-2017:3477",\ "https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679",\ "https://lists.apache.org/thread.html/f4515e580dfb6eeca589a5cdebd4c4c709ce632b12924f343c3b7751@%3Cdev.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",\ "https://www.nomachine.com/SU08O00185"\ ], "cvss": "7.5", "summary": "In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header." }, "CVE-2017-7659": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3896",\ "http://www.securityfocus.com/bid/99132",\ "http://www.securitytracker.com/id/1038711",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://lists.apache.org/thread.html/1d0b746bbaa3a64890fcdab59ee9050aaa633b7143e7d412374e5a9a@%3Cannounce.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us"\ ], "cvss": "5.0", "summary": "A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process." }, "CVE-2017-9788": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3913",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",\ "http://www.securityfocus.com/bid/99569",\ "http://www.securitytracker.com/id/1038906",\ "https://access.redhat.com/errata/RHSA-2017:2478",\ "https://access.redhat.com/errata/RHSA-2017:2479",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://access.redhat.com/errata/RHSA-2017:2708",\ "https://access.redhat.com/errata/RHSA-2017:2709",\ "https://access.redhat.com/errata/RHSA-2017:2710",\ "https://access.redhat.com/errata/RHSA-2017:3113",\ "https://access.redhat.com/errata/RHSA-2017:3114",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://access.redhat.com/errata/RHSA-2017:3195",\ "https://access.redhat.com/errata/RHSA-2017:3239",\ "https://access.redhat.com/errata/RHSA-2017:3240",\ "https://httpd.apache.org/security/vulnerabilities_22.html",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/0dd69204a6bd643cc4e9ccd008f07a9375525d977c6ebeb07a881afb@%3Cannounce.httpd.apache.org%3E",\ "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20170911-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us"\ ], "cvss": "6.4", "summary": "In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service." }, "CVE-2017-9798": { "verified": false, "references": [\ "http://openwall.com/lists/oss-security/2017/09/18/2",\ "http://www.debian.org/security/2017/dsa-3980",\ "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",\ "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",\ "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",\ "http://www.securityfocus.com/bid/100872",\ "http://www.securityfocus.com/bid/105598",\ "http://www.securitytracker.com/id/1039387",\ "https://access.redhat.com/errata/RHSA-2017:2882",\ "https://access.redhat.com/errata/RHSA-2017:2972",\ "https://access.redhat.com/errata/RHSA-2017:3018",\ "https://access.redhat.com/errata/RHSA-2017:3113",\ "https://access.redhat.com/errata/RHSA-2017:3114",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://access.redhat.com/errata/RHSA-2017:3195",\ "https://access.redhat.com/errata/RHSA-2017:3239",\ "https://access.redhat.com/errata/RHSA-2017:3240",\ "https://access.redhat.com/errata/RHSA-2017:3475",\ "https://access.redhat.com/errata/RHSA-2017:3476",\ "https://access.redhat.com/errata/RHSA-2017:3477",\ "https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html",\ "https://blog.fuzzing-project.org/uploads/apache-2.2-optionsbleed-backport.patch",\ "https://github.com/apache/httpd/commit/29afdd2550b3d30a8defece2b95ae81edcf66ac9",\ "https://github.com/hannob/optionsbleed",\ "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2017-9798",\ "https://security-tracker.debian.org/tracker/CVE-2017-9798",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0003/",\ "https://support.apple.com/HT208331",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1805223&r2=1807754&pathrev=1807754&view=patch",\ "https://www.exploit-db.com/exploits/42745/",\ "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",\ "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"\ ], "cvss": "5.0", "summary": "Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c." }, "CVE-2018-11763": { "verified": false, "references": [\ "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html",\ "http://www.securityfocus.com/bid/105414",\ "http://www.securitytracker.com/id/1041713",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://security.netapp.com/advisory/ntap-20190204-0004/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3783-1/",\ "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",\ "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"\ ], "cvss": "4.3", "summary": "In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol." }, "CVE-2017-3167": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3896",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",\ "http://www.securityfocus.com/bid/99135",\ "http://www.securitytracker.com/id/1038711",\ "https://access.redhat.com/errata/RHSA-2017:2478",\ "https://access.redhat.com/errata/RHSA-2017:2479",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://access.redhat.com/errata/RHSA-2017:3195",\ "https://access.redhat.com/errata/RHSA-2017:3475",\ "https://access.redhat.com/errata/RHSA-2017:3476",\ "https://access.redhat.com/errata/RHSA-2017:3477",\ "https://lists.apache.org/thread.html/8409e41a8f7dd9ded37141c38df001be930115428c3d64f70bbdb8b4@%3Cdev.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",\ "https://www.nomachine.com/SU08O00185"\ ], "cvss": "7.5", "summary": "In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed." }, "CVE-2018-1312": { "verified": false, "references": [\ "http://www.openwall.com/lists/oss-security/2018/03/24/7",\ "http://www.securityfocus.com/bid/103524",\ "http://www.securitytracker.com/id/1040571",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://access.redhat.com/errata/RHSA-2019:1898",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",\ "https://security.netapp.com/advisory/ntap-20180601-0004/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3627-1/",\ "https://usn.ubuntu.com/3627-2/",\ "https://usn.ubuntu.com/3937-2/",\ "https://www.debian.org/security/2018/dsa-4164"\ ], "cvss": "6.8", "summary": "In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection." }, "CVE-2018-1333": { "verified": false, "references": [\ "http://www.securitytracker.com/id/1041402",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2018-1333",\ "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E",\ "https://security.netapp.com/advisory/ntap-20180926-0007/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3783-1/"\ ], "cvss": "5.0", "summary": "By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33)." }, "CVE-2017-3169": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3896",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",\ "http://www.securityfocus.com/bid/99134",\ "http://www.securitytracker.com/id/1038711",\ "https://access.redhat.com/errata/RHSA-2017:2478",\ "https://access.redhat.com/errata/RHSA-2017:2479",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://access.redhat.com/errata/RHSA-2017:3195",\ "https://access.redhat.com/errata/RHSA-2017:3475",\ "https://access.redhat.com/errata/RHSA-2017:3476",\ "https://access.redhat.com/errata/RHSA-2017:3477",\ "https://github.com/gottburgm/Exploits/tree/master/CVE-2017-3169",\ "https://lists.apache.org/thread.html/84bf7fcc5cad35d355f11839cbdd13cbc5ffc1d34675090bff0f96ae@%3Cdev.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",\ "https://www.nomachine.com/SU08O00185"\ ], "cvss": "7.5", "summary": "In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port." }, "CVE-2019-0197": { "verified": false, "references": [\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",\ "http://www.openwall.com/lists/oss-security/2019/04/02/2",\ "http://www.securityfocus.com/bid/107665",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/e0b8f6e858b1c8ec2ce8e291a2c543d438915037c7af661ab6d33808@%3Cdev.httpd.apache.org%3E",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",\ "https://security.netapp.com/advisory/ntap-20190617-0002/",\ "https://support.f5.com/csp/article/K44591505"\ ], "cvss": "4.9", "summary": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue." }, "CVE-2019-0220": { "verified": false, "references": [\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",\ "http://www.openwall.com/lists/oss-security/2019/04/02/6",\ "http://www.securityfocus.com/bid/107670",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.debian.org/debian-lts-announce/2019/04/msg00008.html",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",\ "https://seclists.org/bugtraq/2019/Apr/5",\ "https://security.netapp.com/advisory/ntap-20190625-0007/",\ "https://support.f5.com/csp/article/K44591505",\ "https://usn.ubuntu.com/3937-1/",\ "https://www.debian.org/security/2019/dsa-4422"\ ], "cvss": "5.0", "summary": "A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them." }, "CVE-2019-0211": { "verified": false, "references": [\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",\ "http://packetstormsecurity.com/files/152386/Apache-2.4.38-Root-Privilege-Escalation.html",\ "http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-Updates.html",\ "http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privilege-Escalation.html",\ "http://www.apache.org/dist/httpd/CHANGES_2.4.39",\ "http://www.openwall.com/lists/oss-security/2019/04/02/3",\ "http://www.securityfocus.com/bid/107666",\ "https://access.redhat.com/errata/RHBA-2019:0959",\ "https://access.redhat.com/errata/RHSA-2019:0746",\ "https://access.redhat.com/errata/RHSA-2019:0980",\ "https://access.redhat.com/errata/RHSA-2019:1296",\ "https://access.redhat.com/errata/RHSA-2019:1297",\ "https://access.redhat.com/errata/RHSA-2019:1543",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/890507b85c30adf133216b299cc35cd8cd0346a885acfc671c04694e@%3Cdev.community.apache.org%3E",\ "https://lists.apache.org/thread.html/b1613d44ec364c87bb7ee8c5939949f9b061c05c06e0e90098ebf7aa@%3Cusers.httpd.apache.org%3E",\ "https://lists.apache.org/thread.html/b2bdb308dc015e771ba79c0586b2de6fb50caa98b109833f5d4daf28@%3Cdev.community.apache.org%3E",\ "https://lists.apache.org/thread.html/de881a130bc9cb2f3a9ff220784520556884fb8ea80e69400a45509e@%3Cdev.community.apache.org%3E",\ "https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85576ed9285686ac@%3Ccvs.httpd.apache.org%3E",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",\ "https://seclists.org/bugtraq/2019/Apr/16",\ "https://seclists.org/bugtraq/2019/Apr/5",\ "https://security.gentoo.org/glsa/201904-20",\ "https://security.netapp.com/advisory/ntap-20190423-0001/",\ "https://support.f5.com/csp/article/K32957101",\ "https://usn.ubuntu.com/3937-1/",\ "https://www.debian.org/security/2019/dsa-4422",\ "https://www.exploit-db.com/exploits/46676/",\ "https://www.synology.com/security/advisory/Synology_SA_19_14"\ ], "cvss": "7.2", "summary": "In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected." }, "CVE-2017-15710": { "verified": false, "references": [\ "http://www.openwall.com/lists/oss-security/2018/03/24/8",\ "http://www.securityfocus.com/bid/103512",\ "http://www.securitytracker.com/id/1040569",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E",\ "https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",\ "https://security.netapp.com/advisory/ntap-20180601-0004/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3627-1/",\ "https://usn.ubuntu.com/3627-2/",\ "https://usn.ubuntu.com/3937-2/",\ "https://www.debian.org/security/2018/dsa-4164"\ ], "cvss": "5.0", "summary": "In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset conversion table, a fallback mechanism is used to truncate it to a two characters value to allow a quick retry (for example, 'en-US' is truncated to 'en'). A header value of less than two characters forces an out of bound write of one NUL byte to a memory location that is not part of the string. In the worst case, quite unlikely, the process would crash which could be used as a Denial of Service attack. In the more likely case, this memory is already reserved for future use and the issue has no effect at all." }, "CVE-2018-1283": { "verified": false, "references": [\ "http://www.openwall.com/lists/oss-security/2018/03/24/4",\ "http://www.securityfocus.com/bid/103520",\ "http://www.securitytracker.com/id/1040568",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E",\ "https://security.netapp.com/advisory/ntap-20180601-0004/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3627-1/",\ "https://usn.ubuntu.com/3627-2/",\ "https://www.debian.org/security/2018/dsa-4164"\ ], "cvss": "3.5", "summary": "In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a \"Session\" header. This comes from the \"HTTP_SESSION\" variable name used by mod_session to forward its data to CGIs, since the prefix \"HTTP_\" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications." }, "CVE-2017-7668": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3896",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",\ "http://www.securityfocus.com/bid/99137",\ "http://www.securitytracker.com/id/1038711",\ "https://access.redhat.com/errata/RHSA-2017:2479",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://lists.apache.org/thread.html/55a068b6a5eec0b3198ae7d96a7cb412352d0ffa7716612c5af3745b@%3Cdev.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us"\ ], "cvss": "7.5", "summary": "The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value." }, "CVE-2017-15715": { "verified": false, "references": [\ "http://www.openwall.com/lists/oss-security/2018/03/24/6",\ "http://www.securityfocus.com/bid/103525",\ "http://www.securitytracker.com/id/1040570",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E",\ "https://security.netapp.com/advisory/ntap-20180601-0004/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3627-1/",\ "https://usn.ubuntu.com/3627-2/",\ "https://www.debian.org/security/2018/dsa-4164"\ ], "cvss": "6.8", "summary": "In Apache httpd 2.4.0 to 2.4.29, the expression specified in could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename." }, "CVE-2018-17199": { "verified": false, "references": [\ "http://www.securityfocus.com/bid/106742",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.debian.org/debian-lts-announce/2019/01/msg00024.html",\ "https://seclists.org/bugtraq/2019/Apr/5",\ "https://security.gentoo.org/glsa/201903-21",\ "https://security.netapp.com/advisory/ntap-20190125-0001/",\ "https://usn.ubuntu.com/3937-1/",\ "https://www.debian.org/security/2019/dsa-4422",\ "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",\ "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"\ ], "cvss": "5.0", "summary": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded." } }, "timestamp": "2021-12-26T13:50:38.138557", "hostnames": [\ "cloud.sata.support.de"\ ], "org": null, "data": "HTTP/1.1 400 Bad Request\r\nDate: Sun, 26 Dec 2021 13:50:38 GMT\r\nServer: Apache/2.4.25 (Debian)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'nonce-Uzg3RlR0SGV4eWk2ZkVQTzRYVHVweUl5Y2x0MVFuRUF5WGlhSmlKa0Rvcz06SkxTY0llR3RsMmZ5UkNTbXF5T2RrRlp4SWc4Z0lVQm9peW5VVkdNSU4rND0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';\r\nReferrer-Policy: no-referrer\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Robots-Tag: none\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: ocywvd3d4ksh=eva1s52oicv8tdeb7g0b7e66bc; path=/; HttpOnly\r\nSet-Cookie: oc_sessionPassphrase=turMN1jcd3qqiI4qFzrzqLVxkULQrAqmYaBNYHnPK0glR4ABkZKVi1TWtcxL9p%2Fp3XJi9UE35rkiewLJaoKAb5d%2B74HSEZZI4GpPVWWasb7X6YAeC5MncH8FVtfFNS7O; path=/; HttpOnly\r\nSet-Cookie: nc_sameSiteCookielax=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax\r\nSet-Cookie: nc_sameSiteCookiestrict=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n", "port": 80, "transport": "tcp", "info": "(Debian)", "isp": "Hetzner Online GmbH", "cpe23": [\ "cpe:2.3:a:php:php",\ "cpe:2.3:a:apache:http_server:2.4.25"\ ], "cpe": [\ "cpe:/a:php:php",\ "cpe:/a:apache:http_server:2.4.25"\ ], "asn": "AS24940", "version": "2.4.25", "location": { "city": "Oberdorla", "region_code": "TH", "area_code": null, "longitude": 10.42163, "latitude": 51.16585, "country_code": "DE", "country_name": "Germany" }, "ip": 2297678709, "domains": [\ "support.de"\ ], "ip_str": "136.243.203.117", "os": null, "_shodan": { "crawler": "78039f81a0245caa8ab71c98182f0eff0ce52aab", "options": {}, "id": "bb74aed0-dd93-4d4b-a51e-dd3bb2e10e04", "module": "http", "ptr": true }, "opts": {} } ... Request $ shodan stream --vulns cve-2017-7679,cve-2018-15919 Response 173.249.157.11 2202 server2.creationforce.com SSH-2.0-OpenSSH_7.4\nKey type: ssh-rsa\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQCo5K7Ppgnaz5UNC/Lp2SpUWWQ5cH+dH0flWuWhfOKVuGjo\nZMAu/bMxYaKVgNUMb9Egd6uMcFJkdvTCSPr5mhb0jEEAV9lxTDwrJ+dHXU4u4g7YSUQACLF7IxDo\nzNcsNqZmiFdJh0Cv+njtEf+iBQkg0P7dLUP6EC4v+OayAZEUUaPqSQCh1++o1Od37UgMj1zAn9WC\neZ31p5hGNFrvLg0e7tYnnaQlukgTkJQ3IJ+E9s2/Id4dnKTqK9GBqsH2Co3La1/1TtxkUWVVCIrE\npY5LoTGkwJk+QQeo6CtYPpRvT62umNlbkTuCB/IF5BYPjZSnHxThmCtMB3dLylarEF1R\nFingerprint: 5d:c2:51:b0:e4:d0:07:a3:e9:58:65:da:f4:22:86:04\n\nKex Algorithms:\n\tcurve25519-sha256\n\tcurve25519-sha256@libssh.org\n\tecdh-sha2-nistp256\n\tecdh-sha2-nistp384\n\tecdh-sha2-nistp521\n\tdiffie-hellman-group-exchange-sha256\n\tdiffie-hellman-group16-sha512\n\tdiffie-hellman-group18-sha512\n\tdiffie-hellman-group-exchange-sha1\n\tdiffie-hellman-group14-sha256\n\tdiffie-hellman-group14-sha1\n\tdiffie-hellman-group1-sha1\n\nServer Host Key Algorithms:\n\tssh-rsa\n\trsa-sha2-512\n\trsa-sha2-256\n\tecdsa-sha2-nistp256\n\tssh-ed25519\n\nEncryption Algorithms:\n\tchacha20-poly1305@openssh.com\n\taes128-ctr\n\taes192-ctr\n\taes256-ctr\n\taes128-gcm@openssh.com\n\taes256-gcm@openssh.com\n\taes128-cbc\n\taes192-cbc\n\taes256-cbc\n\tblowfish-cbc\n\tcast128-cbc\n\t3des-cbc\n\nMAC Algorithms:\n\tumac-64-etm@openssh.com\n\tumac-128-etm@openssh.com\n\thmac-sha2-256-etm@openssh.com\n\thmac-sha2-512-etm@openssh.com\n\thmac-sha1-etm@openssh.com\n\tumac-64@openssh.com\n\tumac-128@openssh.com\n\thmac-sha2-256\n\thmac-sha2-512\n\thmac-sha1\n\nCompression Algorithms:\n\tnone\n\tzlib@openssh.com\n\n 193.16.14.153 80 concatenating.heldcallip.com HTTP/1.1 200 OK\r\nDate: Wed, 22 Dec 2021 03:23:27 GMT\r\nServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips PHP/5.4.16\r\nX-Powered-By: PHP/5.4.16\r\nContent-Length: 162\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n 154.81.173.155 22 SSH-2.0-OpenSSH_6.4\nKey type: ssh-rsa\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQDG5PsqtH+nVoWThZJ39Bd0ej//JkdyAFAv9zZa/sZv+B19\nuhmZdWC3bu/T0GctnbmiirzdFvc03VOs4AVoud7/94ULB+seVjXoTVLRT/IeeScLygHAvogc9lKH\nnJQN6nou1Jv5qiyUvLbpA1kGo3KMF08aAkcQnYidvf8PgEltJCAjNEpCLyDLe0XqkIfNDYosz2Zt\nD/SMv5qFKvUkyVx29MXwrrVZjCveJ6Z0MT2G7muOasv+qLxG0yJllfEnKKqRYq/emLRjlPbtBMmC\nZrqE5xrNVqlxgp6vp4p9uuESRzgNFiw/GIg9/OnvIIb2yoSzdTXmBDarlnvExUQvQS/t\nFingerprint: 3d:53:eb:43:88:8b:7c:58:37:f4:79:2c:42:68:51:32\n\nKex Algorithms:\n\tecdh-sha2-nistp256\n\tecdh-sha2-nistp384\n\tecdh-sha2-nistp521\n\tdiffie-hellman-group-exchange-sha256\n\tdiffie-hellman-group-exchange-sha1\n\tdiffie-hellman-group14-sha1\n\tdiffie-hellman-group1-sha1\n\nServer Host Key Algorithms:\n\tssh-rsa\n\tecdsa-sha2-nistp256\n\nEncryption Algorithms:\n\taes128-ctr\n\taes192-ctr\n\taes256-ctr\n\tarcfour256\n\tarcfour128\n\taes128-gcm@openssh.com\n\taes256-gcm@openssh.com\n\taes128-cbc\n\t3des-cbc\n\tblowfish-cbc\n\tcast128-cbc\n\taes192-cbc\n\taes256-cbc\n\tarcfour\n\trijndael-cbc@lysator.liu.se\n\nMAC Algorithms:\n\thmac-md5-etm@openssh.com\n\thmac-sha1-etm@openssh.com\n\tumac-64-etm@openssh.com\n\tumac-128-etm@openssh.com\n\thmac-sha2-256-etm@openssh.com\n\thmac-sha2-512-etm@openssh.com\n\thmac-ripemd160-etm@openssh.com\n\thmac-sha1-96-etm@openssh.com\n\thmac-md5-96-etm@openssh.com\n\thmac-md5\n\thmac-sha1\n\tumac-64@openssh.com\n\tumac-128@openssh.com\n\thmac-sha2-256\n\thmac-sha2-512\n\thmac-ripemd160\n\thmac-ripemd160@openssh.com\n\thmac-sha1-96\n\thmac-md5-96\n\nCompression Algorithms:\n\tnone\n\tzlib@openssh.com\n\n ... Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') for banner in api.stream.vulns(countries=['CVE-2017-7679', 'CVE-2018-15919'], raw=False, timeout=None): print(banner) Response { "hash": -286560, "product": "Apache httpd", "http": { "status": 400, "robots_hash": -1022729730, "redirects": [\ {\ "host": "136.243.203.117",\ "html": "\n\n\n\t window.location.href=\"index.php\"; \n\t\n\n\n",\ "data": "HTTP/1.1 200 OK\r\nDate: Sun, 26 Dec 2021 13:50:37 GMT\r\nServer: Apache/2.4.25 (Debian)\r\nLast-Modified: Sat, 02 May 2020 19:49:04 GMT\r\nETag: \"9c-5a4af97139ebf\"\r\nAccept-Ranges: bytes\r\nContent-Length: 156\r\nVary: Accept-Encoding\r\nContent-Type: text/html\r\n\r\n",\ "location": "/"\ }\ ], "securitytxt": null, "title": null, "sitemap_hash": null, "robots": "User-agent: *\nDisallow: /\n", "server": "Apache/2.4.25 (Debian)", "host": "136.243.203.117", "html": "\n\n\n\t window.location.href=\"index.php\"; \n\t\n\n\n", "location": "/index.php", "components": { "PHP": { "categories": [] } }, "html_hash": 823453261, "sitemap": null, "securitytxt_hash": null }, "vulns": { "CVE-2019-0196": { "verified": false, "references": [\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",\ "http://www.apache.org/dist/httpd/CHANGES_2.4.39",\ "http://www.openwall.com/lists/oss-security/2019/04/02/1",\ "http://www.securityfocus.com/bid/107669",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/97a1c58e138ed58a364513b58d807a802e72bf6079ff81a10948ef7c@%3Ccvs.httpd.apache.org%3E",\ "https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85576ed9285686ac@%3Ccvs.httpd.apache.org%3E",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YTJPHI3E3OKW7OT7COQXVG7DE7IDQ2OT/",\ "https://seclists.org/bugtraq/2019/Apr/5",\ "https://security.netapp.com/advisory/ntap-20190617-0002/",\ "https://support.f5.com/csp/article/K44591505",\ "https://usn.ubuntu.com/3937-1/",\ "https://www.debian.org/security/2019/dsa-4422"\ ], "cvss": "5.0", "summary": "A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly." }, "CVE-2017-7679": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3896",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",\ "http://www.securityfocus.com/bid/99170",\ "http://www.securitytracker.com/id/1038711",\ "https://access.redhat.com/errata/RHSA-2017:2478",\ "https://access.redhat.com/errata/RHSA-2017:2479",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://access.redhat.com/errata/RHSA-2017:3195",\ "https://access.redhat.com/errata/RHSA-2017:3475",\ "https://access.redhat.com/errata/RHSA-2017:3476",\ "https://access.redhat.com/errata/RHSA-2017:3477",\ "https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679",\ "https://lists.apache.org/thread.html/f4515e580dfb6eeca589a5cdebd4c4c709ce632b12924f343c3b7751@%3Cdev.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",\ "https://www.nomachine.com/SU08O00185"\ ], "cvss": "7.5", "summary": "In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header." }, "CVE-2017-7659": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3896",\ "http://www.securityfocus.com/bid/99132",\ "http://www.securitytracker.com/id/1038711",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://lists.apache.org/thread.html/1d0b746bbaa3a64890fcdab59ee9050aaa633b7143e7d412374e5a9a@%3Cannounce.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us"\ ], "cvss": "5.0", "summary": "A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process." }, "CVE-2017-9788": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3913",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",\ "http://www.securityfocus.com/bid/99569",\ "http://www.securitytracker.com/id/1038906",\ "https://access.redhat.com/errata/RHSA-2017:2478",\ "https://access.redhat.com/errata/RHSA-2017:2479",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://access.redhat.com/errata/RHSA-2017:2708",\ "https://access.redhat.com/errata/RHSA-2017:2709",\ "https://access.redhat.com/errata/RHSA-2017:2710",\ "https://access.redhat.com/errata/RHSA-2017:3113",\ "https://access.redhat.com/errata/RHSA-2017:3114",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://access.redhat.com/errata/RHSA-2017:3195",\ "https://access.redhat.com/errata/RHSA-2017:3239",\ "https://access.redhat.com/errata/RHSA-2017:3240",\ "https://httpd.apache.org/security/vulnerabilities_22.html",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/0dd69204a6bd643cc4e9ccd008f07a9375525d977c6ebeb07a881afb@%3Cannounce.httpd.apache.org%3E",\ "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20170911-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us"\ ], "cvss": "6.4", "summary": "In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service." }, "CVE-2017-9798": { "verified": false, "references": [\ "http://openwall.com/lists/oss-security/2017/09/18/2",\ "http://www.debian.org/security/2017/dsa-3980",\ "http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html",\ "http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html",\ "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",\ "http://www.securityfocus.com/bid/100872",\ "http://www.securityfocus.com/bid/105598",\ "http://www.securitytracker.com/id/1039387",\ "https://access.redhat.com/errata/RHSA-2017:2882",\ "https://access.redhat.com/errata/RHSA-2017:2972",\ "https://access.redhat.com/errata/RHSA-2017:3018",\ "https://access.redhat.com/errata/RHSA-2017:3113",\ "https://access.redhat.com/errata/RHSA-2017:3114",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://access.redhat.com/errata/RHSA-2017:3195",\ "https://access.redhat.com/errata/RHSA-2017:3239",\ "https://access.redhat.com/errata/RHSA-2017:3240",\ "https://access.redhat.com/errata/RHSA-2017:3475",\ "https://access.redhat.com/errata/RHSA-2017:3476",\ "https://access.redhat.com/errata/RHSA-2017:3477",\ "https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html",\ "https://blog.fuzzing-project.org/uploads/apache-2.2-optionsbleed-backport.patch",\ "https://github.com/apache/httpd/commit/29afdd2550b3d30a8defece2b95ae81edcf66ac9",\ "https://github.com/hannob/optionsbleed",\ "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2017-9798",\ "https://security-tracker.debian.org/tracker/CVE-2017-9798",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0003/",\ "https://support.apple.com/HT208331",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1805223&r2=1807754&pathrev=1807754&view=patch",\ "https://www.exploit-db.com/exploits/42745/",\ "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",\ "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"\ ], "cvss": "5.0", "summary": "Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c." }, "CVE-2018-11763": { "verified": false, "references": [\ "http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html",\ "http://www.securityfocus.com/bid/105414",\ "http://www.securitytracker.com/id/1041713",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://security.netapp.com/advisory/ntap-20190204-0004/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3783-1/",\ "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",\ "https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html"\ ], "cvss": "4.3", "summary": "In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol." }, "CVE-2017-3167": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3896",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",\ "http://www.securityfocus.com/bid/99135",\ "http://www.securitytracker.com/id/1038711",\ "https://access.redhat.com/errata/RHSA-2017:2478",\ "https://access.redhat.com/errata/RHSA-2017:2479",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://access.redhat.com/errata/RHSA-2017:3195",\ "https://access.redhat.com/errata/RHSA-2017:3475",\ "https://access.redhat.com/errata/RHSA-2017:3476",\ "https://access.redhat.com/errata/RHSA-2017:3477",\ "https://lists.apache.org/thread.html/8409e41a8f7dd9ded37141c38df001be930115428c3d64f70bbdb8b4@%3Cdev.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",\ "https://www.nomachine.com/SU08O00185"\ ], "cvss": "7.5", "summary": "In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed." }, "CVE-2018-1312": { "verified": false, "references": [\ "http://www.openwall.com/lists/oss-security/2018/03/24/7",\ "http://www.securityfocus.com/bid/103524",\ "http://www.securitytracker.com/id/1040571",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://access.redhat.com/errata/RHSA-2019:1898",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",\ "https://security.netapp.com/advisory/ntap-20180601-0004/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3627-1/",\ "https://usn.ubuntu.com/3627-2/",\ "https://usn.ubuntu.com/3937-2/",\ "https://www.debian.org/security/2018/dsa-4164"\ ], "cvss": "6.8", "summary": "In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection." }, "CVE-2018-1333": { "verified": false, "references": [\ "http://www.securitytracker.com/id/1041402",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2018-1333",\ "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E",\ "https://security.netapp.com/advisory/ntap-20180926-0007/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3783-1/"\ ], "cvss": "5.0", "summary": "By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33)." }, "CVE-2017-3169": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3896",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",\ "http://www.securityfocus.com/bid/99134",\ "http://www.securitytracker.com/id/1038711",\ "https://access.redhat.com/errata/RHSA-2017:2478",\ "https://access.redhat.com/errata/RHSA-2017:2479",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://access.redhat.com/errata/RHSA-2017:3195",\ "https://access.redhat.com/errata/RHSA-2017:3475",\ "https://access.redhat.com/errata/RHSA-2017:3476",\ "https://access.redhat.com/errata/RHSA-2017:3477",\ "https://github.com/gottburgm/Exploits/tree/master/CVE-2017-3169",\ "https://lists.apache.org/thread.html/84bf7fcc5cad35d355f11839cbdd13cbc5ffc1d34675090bff0f96ae@%3Cdev.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us",\ "https://www.nomachine.com/SU08O00185"\ ], "cvss": "7.5", "summary": "In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port." }, "CVE-2019-0197": { "verified": false, "references": [\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",\ "http://www.openwall.com/lists/oss-security/2019/04/02/2",\ "http://www.securityfocus.com/bid/107665",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/e0b8f6e858b1c8ec2ce8e291a2c543d438915037c7af661ab6d33808@%3Cdev.httpd.apache.org%3E",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",\ "https://security.netapp.com/advisory/ntap-20190617-0002/",\ "https://support.f5.com/csp/article/K44591505"\ ], "cvss": "4.9", "summary": "A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \"H2Upgrade on\" are unaffected by this issue." }, "CVE-2019-0220": { "verified": false, "references": [\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",\ "http://www.openwall.com/lists/oss-security/2019/04/02/6",\ "http://www.securityfocus.com/bid/107670",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.debian.org/debian-lts-announce/2019/04/msg00008.html",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",\ "https://seclists.org/bugtraq/2019/Apr/5",\ "https://security.netapp.com/advisory/ntap-20190625-0007/",\ "https://support.f5.com/csp/article/K44591505",\ "https://usn.ubuntu.com/3937-1/",\ "https://www.debian.org/security/2019/dsa-4422"\ ], "cvss": "5.0", "summary": "A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them." }, "CVE-2019-0211": { "verified": false, "references": [\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html",\ "http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html",\ "http://packetstormsecurity.com/files/152386/Apache-2.4.38-Root-Privilege-Escalation.html",\ "http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-Updates.html",\ "http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privilege-Escalation.html",\ "http://www.apache.org/dist/httpd/CHANGES_2.4.39",\ "http://www.openwall.com/lists/oss-security/2019/04/02/3",\ "http://www.securityfocus.com/bid/107666",\ "https://access.redhat.com/errata/RHBA-2019:0959",\ "https://access.redhat.com/errata/RHSA-2019:0746",\ "https://access.redhat.com/errata/RHSA-2019:0980",\ "https://access.redhat.com/errata/RHSA-2019:1296",\ "https://access.redhat.com/errata/RHSA-2019:1297",\ "https://access.redhat.com/errata/RHSA-2019:1543",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/890507b85c30adf133216b299cc35cd8cd0346a885acfc671c04694e@%3Cdev.community.apache.org%3E",\ "https://lists.apache.org/thread.html/b1613d44ec364c87bb7ee8c5939949f9b061c05c06e0e90098ebf7aa@%3Cusers.httpd.apache.org%3E",\ "https://lists.apache.org/thread.html/b2bdb308dc015e771ba79c0586b2de6fb50caa98b109833f5d4daf28@%3Cdev.community.apache.org%3E",\ "https://lists.apache.org/thread.html/de881a130bc9cb2f3a9ff220784520556884fb8ea80e69400a45509e@%3Cdev.community.apache.org%3E",\ "https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85576ed9285686ac@%3Ccvs.httpd.apache.org%3E",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/",\ "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/",\ "https://seclists.org/bugtraq/2019/Apr/16",\ "https://seclists.org/bugtraq/2019/Apr/5",\ "https://security.gentoo.org/glsa/201904-20",\ "https://security.netapp.com/advisory/ntap-20190423-0001/",\ "https://support.f5.com/csp/article/K32957101",\ "https://usn.ubuntu.com/3937-1/",\ "https://www.debian.org/security/2019/dsa-4422",\ "https://www.exploit-db.com/exploits/46676/",\ "https://www.synology.com/security/advisory/Synology_SA_19_14"\ ], "cvss": "7.2", "summary": "In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected." }, "CVE-2017-15710": { "verified": false, "references": [\ "http://www.openwall.com/lists/oss-security/2018/03/24/8",\ "http://www.securityfocus.com/bid/103512",\ "http://www.securitytracker.com/id/1040569",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E",\ "https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html",\ "https://security.netapp.com/advisory/ntap-20180601-0004/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3627-1/",\ "https://usn.ubuntu.com/3627-2/",\ "https://usn.ubuntu.com/3937-2/",\ "https://www.debian.org/security/2018/dsa-4164"\ ], "cvss": "5.0", "summary": "In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset conversion table, a fallback mechanism is used to truncate it to a two characters value to allow a quick retry (for example, 'en-US' is truncated to 'en'). A header value of less than two characters forces an out of bound write of one NUL byte to a memory location that is not part of the string. In the worst case, quite unlikely, the process would crash which could be used as a Denial of Service attack. In the more likely case, this memory is already reserved for future use and the issue has no effect at all." }, "CVE-2018-1283": { "verified": false, "references": [\ "http://www.openwall.com/lists/oss-security/2018/03/24/4",\ "http://www.securityfocus.com/bid/103520",\ "http://www.securitytracker.com/id/1040568",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E",\ "https://security.netapp.com/advisory/ntap-20180601-0004/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3627-1/",\ "https://usn.ubuntu.com/3627-2/",\ "https://www.debian.org/security/2018/dsa-4164"\ ], "cvss": "3.5", "summary": "In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a \"Session\" header. This comes from the \"HTTP_SESSION\" variable name used by mod_session to forward its data to CGIs, since the prefix \"HTTP_\" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications." }, "CVE-2017-7668": { "verified": false, "references": [\ "http://www.debian.org/security/2017/dsa-3896",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html",\ "http://www.securityfocus.com/bid/99137",\ "http://www.securitytracker.com/id/1038711",\ "https://access.redhat.com/errata/RHSA-2017:2479",\ "https://access.redhat.com/errata/RHSA-2017:2483",\ "https://access.redhat.com/errata/RHSA-2017:3193",\ "https://access.redhat.com/errata/RHSA-2017:3194",\ "https://lists.apache.org/thread.html/55a068b6a5eec0b3198ae7d96a7cb412352d0ffa7716612c5af3745b@%3Cdev.httpd.apache.org%3E",\ "https://security.gentoo.org/glsa/201710-32",\ "https://security.netapp.com/advisory/ntap-20180601-0002/",\ "https://support.apple.com/HT208221",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us"\ ], "cvss": "7.5", "summary": "The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value." }, "CVE-2017-15715": { "verified": false, "references": [\ "http://www.openwall.com/lists/oss-security/2018/03/24/6",\ "http://www.securityfocus.com/bid/103525",\ "http://www.securitytracker.com/id/1040570",\ "https://access.redhat.com/errata/RHSA-2018:3558",\ "https://access.redhat.com/errata/RHSA-2019:0366",\ "https://access.redhat.com/errata/RHSA-2019:0367",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E",\ "https://security.netapp.com/advisory/ntap-20180601-0004/",\ "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us",\ "https://usn.ubuntu.com/3627-1/",\ "https://usn.ubuntu.com/3627-2/",\ "https://www.debian.org/security/2018/dsa-4164"\ ], "cvss": "6.8", "summary": "In Apache httpd 2.4.0 to 2.4.29, the expression specified in could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename." }, "CVE-2018-17199": { "verified": false, "references": [\ "http://www.securityfocus.com/bid/106742",\ "https://httpd.apache.org/security/vulnerabilities_24.html",\ "https://lists.debian.org/debian-lts-announce/2019/01/msg00024.html",\ "https://seclists.org/bugtraq/2019/Apr/5",\ "https://security.gentoo.org/glsa/201903-21",\ "https://security.netapp.com/advisory/ntap-20190125-0001/",\ "https://usn.ubuntu.com/3937-1/",\ "https://www.debian.org/security/2019/dsa-4422",\ "https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html",\ "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html"\ ], "cvss": "5.0", "summary": "In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded." } }, "timestamp": "2021-12-26T13:50:38.138557", "hostnames": [\ "cloud.sata.support.de"\ ], "org": null, "data": "HTTP/1.1 400 Bad Request\r\nDate: Sun, 26 Dec 2021 13:50:38 GMT\r\nServer: Apache/2.4.25 (Debian)\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nContent-Security-Policy: default-src 'self'; script-src 'self' 'nonce-Uzg3RlR0SGV4eWk2ZkVQTzRYVHVweUl5Y2x0MVFuRUF5WGlhSmlKa0Rvcz06SkxTY0llR3RsMmZ5UkNTbXF5T2RrRlp4SWc4Z0lVQm9peW5VVkdNSU4rND0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';\r\nReferrer-Policy: no-referrer\r\nX-Content-Type-Options: nosniff\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-Robots-Tag: none\r\nX-XSS-Protection: 1; mode=block\r\nSet-Cookie: ocywvd3d4ksh=eva1s52oicv8tdeb7g0b7e66bc; path=/; HttpOnly\r\nSet-Cookie: oc_sessionPassphrase=turMN1jcd3qqiI4qFzrzqLVxkULQrAqmYaBNYHnPK0glR4ABkZKVi1TWtcxL9p%2Fp3XJi9UE35rkiewLJaoKAb5d%2B74HSEZZI4GpPVWWasb7X6YAeC5MncH8FVtfFNS7O; path=/; HttpOnly\r\nSet-Cookie: nc_sameSiteCookielax=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax\r\nSet-Cookie: nc_sameSiteCookiestrict=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n", "port": 80, "transport": "tcp", "info": "(Debian)", "isp": "Hetzner Online GmbH", "cpe23": [\ "cpe:2.3:a:php:php",\ "cpe:2.3:a:apache:http_server:2.4.25"\ ], "cpe": [\ "cpe:/a:php:php",\ "cpe:/a:apache:http_server:2.4.25"\ ], "asn": "AS24940", "version": "2.4.25", "location": { "city": "Oberdorla", "region_code": "TH", "area_code": null, "longitude": 10.42163, "latitude": 51.16585, "country_code": "DE", "country_name": "Germany" }, "ip": 2297678709, "domains": [\ "support.de"\ ], "ip_str": "136.243.203.117", "os": null, "_shodan": { "crawler": "78039f81a0245caa8ab71c98182f0eff0ce52aab", "options": {}, "id": "bb74aed0-dd93-4d4b-a51e-dd3bb2e10e04", "module": "http", "ptr": true }, "opts": {} } ... ###### GET/shodan/custom?query={query} ###### **Filtered by Query** Only returns banner data for the specified query. This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in banners matching a specific query. It generally follows the query syntax of the main search engine except that here the query is **case-sensitive**! The list of available keys can be found at [Search Filters.](https://www.shodan.io/search/filters) Put a "-" or "!" before the key to negate the filter terms. ###### **Request URL** https://stream.shodan.io/shodan/custom/query={query}?key={YOUR_API_KEY} * **query:** \[String\] Space-separated list of case-sensitive key:value filters or data query; example "port:8080,443", "port:22 SSH-2.0-OpenSSH\_6.4", "!country:VN" **Examples** cURL Shodan CLI Python Request $ curl -G --data-urlencode "query=port:22 SSH-2.0-OpenSSH_6.4" "https://stream.shodan.io/shodan/custom?key={YOUR_API_KEY}" Response { "product": "OpenSSH", "hash": -1029792425, "timestamp": "2021-12-27T18:21:53.120661", "hostnames": [], "org": "PEG TECH INC", "data": "SSH-2.0-OpenSSH_6.4\\r\\n", "port": 22, "transport": "tcp", "info": "protocol 2.0", "isp": "PEG TECH INC", "cpe23": [\ "cpe:2.3:a:openbsd:openssh:6.4\\r\\n"\ ], "cpe": [\ "cpe:/a:openbsd:openssh:6.4\\r\\n"\ ], "asn": "AS54600", "version": "6.4\\r\\n", "location": { "city": "San Jose", "region_code": "CA", "area_code": null, "longitude": -121.89496, "latitude": 37.33939, "country_code": "US", "country_name": "United States" }, "ip": 1804948851, "domains": [], "ip_str": "107.149.85.115", "os": null, "_shodan": { "crawler": "ada8582d54117e5eb7c72186882e76f0854a54ae", "options": {}, "id": "37f17a39-b456-4dbf-85ea-6dfd2d3f362f", "module": "auto", "ptr": true }, "opts": { "raw": "5353482d322e302d4f70656e5353485f362e340d0a" } } { "product": "OpenSSH", "hash": -1400530513, "vulns": { "CVE-2014-2532": { "verified": false, "references": [\ "http://advisories.mageia.org/MGASA-2014-0143.html",\ "http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc",\ "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html",\ "http://marc.info/?l=bugtraq&m=141576985122836&w=2",\ "http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2",\ "http://rhn.redhat.com/errata/RHSA-2014-1552.html",\ "http://secunia.com/advisories/59855",\ "http://www.debian.org/security/2014/dsa-2894",\ "http://www.mandriva.com/security/advisories?name=MDVSA-2014:068",\ "http://www.mandriva.com/security/advisories?name=MDVSA-2015:095",\ "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html",\ "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",\ "http://www.securityfocus.com/bid/66355",\ "http://www.securitytracker.com/id/1029925",\ "http://www.ubuntu.com/usn/USN-2155-1",\ "https://exchange.xforce.ibmcloud.com/vulnerabilities/91986",\ "https://support.apple.com/HT205267"\ ], "cvss": 5.8, "summary": "sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character." }, "CVE-2018-15919": { "verified": false, "references": [\ "http://seclists.org/oss-sec/2018/q3/180",\ "http://www.securityfocus.com/bid/105163",\ "https://security.netapp.com/advisory/ntap-20181221-0001/"\ ], "cvss": "5.0", "summary": "Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or \"oracle\") as a vulnerability.'" }, "CVE-2017-15906": { "verified": false, "references": [\ "http://www.securityfocus.com/bid/101552",\ "https://access.redhat.com/errata/RHSA-2018:0980",\ "https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19",\ "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",\ "https://security.gentoo.org/glsa/201801-05",\ "https://security.netapp.com/advisory/ntap-20180423-0004/",\ "https://www.openssh.com/txt/release-7.6"\ ], "cvss": 5, "summary": "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files." }, "CVE-2014-1692": { "verified": false, "references": [\ "http://marc.info/?l=bugtraq&m=141576985122836&w=2",\ "http://marc.info/?l=bugtraq&m=144050155601375&w=2",\ "http://openwall.com/lists/oss-security/2014/01/29/10",\ "http://openwall.com/lists/oss-security/2014/01/29/2",\ "http://secunia.com/advisories/60184",\ "http://www-01.ibm.com/support/docview.wss?uid=isg3T1020637",\ "http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/Attic/schnorr.c.diff?r1=1.9;r2=1.10;f=h",\ "http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/schnorr.c#rev1.10",\ "http://www.securityfocus.com/bid/65230",\ "https://exchange.xforce.ibmcloud.com/vulnerabilities/90819"\ ], "cvss": 7.5, "summary": "The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition." }, "CVE-2014-2653": { "verified": false, "references": [\ "http://advisories.mageia.org/MGASA-2014-0166.html",\ "http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc",\ "http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html",\ "http://marc.info/?l=bugtraq&m=141576985122836&w=2",\ "http://openwall.com/lists/oss-security/2014/03/26/7",\ "http://rhn.redhat.com/errata/RHSA-2014-1552.html",\ "http://rhn.redhat.com/errata/RHSA-2015-0425.html",\ "http://secunia.com/advisories/59855",\ "http://www.debian.org/security/2014/dsa-2894",\ "http://www.mandriva.com/security/advisories?name=MDVSA-2014:068",\ "http://www.mandriva.com/security/advisories?name=MDVSA-2015:095",\ "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",\ "http://www.securityfocus.com/bid/66459",\ "http://www.ubuntu.com/usn/USN-2164-1",\ "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742513"\ ], "cvss": 5.8, "summary": "The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate." }, "CVE-2016-10708": { "verified": false, "references": [\ "http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html",\ "http://www.securityfocus.com/bid/102780",\ "https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737",\ "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",\ "https://lists.debian.org/debian-lts-announce/2018/01/msg00031.html",\ "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",\ "https://security.netapp.com/advisory/ntap-20180423-0003/",\ "https://usn.ubuntu.com/3809-1/",\ "https://www.openssh.com/releasenotes.html"\ ], "cvss": "5.0", "summary": "sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c." }, "CVE-2016-0777": { "verified": false, "references": [\ "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734",\ "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html",\ "http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html",\ "http://seclists.org/fulldisclosure/2016/Jan/44",\ "http://www.debian.org/security/2016/dsa-3446",\ "http://www.openssh.com/txt/release-7.1p2",\ "http://www.openwall.com/lists/oss-security/2016/01/14/7",\ "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",\ "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",\ "http://www.securityfocus.com/archive/1/537295/100/0/threaded",\ "http://www.securityfocus.com/bid/80695",\ "http://www.securitytracker.com/id/1034671",\ "http://www.ubuntu.com/usn/USN-2869-1",\ "https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/",\ "https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/",\ "https://bto.bluecoat.com/security-advisory/sa109",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",\ "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc",\ "https://security.gentoo.org/glsa/201601-01",\ "https://support.apple.com/HT206167"\ ], "cvss": "4.0", "summary": "The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key." }, "CVE-2016-0778": { "verified": false, "references": [\ "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734",\ "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html",\ "http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html",\ "http://seclists.org/fulldisclosure/2016/Jan/44",\ "http://www.debian.org/security/2016/dsa-3446",\ "http://www.openssh.com/txt/release-7.1p2",\ "http://www.openwall.com/lists/oss-security/2016/01/14/7",\ "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",\ "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",\ "http://www.securityfocus.com/archive/1/537295/100/0/threaded",\ "http://www.securityfocus.com/bid/80698",\ "http://www.securitytracker.com/id/1034671",\ "http://www.ubuntu.com/usn/USN-2869-1",\ "https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/",\ "https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/",\ "https://bto.bluecoat.com/security-advisory/sa109",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",\ "https://security.gentoo.org/glsa/201601-01",\ "https://support.apple.com/HT206167"\ ], "cvss": "4.6", "summary": "The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings." } }, "timestamp": "2021-12-27T18:21:39.929427", "hostnames": [], "ssh": { "hassh": "cca34b641961a75a15b91d1f1a13a3fb", "fingerprint": "03:b2:2e:ab:88:bc:48:67:d0:54:3e:4d:f4:bb:5c:d1", "mac": "hmac-sha2-256", "cipher": "aes128-ctr", "key": "AAAAB3NzaC1yc2EAAAADAQABAAABAQDFwCWAOWfK2UouwmiJ1pm4iXTNwvqhEPHtnR1Pc6wI5SiE\nEhGI/ckuGstLUTIBLbgO6jz+B94MKt+SQqMzamaZd/khexavl2bzYq4YtF79o42V1/im7qw/lBXq\ncUuyTYWakhxQUlOyz75Kw8G87O5Fl0Mgwp2bN9aRAKJpsjFCX3n/d8p6NKNZRdmvl+aimjhDAeKF\nopxIRHlfSUruY9XHVIqI9XxE1IH3c7Ean7QkRI4hKTUC6BCLqGOW2lPtetFsbaFICYBugxSKGJkd\nm/7DAakoYm9bTZsGexUFRz9P+h7pTXSMKmW3H2/ioqcarmvs2e+6QeTBOV9VTq2baOop\n", "kex": { "languages": [\ ""\ ], "server_host_key_algorithms": [\ "ssh-rsa",\ "ecdsa-sha2-nistp256"\ ], "encryption_algorithms": [\ "aes128-ctr",\ "aes192-ctr",\ "aes256-ctr",\ "arcfour256",\ "arcfour128",\ "aes128-gcm@openssh.com",\ "aes256-gcm@openssh.com",\ "aes128-cbc",\ "3des-cbc",\ "blowfish-cbc",\ "cast128-cbc",\ "aes192-cbc",\ "aes256-cbc",\ "arcfour",\ "rijndael-cbc@lysator.liu.se"\ ], "kex_follows": false, "unused": 0, "kex_algorithms": [\ "ecdh-sha2-nistp256",\ "ecdh-sha2-nistp384",\ "ecdh-sha2-nistp521",\ "diffie-hellman-group-exchange-sha256",\ "diffie-hellman-group-exchange-sha1",\ "diffie-hellman-group14-sha1",\ "diffie-hellman-group1-sha1"\ ], "compression_algorithms": [\ "none",\ "zlib@openssh.com"\ ], "mac_algorithms": [\ "hmac-md5-etm@openssh.com",\ "hmac-sha1-etm@openssh.com",\ "umac-64-etm@openssh.com",\ "umac-128-etm@openssh.com",\ "hmac-sha2-256-etm@openssh.com",\ "hmac-sha2-512-etm@openssh.com",\ "hmac-ripemd160-etm@openssh.com",\ "hmac-sha1-96-etm@openssh.com",\ "hmac-md5-96-etm@openssh.com",\ "hmac-md5",\ "hmac-sha1",\ "umac-64@openssh.com",\ "umac-128@openssh.com",\ "hmac-sha2-256",\ "hmac-sha2-512",\ "hmac-ripemd160",\ "hmac-ripemd160@openssh.com",\ "hmac-sha1-96",\ "hmac-md5-96"\ ] }, "type": "ssh-rsa" }, "org": "Henan Telcom Union Technology Co., LTD", "data": "SSH-2.0-OpenSSH_6.4\nKey type: ssh-rsa\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQDFwCWAOWfK2UouwmiJ1pm4iXTNwvqhEPHtnR1Pc6wI5SiE\nEhGI/ckuGstLUTIBLbgO6jz+B94MKt+SQqMzamaZd/khexavl2bzYq4YtF79o42V1/im7qw/lBXq\ncUuyTYWakhxQUlOyz75Kw8G87O5Fl0Mgwp2bN9aRAKJpsjFCX3n/d8p6NKNZRdmvl+aimjhDAeKF\nopxIRHlfSUruY9XHVIqI9XxE1IH3c7Ean7QkRI4hKTUC6BCLqGOW2lPtetFsbaFICYBugxSKGJkd\nm/7DAakoYm9bTZsGexUFRz9P+h7pTXSMKmW3H2/ioqcarmvs2e+6QeTBOV9VTq2baOop\nFingerprint: 03:b2:2e:ab:88:bc:48:67:d0:54:3e:4d:f4:bb:5c:d1\n\nKex Algorithms:\n\tecdh-sha2-nistp256\n\tecdh-sha2-nistp384\n\tecdh-sha2-nistp521\n\tdiffie-hellman-group-exchange-sha256\n\tdiffie-hellman-group-exchange-sha1\n\tdiffie-hellman-group14-sha1\n\tdiffie-hellman-group1-sha1\n\nServer Host Key Algorithms:\n\tssh-rsa\n\tecdsa-sha2-nistp256\n\nEncryption Algorithms:\n\taes128-ctr\n\taes192-ctr\n\taes256-ctr\n\tarcfour256\n\tarcfour128\n\taes128-gcm@openssh.com\n\taes256-gcm@openssh.com\n\taes128-cbc\n\t3des-cbc\n\tblowfish-cbc\n\tcast128-cbc\n\taes192-cbc\n\taes256-cbc\n\tarcfour\n\trijndael-cbc@lysator.liu.se\n\nMAC Algorithms:\n\thmac-md5-etm@openssh.com\n\thmac-sha1-etm@openssh.com\n\tumac-64-etm@openssh.com\n\tumac-128-etm@openssh.com\n\thmac-sha2-256-etm@openssh.com\n\thmac-sha2-512-etm@openssh.com\n\thmac-ripemd160-etm@openssh.com\n\thmac-sha1-96-etm@openssh.com\n\thmac-md5-96-etm@openssh.com\n\thmac-md5\n\thmac-sha1\n\tumac-64@openssh.com\n\tumac-128@openssh.com\n\thmac-sha2-256\n\thmac-sha2-512\n\thmac-ripemd160\n\thmac-ripemd160@openssh.com\n\thmac-sha1-96\n\thmac-md5-96\n\nCompression Algorithms:\n\tnone\n\tzlib@openssh.com\n\n", "port": 22, "cpe23": [\ "cpe:2.3:a:openbsd:openssh:6.4"\ ], "info": "protocol 2.0", "isp": "Zhengzhou Fastidc Technology Co.,Ltd.", "transport": "tcp", "cpe": [\ "cpe:/a:openbsd:openssh:6.4"\ ], "asn": "AS56005", "version": "6.4", "location": { "city": "Tianjin", "region_code": "TJ", "area_code": null, "longitude": 117.17667, "latitude": 39.14222, "country_code": "CN", "country_name": "China" }, "ip": 707994107, "domains": [], "ip_str": "42.51.33.251", "os": null, "_shodan": { "crawler": "49217c0cdcbcebaf23c2979ae16d4eba64180b1f", "options": {}, "id": "202965c3-78b2-4938-936f-6899d2cec8e4", "module": "ssh", "ptr": true }, "opts": {} } ... Request $ shodan stream --custom "port:22 SSH-2.0-OpenSSH_6.4" Response 137.175.113.46 22 SSH-2.0-OpenSSH_6.4\nKey type: ssh-rsa\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQCqhhK+6gyE1MdcL8lqwLw10BBpj9k++QaHi6oCXPXVJbbJ\nW1AUhdk4tKiWVtyYWS9EZ4jQ9vGIWtQxxlqBp9iD8ffpiibFHYefhjfU/0QFwVTYoSx63CQzXO7+\n6zSnqVDUVmlSriGeBK3EyuiWWJYbgxag2BmVdluIWgktppAeWYkBcYv2BRW9AIM8JvGPFXJllSrs\n8jzRh+WWRnjC+Q5+kqN6urrVvugHzOWXBmwXOKD8bOVLiXxy15WIzBKmYSKeoKsU5J1tfb8wjT4Q\nDEcwEwvPd2ZH3W3OACZbHw7JhcEXw+1Qxz/wrxFA6xouKadz4OnB4Ct06HcEvp7avMrD\nFingerprint: 17:fc:ff:f7:e8:04:a1:c2:e6:d0:0c:7d:3f:7a:50:93\n\nKex Algorithms:\n\tecdh-sha2-nistp256\n\tecdh-sha2-nistp384\n\tecdh-sha2-nistp521\n\tdiffie-hellman-group-exchange-sha256\n\tdiffie-hellman-group-exchange-sha1\n\tdiffie-hellman-group14-sha1\n\tdiffie-hellman-group1-sha1\n\nServer Host Key Algorithms:\n\tssh-rsa\n\tecdsa-sha2-nistp256\n\nEncryption Algorithms:\n\taes128-ctr\n\taes192-ctr\n\taes256-ctr\n\tarcfour256\n\tarcfour128\n\taes128-gcm@openssh.com\n\taes256-gcm@openssh.com\n\taes128-cbc\n\t3des-cbc\n\tblowfish-cbc\n\tcast128-cbc\n\taes192-cbc\n\taes256-cbc\n\tarcfour\n\trijndael-cbc@lysator.liu.se\n\nMAC Algorithms:\n\thmac-md5-etm@openssh.com\n\thmac-sha1-etm@openssh.com\n\tumac-64-etm@openssh.com\n\tumac-128-etm@openssh.com\n\thmac-sha2-256-etm@openssh.com\n\thmac-sha2-512-etm@openssh.com\n\thmac-ripemd160-etm@openssh.com\n\thmac-sha1-96-etm@openssh.com\n\thmac-md5-96-etm@openssh.com\n\thmac-md5\n\thmac-sha1\n\tumac-64@openssh.com\n\tumac-128@openssh.com\n\thmac-sha2-256\n\thmac-sha2-512\n\thmac-ripemd160\n\thmac-ripemd160@openssh.com\n\thmac-sha1-96\n\thmac-md5-96\n\nCompression Algorithms:\n\tnone\n\tzlib@openssh.com\n\n 192.74.224.154 22 SSH-2.0-OpenSSH_6.4\nKey type: ssh-rsa\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQC0X2KQh7lXH9T3892mIbHxM7iVB4znBK3DYWMZ1pjZuzmY\ndCKT6grznVBMI6C76xpev81c+9CEhDunEv6mr3tWOuOk7qNZ5YvBziaXfM7FYM+1TpauX2DsxBAd\nZHOfd2ryRkULJYwhhSeZL1Ll/zlrxIkhWChRIb4PPnwWcoIeFDY9OlbQBaWeJKexxLnhTx0PLOX5\n8dOC2q24v8SUOXMuus+vOsz1LtnZRWGcOCfmMccGWwtgj2c4P1035A+kLrTbpq6eRaS/a9JlNJlG\n/UwzAeL3FAH3QlNIKEUBUG46VRadQ6GsfBmaWCMpRPXuBen6gqwGemNvRkf5e6qwUoWT\nFingerprint: 4e:e3:af:75:1f:ab:b2:39:ff:4f:f9:4f:81:ee:78:b2\n\nKex Algorithms:\n\tecdh-sha2-nistp256\n\tecdh-sha2-nistp384\n\tecdh-sha2-nistp521\n\tdiffie-hellman-group-exchange-sha256\n\tdiffie-hellman-group-exchange-sha1\n\tdiffie-hellman-group14-sha1\n\tdiffie-hellman-group1-sha1\n\nServer Host Key Algorithms:\n\tssh-rsa\n\tecdsa-sha2-nistp256\n\nEncryption Algorithms:\n\taes128-ctr\n\taes192-ctr\n\taes256-ctr\n\tarcfour256\n\tarcfour128\n\taes128-gcm@openssh.com\n\taes256-gcm@openssh.com\n\taes128-cbc\n\t3des-cbc\n\tblowfish-cbc\n\tcast128-cbc\n\taes192-cbc\n\taes256-cbc\n\tarcfour\n\trijndael-cbc@lysator.liu.se\n\nMAC Algorithms:\n\thmac-md5-etm@openssh.com\n\thmac-sha1-etm@openssh.com\n\tumac-64-etm@openssh.com\n\tumac-128-etm@openssh.com\n\thmac-sha2-256-etm@openssh.com\n\thmac-sha2-512-etm@openssh.com\n\thmac-ripemd160-etm@openssh.com\n\thmac-sha1-96-etm@openssh.com\n\thmac-md5-96-etm@openssh.com\n\thmac-md5\n\thmac-sha1\n\tumac-64@openssh.com\n\tumac-128@openssh.com\n\thmac-sha2-256\n\thmac-sha2-512\n\thmac-ripemd160\n\thmac-ripemd160@openssh.com\n\thmac-sha1-96\n\thmac-md5-96\n\nCompression Algorithms:\n\tnone\n\tzlib@openssh.com\n\n 23.95.27.143 22 23-95-27-143-host.colocrossing.com SSH-2.0-OpenSSH_6.4\nKey type: ssh-rsa\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQDb0/uGkFtis2b+Bq0O9LKijxUqyumtJ1KW0FNcTm8z9Vik\nMobyt61lX1nSbFDs6mQkS34mfSahdPd0RpwmVCr62MQB3xPwqPyURPEz9ZO17VNeqvzyI9Oo8sA4\n3VizuJLv6bkZ/DZxYXKOBgmWwWmwiSq+Chj5GXGuCYM/FXnkEnhBFBO6dyuPz+tUO/nIULpyTZ5b\nhMD9ABvErm6vDXFFnCR3BEdi5zPjYir0mZzkBE1enlMOCYbLgaS0L2JER1Ote4AtBlexxhj6/6Ry\n4IRdJlgqymVfVq0KgpLGJN1VnF4I0KC2si52fTy3KSsi65xZcYnZrLeIkgf4Vm2ee5oz\nFingerprint: fd:1b:0c:49:c9:aa:07:1b:b2:ae:20:e5:2a:6b:43:f8\n\nKex Algorithms:\n\tecdh-sha2-nistp256\n\tecdh-sha2-nistp384\n\tecdh-sha2-nistp521\n\tdiffie-hellman-group-exchange-sha256\n\tdiffie-hellman-group-exchange-sha1\n\tdiffie-hellman-group14-sha1\n\tdiffie-hellman-group1-sha1\n\nServer Host Key Algorithms:\n\tssh-rsa\n\tecdsa-sha2-nistp256\n\nEncryption Algorithms:\n\taes128-ctr\n\taes192-ctr\n\taes256-ctr\n\tarcfour256\n\tarcfour128\n\taes128-gcm@openssh.com\n\taes256-gcm@openssh.com\n\taes128-cbc\n\t3des-cbc\n\tblowfish-cbc\n\tcast128-cbc\n\taes192-cbc\n\taes256-cbc\n\tarcfour\n\trijndael-cbc@lysator.liu.se\n\nMAC Algorithms:\n\thmac-md5-etm@openssh.com\n\thmac-sha1-etm@openssh.com\n\tumac-64-etm@openssh.com\n\tumac-128-etm@openssh.com\n\thmac-sha2-256-etm@openssh.com\n\thmac-sha2-512-etm@openssh.com\n\thmac-ripemd160-etm@openssh.com\n\thmac-sha1-96-etm@openssh.com\n\thmac-md5-96-etm@openssh.com\n\thmac-md5\n\thmac-sha1\n\tumac-64@openssh.com\n\tumac-128@openssh.com\n\thmac-sha2-256\n\thmac-sha2-512\n\thmac-ripemd160\n\thmac-ripemd160@openssh.com\n\thmac-sha1-96\n\thmac-md5-96\n\nCompression Algorithms:\n\tnone\n\tzlib@openssh.com\n\n ... Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') for banner in api.stream.custom(query="port:22 SSH-2.0-OpenSSH_6.4", raw=False, timeout=None): print(banner) Response { "product": "OpenSSH", "hash": -1029792425, "timestamp": "2021-12-27T18:21:53.120661", "hostnames": [], "org": "PEG TECH INC", "data": "SSH-2.0-OpenSSH_6.4\\r\\n", "port": 22, "transport": "tcp", "info": "protocol 2.0", "isp": "PEG TECH INC", "cpe23": [\ "cpe:2.3:a:openbsd:openssh:6.4\\r\\n"\ ], "cpe": [\ "cpe:/a:openbsd:openssh:6.4\\r\\n"\ ], "asn": "AS54600", "version": "6.4\\r\\n", "location": { "city": "San Jose", "region_code": "CA", "area_code": null, "longitude": -121.89496, "latitude": 37.33939, "country_code": "US", "country_name": "United States" }, "ip": 1804948851, "domains": [], "ip_str": "107.149.85.115", "os": null, "_shodan": { "crawler": "ada8582d54117e5eb7c72186882e76f0854a54ae", "options": {}, "id": "37f17a39-b456-4dbf-85ea-6dfd2d3f362f", "module": "auto", "ptr": true }, "opts": { "raw": "5353482d322e302d4f70656e5353485f362e340d0a" } } { "product": "OpenSSH", "hash": -1400530513, "vulns": { "CVE-2014-2532": { "verified": false, "references": [\ "http://advisories.mageia.org/MGASA-2014-0143.html",\ "http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc",\ "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html",\ "http://marc.info/?l=bugtraq&m=141576985122836&w=2",\ "http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2",\ "http://rhn.redhat.com/errata/RHSA-2014-1552.html",\ "http://secunia.com/advisories/59855",\ "http://www.debian.org/security/2014/dsa-2894",\ "http://www.mandriva.com/security/advisories?name=MDVSA-2014:068",\ "http://www.mandriva.com/security/advisories?name=MDVSA-2015:095",\ "http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html",\ "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",\ "http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html",\ "http://www.securityfocus.com/bid/66355",\ "http://www.securitytracker.com/id/1029925",\ "http://www.ubuntu.com/usn/USN-2155-1",\ "https://exchange.xforce.ibmcloud.com/vulnerabilities/91986",\ "https://support.apple.com/HT205267"\ ], "cvss": 5.8, "summary": "sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character." }, "CVE-2018-15919": { "verified": false, "references": [\ "http://seclists.org/oss-sec/2018/q3/180",\ "http://www.securityfocus.com/bid/105163",\ "https://security.netapp.com/advisory/ntap-20181221-0001/"\ ], "cvss": "5.0", "summary": "Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or \"oracle\") as a vulnerability.'" }, "CVE-2017-15906": { "verified": false, "references": [\ "http://www.securityfocus.com/bid/101552",\ "https://access.redhat.com/errata/RHSA-2018:0980",\ "https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19",\ "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",\ "https://security.gentoo.org/glsa/201801-05",\ "https://security.netapp.com/advisory/ntap-20180423-0004/",\ "https://www.openssh.com/txt/release-7.6"\ ], "cvss": 5, "summary": "The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files." }, "CVE-2014-1692": { "verified": false, "references": [\ "http://marc.info/?l=bugtraq&m=141576985122836&w=2",\ "http://marc.info/?l=bugtraq&m=144050155601375&w=2",\ "http://openwall.com/lists/oss-security/2014/01/29/10",\ "http://openwall.com/lists/oss-security/2014/01/29/2",\ "http://secunia.com/advisories/60184",\ "http://www-01.ibm.com/support/docview.wss?uid=isg3T1020637",\ "http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/Attic/schnorr.c.diff?r1=1.9;r2=1.10;f=h",\ "http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/schnorr.c#rev1.10",\ "http://www.securityfocus.com/bid/65230",\ "https://exchange.xforce.ibmcloud.com/vulnerabilities/90819"\ ], "cvss": 7.5, "summary": "The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition." }, "CVE-2014-2653": { "verified": false, "references": [\ "http://advisories.mageia.org/MGASA-2014-0166.html",\ "http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc",\ "http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html",\ "http://marc.info/?l=bugtraq&m=141576985122836&w=2",\ "http://openwall.com/lists/oss-security/2014/03/26/7",\ "http://rhn.redhat.com/errata/RHSA-2014-1552.html",\ "http://rhn.redhat.com/errata/RHSA-2015-0425.html",\ "http://secunia.com/advisories/59855",\ "http://www.debian.org/security/2014/dsa-2894",\ "http://www.mandriva.com/security/advisories?name=MDVSA-2014:068",\ "http://www.mandriva.com/security/advisories?name=MDVSA-2015:095",\ "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",\ "http://www.securityfocus.com/bid/66459",\ "http://www.ubuntu.com/usn/USN-2164-1",\ "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742513"\ ], "cvss": 5.8, "summary": "The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate." }, "CVE-2016-10708": { "verified": false, "references": [\ "http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html",\ "http://www.securityfocus.com/bid/102780",\ "https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737",\ "https://kc.mcafee.com/corporate/index?page=content&id=SB10284",\ "https://lists.debian.org/debian-lts-announce/2018/01/msg00031.html",\ "https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html",\ "https://security.netapp.com/advisory/ntap-20180423-0003/",\ "https://usn.ubuntu.com/3809-1/",\ "https://www.openssh.com/releasenotes.html"\ ], "cvss": "5.0", "summary": "sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c." }, "CVE-2016-0777": { "verified": false, "references": [\ "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734",\ "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html",\ "http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html",\ "http://seclists.org/fulldisclosure/2016/Jan/44",\ "http://www.debian.org/security/2016/dsa-3446",\ "http://www.openssh.com/txt/release-7.1p2",\ "http://www.openwall.com/lists/oss-security/2016/01/14/7",\ "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",\ "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",\ "http://www.securityfocus.com/archive/1/537295/100/0/threaded",\ "http://www.securityfocus.com/bid/80695",\ "http://www.securitytracker.com/id/1034671",\ "http://www.ubuntu.com/usn/USN-2869-1",\ "https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/",\ "https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/",\ "https://bto.bluecoat.com/security-advisory/sa109",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",\ "https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc",\ "https://security.gentoo.org/glsa/201601-01",\ "https://support.apple.com/HT206167"\ ], "cvss": "4.0", "summary": "The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key." }, "CVE-2016-0778": { "verified": false, "references": [\ "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734",\ "http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html",\ "http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html",\ "http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html",\ "http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html",\ "http://seclists.org/fulldisclosure/2016/Jan/44",\ "http://www.debian.org/security/2016/dsa-3446",\ "http://www.openssh.com/txt/release-7.1p2",\ "http://www.openwall.com/lists/oss-security/2016/01/14/7",\ "http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",\ "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html",\ "http://www.securityfocus.com/archive/1/537295/100/0/threaded",\ "http://www.securityfocus.com/bid/80698",\ "http://www.securitytracker.com/id/1034671",\ "http://www.ubuntu.com/usn/USN-2869-1",\ "https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/",\ "https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/",\ "https://bto.bluecoat.com/security-advisory/sa109",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680",\ "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722",\ "https://security.gentoo.org/glsa/201601-01",\ "https://support.apple.com/HT206167"\ ], "cvss": "4.6", "summary": "The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings." } }, "timestamp": "2021-12-27T18:21:39.929427", "hostnames": [], "ssh": { "hassh": "cca34b641961a75a15b91d1f1a13a3fb", "fingerprint": "03:b2:2e:ab:88:bc:48:67:d0:54:3e:4d:f4:bb:5c:d1", "mac": "hmac-sha2-256", "cipher": "aes128-ctr", "key": "AAAAB3NzaC1yc2EAAAADAQABAAABAQDFwCWAOWfK2UouwmiJ1pm4iXTNwvqhEPHtnR1Pc6wI5SiE\nEhGI/ckuGstLUTIBLbgO6jz+B94MKt+SQqMzamaZd/khexavl2bzYq4YtF79o42V1/im7qw/lBXq\ncUuyTYWakhxQUlOyz75Kw8G87O5Fl0Mgwp2bN9aRAKJpsjFCX3n/d8p6NKNZRdmvl+aimjhDAeKF\nopxIRHlfSUruY9XHVIqI9XxE1IH3c7Ean7QkRI4hKTUC6BCLqGOW2lPtetFsbaFICYBugxSKGJkd\nm/7DAakoYm9bTZsGexUFRz9P+h7pTXSMKmW3H2/ioqcarmvs2e+6QeTBOV9VTq2baOop\n", "kex": { "languages": [\ ""\ ], "server_host_key_algorithms": [\ "ssh-rsa",\ "ecdsa-sha2-nistp256"\ ], "encryption_algorithms": [\ "aes128-ctr",\ "aes192-ctr",\ "aes256-ctr",\ "arcfour256",\ "arcfour128",\ "aes128-gcm@openssh.com",\ "aes256-gcm@openssh.com",\ "aes128-cbc",\ "3des-cbc",\ "blowfish-cbc",\ "cast128-cbc",\ "aes192-cbc",\ "aes256-cbc",\ "arcfour",\ "rijndael-cbc@lysator.liu.se"\ ], "kex_follows": false, "unused": 0, "kex_algorithms": [\ "ecdh-sha2-nistp256",\ "ecdh-sha2-nistp384",\ "ecdh-sha2-nistp521",\ "diffie-hellman-group-exchange-sha256",\ "diffie-hellman-group-exchange-sha1",\ "diffie-hellman-group14-sha1",\ "diffie-hellman-group1-sha1"\ ], "compression_algorithms": [\ "none",\ "zlib@openssh.com"\ ], "mac_algorithms": [\ "hmac-md5-etm@openssh.com",\ "hmac-sha1-etm@openssh.com",\ "umac-64-etm@openssh.com",\ "umac-128-etm@openssh.com",\ "hmac-sha2-256-etm@openssh.com",\ "hmac-sha2-512-etm@openssh.com",\ "hmac-ripemd160-etm@openssh.com",\ "hmac-sha1-96-etm@openssh.com",\ "hmac-md5-96-etm@openssh.com",\ "hmac-md5",\ "hmac-sha1",\ "umac-64@openssh.com",\ "umac-128@openssh.com",\ "hmac-sha2-256",\ "hmac-sha2-512",\ "hmac-ripemd160",\ "hmac-ripemd160@openssh.com",\ "hmac-sha1-96",\ "hmac-md5-96"\ ] }, "type": "ssh-rsa" }, "org": "Henan Telcom Union Technology Co., LTD", "data": "SSH-2.0-OpenSSH_6.4\nKey type: ssh-rsa\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQDFwCWAOWfK2UouwmiJ1pm4iXTNwvqhEPHtnR1Pc6wI5SiE\nEhGI/ckuGstLUTIBLbgO6jz+B94MKt+SQqMzamaZd/khexavl2bzYq4YtF79o42V1/im7qw/lBXq\ncUuyTYWakhxQUlOyz75Kw8G87O5Fl0Mgwp2bN9aRAKJpsjFCX3n/d8p6NKNZRdmvl+aimjhDAeKF\nopxIRHlfSUruY9XHVIqI9XxE1IH3c7Ean7QkRI4hKTUC6BCLqGOW2lPtetFsbaFICYBugxSKGJkd\nm/7DAakoYm9bTZsGexUFRz9P+h7pTXSMKmW3H2/ioqcarmvs2e+6QeTBOV9VTq2baOop\nFingerprint: 03:b2:2e:ab:88:bc:48:67:d0:54:3e:4d:f4:bb:5c:d1\n\nKex Algorithms:\n\tecdh-sha2-nistp256\n\tecdh-sha2-nistp384\n\tecdh-sha2-nistp521\n\tdiffie-hellman-group-exchange-sha256\n\tdiffie-hellman-group-exchange-sha1\n\tdiffie-hellman-group14-sha1\n\tdiffie-hellman-group1-sha1\n\nServer Host Key Algorithms:\n\tssh-rsa\n\tecdsa-sha2-nistp256\n\nEncryption Algorithms:\n\taes128-ctr\n\taes192-ctr\n\taes256-ctr\n\tarcfour256\n\tarcfour128\n\taes128-gcm@openssh.com\n\taes256-gcm@openssh.com\n\taes128-cbc\n\t3des-cbc\n\tblowfish-cbc\n\tcast128-cbc\n\taes192-cbc\n\taes256-cbc\n\tarcfour\n\trijndael-cbc@lysator.liu.se\n\nMAC Algorithms:\n\thmac-md5-etm@openssh.com\n\thmac-sha1-etm@openssh.com\n\tumac-64-etm@openssh.com\n\tumac-128-etm@openssh.com\n\thmac-sha2-256-etm@openssh.com\n\thmac-sha2-512-etm@openssh.com\n\thmac-ripemd160-etm@openssh.com\n\thmac-sha1-96-etm@openssh.com\n\thmac-md5-96-etm@openssh.com\n\thmac-md5\n\thmac-sha1\n\tumac-64@openssh.com\n\tumac-128@openssh.com\n\thmac-sha2-256\n\thmac-sha2-512\n\thmac-ripemd160\n\thmac-ripemd160@openssh.com\n\thmac-sha1-96\n\thmac-md5-96\n\nCompression Algorithms:\n\tnone\n\tzlib@openssh.com\n\n", "port": 22, "cpe23": [\ "cpe:2.3:a:openbsd:openssh:6.4"\ ], "info": "protocol 2.0", "isp": "Zhengzhou Fastidc Technology Co.,Ltd.", "transport": "tcp", "cpe": [\ "cpe:/a:openbsd:openssh:6.4"\ ], "asn": "AS56005", "version": "6.4", "location": { "city": "Tianjin", "region_code": "TJ", "area_code": null, "longitude": 117.17667, "latitude": 39.14222, "country_code": "CN", "country_name": "China" }, "ip": 707994107, "domains": [], "ip_str": "42.51.33.251", "os": null, "_shodan": { "crawler": "49217c0cdcbcebaf23c2979ae16d4eba64180b1f", "options": {}, "id": "202965c3-78b2-4938-936f-6899d2cec8e4", "module": "ssh", "ptr": true }, "opts": {} } ... Network _Alerts_ ================ These streams provide a **Private Firehose** that contain information about the networks that you're monitoring. Use the REST API to create/ delete/ update the list of networks that you want Shodan to monitor. ###### GET/shodan/alert ###### **All Network Alerts** Subscribe to banners discovered on all IP ranges described in the network alerts. The network alerts are renewed periodically every 1 hour. ###### **Request URL** https://stream.shodan.io/shodan/alert?key={YOUR_API_KEY} **Examples** cURL Shodan CLI Python Request $ curl -X GET "https://stream.shodan.io/shodan/alert?key={YOUR_API_KEY}" Response { "hash": -553166942, "timestamp": "2021-01-28T05:39:12.152185", "hostnames": ["dns.google"], "org": "Google", "data": "\nRecursion: enabled", "port": 53, "transport": "udp", "isp": "Google", "asn": "AS15169", "location": { "country_code3": null, "city": null, "region_code": null, "postal_code": null, "longitude": -97.822, "country_code": "US", "latitude": 37.751, "country_name": "United States", "area_code": null, "dma_code": null, }, "dns": { "resolver_hostname": null, "recursive": true, "resolver_id": null, "software": null, }, "ip": 134744072, "domains": ["dns.google"], "ip_str": "8.8.8.8", "_id": "23c49fa8-0c87-4b67-91b7-ab50d493ed7f", "os": null, "_shodan": { "crawler": "308515b6113c0645034fb8122d0ff0d5194e7e72", "options": {}, "id": "0e055a10-9a16-4a8b-ae00-54ae10dd7f16", "module": "dns-udp", "ptr": true, "alert": { "id": "NKXOVKN5W4SPTOF2", "name": "scan 8.8.8.8", }, }, "opts": {"raw": "34ef818200010000000000000776657273696f6e0462696e640000100003"}, } { "hash": 1977582756, "timestamp": "2021-01-28T05:39:16.231331", "hostnames": ["one.one.one.one"], "org": "Mountain View Communications", "data": "\nRecursion: enabled\nResolver ID: VIE", "port": 53, "transport": "udp", "isp": "Mountain View Communications", "asn": "AS13335", "location": { "country_code3": null, "city": null, "region_code": null, "postal_code": null, "longitude": 143.2104, "country_code": "AU", "latitude": -33.494, "country_name": "Australia", "area_code": null, "dma_code": null, }, "dns": { "resolver_hostname": null, "recursive": true, "resolver_id": "VIE", "software": null, }, "ip": 16843009, "domains": ["one.one"], "ip_str": "1.1.1.1", "_id": "08d364c6-fb2a-4a88-9369-e831b53509d1", "os": null, "_shodan": { "crawler": "3901cdc9c9a3b8554f02333e2779a8659643ad15", "options": {}, "id": "52fc8643-5a7d-45d8-9c2e-8b79bd9f6f27", "module": "dns-udp", "ptr": true, "alert": { "id": "TOZN4UUSGPMOYEAI", "name": "one one one one", }, }, "opts": {"raw": "34ef818500010000000000000776657273696f6e0462696e640000100003"}, } ... Request $ shodan stream --alert all Response 8.8.8.8 53 dns.google \nRecursion: enabled 1.1.1.1 53 one.one.one.one \nRecursion: enabled\nResolver ID: AMS ... Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') for banner in api.stream.alert(aid=None, timeout=None, raw=False): print(banner) Response { "hash": 1592421393, "timestamp": "2021-01-28T05:51:32.330798", "hostnames": [\ "one.one.one.one"\ ], "org": "Mountain View Communications", "data": "\nRecursion: enabled\nResolver ID: AMS", "port": 53, "transport": "udp", "isp": "Mountain View Communications", "asn": "AS13335", "location": { "country_code3": None, "city": None, "region_code": None, "postal_code": None, "longitude": 143.2104, "country_code": "AU", "latitude": -33.494, "country_name": "Australia", "area_code": None, "dma_code": None, }, "dns": { "resolver_hostname": None, "recursive": True, "resolver_id": "AMS", "software": None, }, "ip": 16843009, "domains": [\ "one.one"\ ], "ip_str": "1.1.1.1", "_id": "9ac8f44b-91e7-4c08-9191-000569361d7e", "os": None, "_shodan": { "crawler": "bf213bc419cc8491376c12af31e32623c1b6f467", "options": {}, "id": "a5bde924-d263-4493-adf0-c0fa54eca1a2", "module": "dns-udp", "ptr": True, "alert": { "id": "TOZN4UUSGPMOYEAI", "name": "one one one one", }, }, "opts": { "raw": "34ef818500010000000000000776657273696f6e0462696e640000100003" }, } { "hash": -553166942, "timestamp": "2021-01-28T05:51:33.887203", "hostnames": [\ "dns.google"\ ], "org": "Google", "data": "\nRecursion: enabled", "port": 53, "transport": "udp", "isp": "Google", "asn": "AS15169", "location": { "country_code3": None, "city": None, "region_code": None, "postal_code": None, "longitude": -97.822, "country_code": "US", "latitude": 37.751, "country_name": "United States", "area_code": None, "dma_code": None, }, "dns": { "resolver_hostname": None, "recursive": True, "resolver_id": None, "software": None, }, "ip": 134744072, "domains": [\ "dns.google"\ ], "ip_str": "8.8.8.8", "_id": "75beec02-a928-4d2e-ab25-87234ff6b369", "os": None, "_shodan": { "crawler": "e69d8d673faaa42bde0e9c7ce075d3c7146e67d0", "options": {}, "id": "1db7cf0d-b3a0-4772-981c-2d09bafa0c81", "module": "dns-udp", "ptr": True, "alert": { "id": "NKXOVKN5W4SPTOF2", "name": "scan 8.8.8.8", }, }, "opts": { "raw": "34ef818200010000000000000776657273696f6e0462696e640000100003" }, } ... ###### GET/shodan/alert/{id} ###### **Filtered by Alert ID** Subscribe to banners discovered on the IP range defined in a specific network alert. The network alert is renewed periodically every 1 hour. ###### **Request URL** https://stream.shodan.io/shodan/alert/{id}?key={YOUR_API_KEY} ###### **Parameters** * **id:** \[String\] The unique ID of the network alert; example "OYPRB8IR9Z35AZPR" **Examples** cURL Shodan CLI Python Request $ curl -X GET "https://stream.shodan.io/shodan/alert/OYPRB8IR9Z35AZPR?key={YOUR_API_KEY}" Response { "hash": 1592421393, "timestamp": "2021-01-28T05:45:56.563794", "hostnames": [\ "one.one.one.one"\ ], "org": "Mountain View Communications", "data": "\nRecursion: enabled\nResolver ID: AMS", "port": 53, "transport": "udp", "isp": "Mountain View Communications", "asn": "AS13335", "location": { "country_code3": null, "city": null, "region_code": null, "postal_code": null, "longitude": 143.2104, "country_code": "AU", "latitude": -33.494, "country_name": "Australia", "area_code": null, "dma_code": null }, "dns": { "resolver_hostname": null, "recursive": true, "resolver_id": "AMS", "software": null }, "ip": 16843009, "domains": [\ "one.one"\ ], "ip_str": "1.1.1.1", "_id": "8e231550-6f50-440d-b5da-46cc49b2243a", "os": null, "_shodan": { "crawler": "78039f81a0245caa8ab71c98182f0eff0ce52aab", "options": {}, "id": "58ad7d05-7afd-4769-aabb-3045c498f770", "module": "dns-udp", "ptr": true, "alert": { "id": "TOZN4UUSGPMOYEAI", "name": "one one one one", }, }, "opts": { "raw": "34ef818500010000000000000776657273696f6e0462696e640000100003" } } { "hash": -553166942, "timestamp": "2021-01-28T05:46:06.018756", "hostnames": [\ "dns.google"\ ], "org": "Google", "data": "\nRecursion: enabled", "port": 53, "transport": "udp", "isp": "Google", "asn": "AS15169", "location": { "country_code3": null, "city": null, "region_code": null, "postal_code": null, "longitude": -97.822, "country_code": "US", "latitude": 37.751, "country_name": "United States", "area_code": null, "dma_code": null }, "dns": { "resolver_hostname": null, "recursive": true, "resolver_id": null, "software": null }, "ip": 134744072, "domains": [\ "dns.google"\ ], "ip_str": "8.8.8.8", "_id": "e26af2fa-dbcc-4a36-9631-33a46e505b91", "os": null, "_shodan": { "crawler": "44ad81631af4ebeda49a419b8565d5fcd7ac4d2e", "options": {}, "id": "2db17089-b705-459e-9a44-f53ca3b42df1", "module": "dns-udp", "ptr": true, "alert": { "id": "NKXOVKN5W4SPTOF2", "name": "scan 8.8.8.8", }, }, "opts": { "raw": "34ef818200010000000000000776657273696f6e0462696e640000100003" } } ... Request $ shodan stream --alert OYPRB8IR9Z35AZPR Response 1.1.1.1 53 one.one.one.one \nRecursion: enabled\nResolver ID: LAX 8.8.8.8 53 dns.google \nRecursion: enabled ... Request from shodan import Shodan api = Shodan('{YOUR_API_KEY}') for banner in api.stream.alert(aid='OYPRB8IR9Z35AZPR', timeout=None, raw=False): print(banner) Response { "hash": -553166942, "timestamp": "2021-01-28T05:48:02.676422", "hostnames": [\ "dns.google"\ ], "org": "Google", "data": "\nRecursion: enabled", "port": 53, "transport": "udp", "isp": "Google", "asn": "AS15169", "location": { "country_code3": None, "city": None, "region_code": None, "postal_code": None, "longitude": -97.822, "country_code": "US", "latitude": 37.751, "country_name": "United States", "area_code": None, "dma_code": None, }, "dns": { "resolver_hostname": None, "recursive": True, "resolver_id": None, "software": None, }, "ip": 134744072, "domains": [\ "dns.google"\ ], "ip_str": "8.8.8.8", "_id": "f27ed718-1870-4b6a-b856-2a3ecc462e45", "os": None, "_shodan": { "crawler": "487814a778c983e2dcef234806292d88c5cbf3ec", "options": {}, "id": "679127cc-dcc3-4c69-84f4-0011d3cf801c", "module": "dns-udp", "ptr": True, "alert": { "id": "NKXOVKN5W4SPTOF2", "name": "scan 8.8.8.8", }, }, "opts": { "raw": "34ef818200010000000000000776657273696f6e0462696e640000100003" }, } { "hash": 1592421393, "timestamp": "2021-01-28T05:48:03.020873", "hostnames": [\ "one.one.one.one"\ ], "org": "Mountain View Communications", "data": "\nRecursion: enabled\nResolver ID: AMS", "port": 53, "transport": "udp", "isp": "Mountain View Communications", "asn": "AS13335", "location": { "country_code3": None, "city": None, "region_code": None, "postal_code": None, "longitude": 143.2104, "country_code": "AU", "latitude": -33.494, "country_name": "Australia", "area_code": None, "dma_code": None, }, "dns": { "resolver_hostname": None, "recursive": True, "resolver_id": "AMS", "software": None, }, "ip": 16843009, "domains": [\ "one.one"\ ], "ip_str": "1.1.1.1", "_id": "767063ae-26a1-4d61-8af9-1aaec9cfb9f3", "os": None, "_shodan": { "crawler": "d905ab419aeb10e9c57a336c7e1aa9629ae4a733", "options": {}, "id": "ac7ada46-5c59-414f-939e-7b48afbcfe20", "module": "dns-udp", "ptr": True, "alert": { "id": "TOZN4UUSGPMOYEAI", "name": "one one one one", }, }, "opts": { "raw": "34ef818500010000000000000776657273696f6e0462696e640000100003" }, } ... [Next: Trends API Documentation](https://developer.shodan.io/api/stream) ###### Products * [Monitor](https://monitor.shodan.io/) * [Search Engine](https://beta.shodan.io/) * [Developer API](https://developer.shodan.io/) * [Maps](https://maps.shodan.io/) * [Bulk Data](https://enterprise.shodan.io/) * [Images](https://images.shodan.io/) * [Snippets](https://snippets.shodan.io/) ###### Pricing * [Membership](https://www.shodan.io/store/member) * [API Subscriptions](https://developer.shodan.io/pricing) * [Enterprise](https://enterprise.shodan.io/) ###### Contact Us * [support@shodan.io](mailto:support@shodan.io) * ##### [](https://twitter.com/shodanhq)   [](https://www.linkedin.com/company/shodan)   [](https://www.facebook.com/shodan.io) Shodan ® - All rights reserved --- # Unknown ```json { "openapi": "3.0.0", "info": { "title": "Trends API Documentation", "description": "The Trends API which used by Shodan Trends provides a month-to-month breakdown of Shodan historical results.", "version": "1.0.0" }, "servers": [ { "url": "https://trends.shodan.io" } ], "tags": [ { "name": "Historical Data (Enterprise)" } ], "paths": { "/api/v1/search": { "get": { "operationId": "searchTrends", "tags": [ "Historical Data (Enterprise)" ], "summary": "Search Trends", "description": "Get breakdown of historical results aggregate by facet field.", "parameters": [ { "name": "query", "required": true, "in": "query", "schema": { "type": "string" }, "description": "Search query used to search the historical database", "example": "product:nginx" }, { "name": "facets", "in": "query", "schema": { "type": "string" }, "description": "A comma-separated list of properties to get summary information on", "example": "country" }, { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": { "total": 1464808820, "matches": [ { "month": "2017-06", "count": 9038297 }, { "month": "2017-07", "count": 9622979 }, { "month": "2017-08", "count": 9567365 }, { "month": "2017-09", "count": 9336625 }, { "month": "2017-10", "count": 9980807 }, { "month": "2017-11", "count": 10304751 }, { "month": "2017-12", "count": 10588246 }, { "month": "2018-01", "count": 10869472 }, { "month": "2018-02", "count": 10761630 }, { "month": "2018-03", "count": 11029917 }, { "month": "2018-04", "count": 11720458 }, { "month": "2018-05", "count": 12290757 }, { "month": "2018-06", "count": 12486140 }, { "month": "2018-07", "count": 12716243 }, { "month": "2018-08", "count": 13264770 }, { "month": "2018-09", "count": 13628101 }, { "month": "2018-10", "count": 14120929 }, { "month": "2018-11", "count": 14490904 }, { "month": "2018-12", "count": 14941899 }, { "month": "2019-01", "count": 15198471 }, { "month": "2019-02", "count": 15516717 }, { "month": "2019-03", "count": 15873412 }, { "month": "2019-04", "count": 16240612 }, { "month": "2019-05", "count": 16907413 }, { "month": "2019-06", "count": 16725925 }, { "month": "2019-07", "count": 17162899 }, { "month": "2019-08", "count": 17825397 }, { "month": "2019-09", "count": 18199228 }, { "month": "2019-10", "count": 18747143 }, { "month": "2019-11", "count": 19265986 }, { "month": "2019-12", "count": 19904296 }, { "month": "2020-01", "count": 19972114 }, { "month": "2020-02", "count": 20669843 }, { "month": "2020-03", "count": 22023516 }, { "month": "2020-04", "count": 21957936 }, { "month": "2020-05", "count": 21342924 }, { "month": "2020-06", "count": 21120320 }, { "month": "2020-07", "count": 22127722 }, { "month": "2020-08", "count": 22681946 }, { "month": "2020-09", "count": 22644841 }, { "month": "2020-10", "count": 22567317 }, { "month": "2020-11", "count": 22809743 }, { "month": "2020-12", "count": 23112365 }, { "month": "2021-01", "count": 23352274 }, { "month": "2021-02", "count": 22511781 }, { "month": "2021-03", "count": 23287526 }, { "month": "2021-04", "count": 23631594 }, { "month": "2021-05", "count": 24017127 }, { "month": "2021-06", "count": 24225740 }, { "month": "2021-07", "count": 24691114 }, { "month": "2021-08", "count": 24945559 }, { "month": "2021-09", "count": 25244005 }, { "month": "2021-10", "count": 25523330 }, { "month": "2021-11", "count": 25672889 }, { "month": "2021-12", "count": 26201167 }, { "month": "2022-01", "count": 26589219 }, { "month": "2022-02", "count": 26533100 }, { "month": "2022-03", "count": 27588784 }, { "month": "2022-04", "count": 27378939 }, { "month": "2022-05", "count": 27411974 }, { "month": "2022-06", "count": 27251911 }, { "month": "2022-07", "count": 27531147 }, { "month": "2022-08", "count": 27437822 }, { "month": "2022-09", "count": 26997984 }, { "month": "2022-10", "count": 26459164 }, { "month": "2022-11", "count": 26505647 }, { "month": "2022-12", "count": 27028252 }, { "month": "2023-01", "count": 26411568 }, { "month": "2023-02", "count": 25070023 }, { "month": "2023-03", "count": 25733428 }, { "month": "2023-04", "count": 25428367 }, { "month": "2023-05", "count": 36164482 }, { "month": "2023-06", "count": 16624527 } ], "facets": { "country": [ { "key": "2017-06", "values": [ { "count": 3050586, "value": "US" }, { "count": 977320, "value": "CN" }, { "count": 780431, "value": "DE" }, { "count": 572521, "value": "FR" }, { "count": 420314, "value": "RU" }, { "count": 331331, "value": "NL" }, { "count": 302899, "value": "GB" }, { "count": 194184, "value": "JP" }, { "count": 179499, "value": "IE" }, { "count": 173166, "value": "HK" } ] }, { "key": "2017-07", "values": [ { "count": 3212240, "value": "US" }, { "count": 1111340, "value": "CN" }, { "count": 842439, "value": "DE" }, { "count": 593350, "value": "FR" }, { "count": 438983, "value": "RU" }, { "count": 345139, "value": "NL" }, { "count": 324624, "value": "GB" }, { "count": 205120, "value": "JP" }, { "count": 192695, "value": "HK" }, { "count": 187919, "value": "IE" } ] }, { "key": "2017-08", "values": [ { "count": 3240638, "value": "US" }, { "count": 1098987, "value": "CN" }, { "count": 828453, "value": "DE" }, { "count": 583432, "value": "FR" }, { "count": 391038, "value": "RU" }, { "count": 345197, "value": "NL" }, { "count": 324335, "value": "GB" }, { "count": 203638, "value": "JP" }, { "count": 196578, "value": "HK" }, { "count": 187529, "value": "IE" } ] }, { "key": "2017-09", "values": [ { "count": 3189853, "value": "US" }, { "count": 1065540, "value": "CN" }, { "count": 796529, "value": "DE" }, { "count": 583445, "value": "FR" }, { "count": 385482, "value": "RU" }, { "count": 345160, "value": "NL" }, { "count": 294485, "value": "GB" }, { "count": 206418, "value": "JP" }, { "count": 200695, "value": "HK" }, { "count": 187044, "value": "IE" } ] }, { "key": "2017-10", "values": [ { "count": 3514906, "value": "US" }, { "count": 1070632, "value": "CN" }, { "count": 858516, "value": "DE" }, { "count": 615056, "value": "FR" }, { "count": 404242, "value": "RU" }, { "count": 361080, "value": "NL" }, { "count": 313330, "value": "GB" }, { "count": 218864, "value": "JP" }, { "count": 218684, "value": "HK" }, { "count": 194867, "value": "IE" } ] }, { "key": "2017-11", "values": [ { "count": 3652666, "value": "US" }, { "count": 1141820, "value": "CN" }, { "count": 862161, "value": "DE" }, { "count": 620593, "value": "FR" }, { "count": 440130, "value": "RU" }, { "count": 364814, "value": "NL" }, { "count": 317462, "value": "GB" }, { "count": 231706, "value": "HK" }, { "count": 227484, "value": "JP" }, { "count": 200426, "value": "IE" } ] }, { "key": "2017-12", "values": [ { "count": 3738143, "value": "US" }, { "count": 1215129, "value": "CN" }, { "count": 903019, "value": "DE" }, { "count": 636506, "value": "FR" }, { "count": 424603, "value": "RU" }, { "count": 366994, "value": "NL" }, { "count": 323643, "value": "GB" }, { "count": 230824, "value": "HK" }, { "count": 226367, "value": "JP" }, { "count": 205024, "value": "IE" } ] }, { "key": "2018-01", "values": [ { "count": 3861672, "value": "US" }, { "count": 1281415, "value": "CN" }, { "count": 908437, "value": "DE" }, { "count": 642109, "value": "FR" }, { "count": 428831, "value": "RU" }, { "count": 374396, "value": "NL" }, { "count": 330122, "value": "GB" }, { "count": 244976, "value": "HK" }, { "count": 230880, "value": "JP" }, { "count": 205999, "value": "IE" } ] }, { "key": "2018-02", "values": [ { "count": 3827102, "value": "US" }, { "count": 1226215, "value": "CN" }, { "count": 896637, "value": "DE" }, { "count": 640314, "value": "FR" }, { "count": 425552, "value": "RU" }, { "count": 370944, "value": "NL" }, { "count": 323073, "value": "GB" }, { "count": 241976, "value": "HK" }, { "count": 235821, "value": "JP" }, { "count": 207621, "value": "IE" } ] }, { "key": "2018-03", "values": [ { "count": 3925628, "value": "US" }, { "count": 1267901, "value": "CN" }, { "count": 916694, "value": "DE" }, { "count": 647998, "value": "FR" }, { "count": 439599, "value": "RU" }, { "count": 374738, "value": "NL" }, { "count": 326288, "value": "GB" }, { "count": 246910, "value": "HK" }, { "count": 237306, "value": "JP" }, { "count": 214476, "value": "IE" } ] }, { "key": "2018-04", "values": [ { "count": 4073656, "value": "US" }, { "count": 1397472, "value": "CN" }, { "count": 999349, "value": "DE" }, { "count": 672516, "value": "FR" }, { "count": 480599, "value": "RU" }, { "count": 396119, "value": "NL" }, { "count": 347135, "value": "GB" }, { "count": 280729, "value": "JP" }, { "count": 259366, "value": "HK" }, { "count": 220981, "value": "IE" } ] }, { "key": "2018-05", "values": [ { "count": 4293839, "value": "US" }, { "count": 1494306, "value": "CN" }, { "count": 1015577, "value": "DE" }, { "count": 683767, "value": "FR" }, { "count": 501699, "value": "RU" }, { "count": 407596, "value": "NL" }, { "count": 357045, "value": "GB" }, { "count": 290926, "value": "JP" }, { "count": 256114, "value": "HK" }, { "count": 234072, "value": "VN" } ] }, { "key": "2018-06", "values": [ { "count": 4368791, "value": "US" }, { "count": 1565342, "value": "CN" }, { "count": 1019682, "value": "DE" }, { "count": 692723, "value": "FR" }, { "count": 503521, "value": "RU" }, { "count": 404879, "value": "NL" }, { "count": 355990, "value": "GB" }, { "count": 298404, "value": "HK" }, { "count": 294777, "value": "JP" }, { "count": 249868, "value": "VN" } ] }, { "key": "2018-07", "values": [ { "count": 4484383, "value": "US" }, { "count": 1560523, "value": "CN" }, { "count": 1042289, "value": "DE" }, { "count": 692151, "value": "FR" }, { "count": 512872, "value": "RU" }, { "count": 408121, "value": "NL" }, { "count": 359108, "value": "GB" }, { "count": 308425, "value": "HK" }, { "count": 303178, "value": "JP" }, { "count": 251805, "value": "VN" } ] }, { "key": "2018-08", "values": [ { "count": 4636336, "value": "US" }, { "count": 1646708, "value": "CN" }, { "count": 1073007, "value": "DE" }, { "count": 682793, "value": "FR" }, { "count": 521107, "value": "RU" }, { "count": 412708, "value": "NL" }, { "count": 364834, "value": "GB" }, { "count": 323305, "value": "HK" }, { "count": 317330, "value": "JP" }, { "count": 293598, "value": "VN" } ] }, { "key": "2018-09", "values": [ { "count": 4786179, "value": "US" }, { "count": 1702605, "value": "CN" }, { "count": 1042671, "value": "DE" }, { "count": 687910, "value": "FR" }, { "count": 528417, "value": "RU" }, { "count": 424443, "value": "NL" }, { "count": 379318, "value": "GB" }, { "count": 341409, "value": "HK" }, { "count": 325258, "value": "VN" }, { "count": 319061, "value": "JP" } ] }, { "key": "2018-10", "values": [ { "count": 5087425, "value": "US" }, { "count": 1774711, "value": "CN" }, { "count": 1091509, "value": "DE" }, { "count": 709686, "value": "FR" }, { "count": 526380, "value": "RU" }, { "count": 436821, "value": "NL" }, { "count": 393559, "value": "GB" }, { "count": 363196, "value": "HK" }, { "count": 334500, "value": "JP" }, { "count": 251641, "value": "ZA" } ] }, { "key": "2018-11", "values": [ { "count": 5277809, "value": "US" }, { "count": 1735645, "value": "CN" }, { "count": 1180170, "value": "DE" }, { "count": 743253, "value": "FR" }, { "count": 546464, "value": "RU" }, { "count": 452861, "value": "NL" }, { "count": 409807, "value": "GB" }, { "count": 350845, "value": "HK" }, { "count": 340691, "value": "JP" }, { "count": 245437, "value": "IE" } ] }, { "key": "2018-12", "values": [ { "count": 5361042, "value": "US" }, { "count": 1862368, "value": "CN" }, { "count": 1203923, "value": "DE" }, { "count": 744990, "value": "FR" }, { "count": 553490, "value": "RU" }, { "count": 461710, "value": "NL" }, { "count": 409236, "value": "GB" }, { "count": 365875, "value": "HK" }, { "count": 347999, "value": "JP" }, { "count": 287186, "value": "VN" } ] }, { "key": "2019-01", "values": [ { "count": 5498756, "value": "US" }, { "count": 2004928, "value": "CN" }, { "count": 1200364, "value": "DE" }, { "count": 748100, "value": "FR" }, { "count": 541899, "value": "RU" }, { "count": 459659, "value": "NL" }, { "count": 407115, "value": "GB" }, { "count": 366968, "value": "HK" }, { "count": 348713, "value": "JP" }, { "count": 264409, "value": "VN" } ] }, { "key": "2019-02", "values": [ { "count": 5669749, "value": "US" }, { "count": 2015687, "value": "CN" }, { "count": 1223231, "value": "DE" }, { "count": 754624, "value": "FR" }, { "count": 561708, "value": "RU" }, { "count": 464200, "value": "NL" }, { "count": 412617, "value": "GB" }, { "count": 362027, "value": "HK" }, { "count": 355711, "value": "JP" }, { "count": 257220, "value": "VN" } ] }, { "key": "2019-03", "values": [ { "count": 5904610, "value": "US" }, { "count": 2186025, "value": "CN" }, { "count": 1228333, "value": "DE" }, { "count": 753927, "value": "FR" }, { "count": 546782, "value": "RU" }, { "count": 469225, "value": "NL" }, { "count": 413096, "value": "GB" }, { "count": 384812, "value": "HK" }, { "count": 359253, "value": "JP" }, { "count": 250195, "value": "IE" } ] }, { "key": "2019-04", "values": [ { "count": 6109769, "value": "US" }, { "count": 2338975, "value": "CN" }, { "count": 1203252, "value": "DE" }, { "count": 753299, "value": "FR" }, { "count": 546801, "value": "RU" }, { "count": 467556, "value": "NL" }, { "count": 414264, "value": "GB" }, { "count": 384128, "value": "HK" }, { "count": 362579, "value": "JP" }, { "count": 245557, "value": "IE" } ] }, { "key": "2019-05", "values": [ { "count": 6374597, "value": "US" }, { "count": 2462819, "value": "CN" }, { "count": 1229066, "value": "DE" }, { "count": 761255, "value": "FR" }, { "count": 564888, "value": "RU" }, { "count": 475207, "value": "NL" }, { "count": 420594, "value": "GB" }, { "count": 394061, "value": "HK" }, { "count": 367622, "value": "JP" }, { "count": 253440, "value": "IN" } ] }, { "key": "2019-06", "values": [ { "count": 6280709, "value": "US" }, { "count": 2276476, "value": "CN" }, { "count": 1196272, "value": "DE" }, { "count": 763656, "value": "FR" }, { "count": 574488, "value": "RU" }, { "count": 476243, "value": "NL" }, { "count": 419785, "value": "GB" }, { "count": 399110, "value": "HK" }, { "count": 364594, "value": "JP" }, { "count": 314042, "value": "ZA" } ] }, { "key": "2019-07", "values": [ { "count": 6280356, "value": "US" }, { "count": 2380660, "value": "CN" }, { "count": 1234898, "value": "DE" }, { "count": 773293, "value": "FR" }, { "count": 579773, "value": "RU" }, { "count": 478250, "value": "NL" }, { "count": 429342, "value": "GB" }, { "count": 417483, "value": "HK" }, { "count": 416924, "value": "ZA" }, { "count": 374017, "value": "JP" } ] }, { "key": "2019-08", "values": [ { "count": 6043360, "value": "US" }, { "count": 2848665, "value": "CN" }, { "count": 1336811, "value": "DE" }, { "count": 757440, "value": "FR" }, { "count": 614848, "value": "RU" }, { "count": 540934, "value": "HK" }, { "count": 516530, "value": "ZA" }, { "count": 476113, "value": "NL" }, { "count": 451293, "value": "GB" }, { "count": 390397, "value": "JP" } ] }, { "key": "2019-09", "values": [ { "count": 6021273, "value": "US" }, { "count": 3109097, "value": "CN" }, { "count": 1293971, "value": "DE" }, { "count": 794551, "value": "FR" }, { "count": 662941, "value": "ZA" }, { "count": 618445, "value": "RU" }, { "count": 580178, "value": "HK" }, { "count": 464429, "value": "NL" }, { "count": 451993, "value": "GB" }, { "count": 391482, "value": "JP" } ] }, { "key": "2019-10", "values": [ { "count": 6255133, "value": "US" }, { "count": 3142858, "value": "CN" }, { "count": 1326684, "value": "DE" }, { "count": 804943, "value": "ZA" }, { "count": 764824, "value": "FR" }, { "count": 617602, "value": "RU" }, { "count": 594214, "value": "HK" }, { "count": 475566, "value": "NL" }, { "count": 462042, "value": "GB" }, { "count": 398314, "value": "JP" } ] }, { "key": "2019-11", "values": [ { "count": 6727457, "value": "US" }, { "count": 3121426, "value": "CN" }, { "count": 1319932, "value": "DE" }, { "count": 841116, "value": "ZA" }, { "count": 766034, "value": "FR" }, { "count": 612775, "value": "HK" }, { "count": 612604, "value": "RU" }, { "count": 474582, "value": "NL" }, { "count": 469480, "value": "GB" }, { "count": 397482, "value": "JP" } ] }, { "key": "2019-12", "values": [ { "count": 6889177, "value": "US" }, { "count": 3317695, "value": "CN" }, { "count": 1326099, "value": "DE" }, { "count": 1023921, "value": "ZA" }, { "count": 744518, "value": "FR" }, { "count": 638086, "value": "HK" }, { "count": 617314, "value": "RU" }, { "count": 473999, "value": "GB" }, { "count": 467989, "value": "NL" }, { "count": 399329, "value": "JP" } ] }, { "key": "2020-01", "values": [ { "count": 6884546, "value": "US" }, { "count": 3255345, "value": "CN" }, { "count": 1315178, "value": "DE" }, { "count": 1136135, "value": "ZA" }, { "count": 741716, "value": "FR" }, { "count": 635266, "value": "HK" }, { "count": 600410, "value": "RU" }, { "count": 479234, "value": "GB" }, { "count": 467116, "value": "NL" }, { "count": 397921, "value": "JP" } ] }, { "key": "2020-02", "values": [ { "count": 7475515, "value": "US" }, { "count": 3187150, "value": "CN" }, { "count": 1341747, "value": "DE" }, { "count": 1143111, "value": "ZA" }, { "count": 761579, "value": "FR" }, { "count": 631529, "value": "HK" }, { "count": 602020, "value": "RU" }, { "count": 487723, "value": "GB" }, { "count": 468750, "value": "NL" }, { "count": 406400, "value": "JP" } ] }, { "key": "2020-03", "values": [ { "count": 8050115, "value": "US" }, { "count": 3454490, "value": "CN" }, { "count": 1452193, "value": "DE" }, { "count": 1185622, "value": "ZA" }, { "count": 793177, "value": "FR" }, { "count": 660782, "value": "HK" }, { "count": 632884, "value": "RU" }, { "count": 516855, "value": "GB" }, { "count": 486978, "value": "NL" }, { "count": 425567, "value": "JP" } ] }, { "key": "2020-04", "values": [ { "count": 8274558, "value": "US" }, { "count": 3298127, "value": "CN" }, { "count": 1555430, "value": "DE" }, { "count": 945107, "value": "HK" }, { "count": 840086, "value": "FR" }, { "count": 699342, "value": "ZA" }, { "count": 691188, "value": "RU" }, { "count": 532020, "value": "GB" }, { "count": 528488, "value": "NL" }, { "count": 458011, "value": "JP" } ] }, { "key": "2020-05", "values": [ { "count": 8021952, "value": "US" }, { "count": 3100526, "value": "CN" }, { "count": 1523207, "value": "DE" }, { "count": 1205361, "value": "HK" }, { "count": 832986, "value": "FR" }, { "count": 679149, "value": "RU" }, { "count": 541815, "value": "NL" }, { "count": 537833, "value": "GB" }, { "count": 456446, "value": "JP" }, { "count": 379888, "value": "SG" } ] }, { "key": "2020-06", "values": [ { "count": 7832719, "value": "US" }, { "count": 3156624, "value": "CN" }, { "count": 1509173, "value": "DE" }, { "count": 1162273, "value": "HK" }, { "count": 824920, "value": "FR" }, { "count": 672055, "value": "RU" }, { "count": 550332, "value": "GB" }, { "count": 538574, "value": "NL" }, { "count": 460209, "value": "JP" }, { "count": 383257, "value": "SG" } ] }, { "key": "2020-07", "values": [ { "count": 8107446, "value": "US" }, { "count": 3392420, "value": "CN" }, { "count": 1635129, "value": "DE" }, { "count": 1186628, "value": "HK" }, { "count": 850571, "value": "FR" }, { "count": 699360, "value": "RU" }, { "count": 587086, "value": "GB" }, { "count": 559087, "value": "NL" }, { "count": 485753, "value": "JP" }, { "count": 415843, "value": "SG" } ] }, { "key": "2020-08", "values": [ { "count": 8087567, "value": "US" }, { "count": 3459264, "value": "CN" }, { "count": 1717733, "value": "DE" }, { "count": 1224390, "value": "HK" }, { "count": 870345, "value": "FR" }, { "count": 728713, "value": "RU" }, { "count": 610581, "value": "GB" }, { "count": 584754, "value": "NL" }, { "count": 510021, "value": "JP" }, { "count": 456066, "value": "SG" } ] }, { "key": "2020-09", "values": [ { "count": 7971991, "value": "US" }, { "count": 3424262, "value": "CN" }, { "count": 1750637, "value": "DE" }, { "count": 1197963, "value": "HK" }, { "count": 886566, "value": "FR" }, { "count": 736560, "value": "RU" }, { "count": 628815, "value": "GB" }, { "count": 598498, "value": "NL" }, { "count": 514848, "value": "JP" }, { "count": 473774, "value": "SG" } ] }, { "key": "2020-10", "values": [ { "count": 7892122, "value": "US" }, { "count": 3231179, "value": "CN" }, { "count": 1803579, "value": "DE" }, { "count": 1290093, "value": "HK" }, { "count": 895681, "value": "FR" }, { "count": 733504, "value": "RU" }, { "count": 635628, "value": "GB" }, { "count": 607060, "value": "NL" }, { "count": 518597, "value": "JP" }, { "count": 483299, "value": "SG" } ] }, { "key": "2020-11", "values": [ { "count": 7884790, "value": "US" }, { "count": 3132291, "value": "CN" }, { "count": 1799488, "value": "DE" }, { "count": 1635656, "value": "HK" }, { "count": 905679, "value": "FR" }, { "count": 734442, "value": "RU" }, { "count": 633970, "value": "GB" }, { "count": 606874, "value": "NL" }, { "count": 516459, "value": "JP" }, { "count": 485677, "value": "SG" } ] }, { "key": "2020-12", "values": [ { "count": 7903236, "value": "US" }, { "count": 2939801, "value": "CN" }, { "count": 1912513, "value": "DE" }, { "count": 1770469, "value": "HK" }, { "count": 943264, "value": "FR" }, { "count": 745976, "value": "RU" }, { "count": 643121, "value": "GB" }, { "count": 623126, "value": "NL" }, { "count": 516471, "value": "JP" }, { "count": 504976, "value": "SG" } ] }, { "key": "2021-01", "values": [ { "count": 7983171, "value": "US" }, { "count": 3011184, "value": "CN" }, { "count": 2004196, "value": "DE" }, { "count": 1697084, "value": "HK" }, { "count": 947215, "value": "FR" }, { "count": 742940, "value": "RU" }, { "count": 653585, "value": "GB" }, { "count": 611650, "value": "NL" }, { "count": 527379, "value": "JP" }, { "count": 502152, "value": "SG" } ] }, { "key": "2021-02", "values": [ { "count": 7708495, "value": "US" }, { "count": 2859368, "value": "CN" }, { "count": 1945876, "value": "DE" }, { "count": 1508050, "value": "HK" }, { "count": 944804, "value": "FR" }, { "count": 740926, "value": "RU" }, { "count": 640081, "value": "GB" }, { "count": 603521, "value": "NL" }, { "count": 528165, "value": "JP" }, { "count": 505943, "value": "SG" } ] }, { "key": "2021-03", "values": [ { "count": 7630210, "value": "US" }, { "count": 2812504, "value": "CN" }, { "count": 2286695, "value": "HK" }, { "count": 2082998, "value": "DE" }, { "count": 907172, "value": "FR" }, { "count": 757673, "value": "RU" }, { "count": 670143, "value": "NL" }, { "count": 643005, "value": "GB" }, { "count": 597939, "value": "JP" }, { "count": 485762, "value": "SG" } ] }, { "key": "2021-04", "values": [ { "count": 7807820, "value": "US" }, { "count": 2772019, "value": "CN" }, { "count": 2469773, "value": "HK" }, { "count": 2117202, "value": "DE" }, { "count": 774279, "value": "RU" }, { "count": 717466, "value": "FR" }, { "count": 698911, "value": "NL" }, { "count": 638738, "value": "GB" }, { "count": 593185, "value": "JP" }, { "count": 491501, "value": "SG" } ] }, { "key": "2021-05", "values": [ { "count": 7966005, "value": "US" }, { "count": 2845406, "value": "CN" }, { "count": 2575747, "value": "HK" }, { "count": 2114948, "value": "DE" }, { "count": 865473, "value": "FR" }, { "count": 776948, "value": "RU" }, { "count": 693525, "value": "NL" }, { "count": 634506, "value": "GB" }, { "count": 572596, "value": "JP" }, { "count": 476360, "value": "SG" } ] }, { "key": "2021-06", "values": [ { "count": 7919726, "value": "US" }, { "count": 3024772, "value": "CN" }, { "count": 2547344, "value": "HK" }, { "count": 2135776, "value": "DE" }, { "count": 872853, "value": "FR" }, { "count": 768666, "value": "RU" }, { "count": 676067, "value": "NL" }, { "count": 625278, "value": "GB" }, { "count": 569287, "value": "JP" }, { "count": 469076, "value": "SG" } ] }, { "key": "2021-07", "values": [ { "count": 8206940, "value": "US" }, { "count": 3005242, "value": "CN" }, { "count": 2655712, "value": "HK" }, { "count": 2143096, "value": "DE" }, { "count": 843381, "value": "FR" }, { "count": 778677, "value": "RU" }, { "count": 680726, "value": "NL" }, { "count": 628531, "value": "GB" }, { "count": 616193, "value": "JP" }, { "count": 501406, "value": "SG" } ] }, { "key": "2021-08", "values": [ { "count": 8247896, "value": "US" }, { "count": 3052351, "value": "CN" }, { "count": 2712821, "value": "HK" }, { "count": 2142934, "value": "DE" }, { "count": 842832, "value": "FR" }, { "count": 793292, "value": "RU" }, { "count": 713524, "value": "NL" }, { "count": 648939, "value": "JP" }, { "count": 636958, "value": "GB" }, { "count": 515606, "value": "SG" } ] }, { "key": "2021-09", "values": [ { "count": 8178225, "value": "US" }, { "count": 3112008, "value": "CN" }, { "count": 2842380, "value": "HK" }, { "count": 2201122, "value": "DE" }, { "count": 872510, "value": "FR" }, { "count": 801369, "value": "RU" }, { "count": 687876, "value": "NL" }, { "count": 661463, "value": "JP" }, { "count": 641623, "value": "GB" }, { "count": 526307, "value": "SG" } ] }, { "key": "2021-10", "values": [ { "count": 8233903, "value": "US" }, { "count": 3200392, "value": "CN" }, { "count": 2783334, "value": "HK" }, { "count": 2206270, "value": "DE" }, { "count": 858972, "value": "FR" }, { "count": 802824, "value": "RU" }, { "count": 685397, "value": "NL" }, { "count": 679273, "value": "JP" }, { "count": 643753, "value": "GB" }, { "count": 510727, "value": "SG" } ] }, { "key": "2021-11", "values": [ { "count": 8185476, "value": "US" }, { "count": 3405539, "value": "CN" }, { "count": 2954825, "value": "HK" }, { "count": 2213089, "value": "DE" }, { "count": 846683, "value": "FR" }, { "count": 801821, "value": "RU" }, { "count": 692263, "value": "NL" }, { "count": 690559, "value": "JP" }, { "count": 641495, "value": "GB" }, { "count": 543230, "value": "SG" } ] }, { "key": "2021-12", "values": [ { "count": 8505195, "value": "US" }, { "count": 3432428, "value": "CN" }, { "count": 2975159, "value": "HK" }, { "count": 2237776, "value": "DE" }, { "count": 857796, "value": "FR" }, { "count": 804941, "value": "RU" }, { "count": 718103, "value": "JP" }, { "count": 698351, "value": "NL" }, { "count": 656866, "value": "GB" }, { "count": 557580, "value": "SG" } ] }, { "key": "2022-01", "values": [ { "count": 8618233, "value": "US" }, { "count": 3512542, "value": "CN" }, { "count": 2919276, "value": "HK" }, { "count": 2304980, "value": "DE" }, { "count": 884273, "value": "FR" }, { "count": 816021, "value": "RU" }, { "count": 726609, "value": "JP" }, { "count": 705368, "value": "NL" }, { "count": 668269, "value": "GB" }, { "count": 580822, "value": "SG" } ] }, { "key": "2022-02", "values": [ { "count": 8780379, "value": "US" }, { "count": 3450254, "value": "CN" }, { "count": 2882163, "value": "HK" }, { "count": 2283078, "value": "DE" }, { "count": 862501, "value": "FR" }, { "count": 798990, "value": "RU" }, { "count": 722443, "value": "JP" }, { "count": 710385, "value": "NL" }, { "count": 670082, "value": "GB" }, { "count": 574664, "value": "SG" } ] }, { "key": "2022-03", "values": [ { "count": 9157770, "value": "US" }, { "count": 3569479, "value": "CN" }, { "count": 3107503, "value": "HK" }, { "count": 2323422, "value": "DE" }, { "count": 874413, "value": "FR" }, { "count": 822468, "value": "RU" }, { "count": 745009, "value": "JP" }, { "count": 732740, "value": "NL" }, { "count": 693676, "value": "GB" }, { "count": 591958, "value": "SG" } ] }, { "key": "2022-04", "values": [ { "count": 9014523, "value": "US" }, { "count": 3542052, "value": "CN" }, { "count": 3191589, "value": "HK" }, { "count": 2294526, "value": "DE" }, { "count": 841047, "value": "FR" }, { "count": 813662, "value": "RU" }, { "count": 780950, "value": "JP" }, { "count": 724050, "value": "NL" }, { "count": 690278, "value": "GB" }, { "count": 623720, "value": "SG" } ] }, { "key": "2022-05", "values": [ { "count": 8925134, "value": "US" }, { "count": 3562358, "value": "CN" }, { "count": 3194015, "value": "HK" }, { "count": 2295253, "value": "DE" }, { "count": 842567, "value": "FR" }, { "count": 819042, "value": "RU" }, { "count": 776267, "value": "JP" }, { "count": 720592, "value": "NL" }, { "count": 701723, "value": "GB" }, { "count": 628504, "value": "SG" } ] }, { "key": "2022-06", "values": [ { "count": 9003862, "value": "US" }, { "count": 3633414, "value": "CN" }, { "count": 3031289, "value": "HK" }, { "count": 2235243, "value": "DE" }, { "count": 856429, "value": "FR" }, { "count": 798364, "value": "RU" }, { "count": 785679, "value": "JP" }, { "count": 712332, "value": "NL" }, { "count": 689760, "value": "GB" }, { "count": 626394, "value": "SG" } ] }, { "key": "2022-07", "values": [ { "count": 9052786, "value": "US" }, { "count": 3703914, "value": "CN" }, { "count": 2964913, "value": "HK" }, { "count": 2294334, "value": "DE" }, { "count": 860906, "value": "FR" }, { "count": 802756, "value": "RU" }, { "count": 794979, "value": "JP" }, { "count": 739510, "value": "NL" }, { "count": 704568, "value": "GB" }, { "count": 636669, "value": "SG" } ] }, { "key": "2022-08", "values": [ { "count": 9029120, "value": "US" }, { "count": 3615406, "value": "CN" }, { "count": 2899078, "value": "HK" }, { "count": 2273969, "value": "DE" }, { "count": 842145, "value": "FR" }, { "count": 813699, "value": "RU" }, { "count": 810402, "value": "JP" }, { "count": 741605, "value": "NL" }, { "count": 708525, "value": "GB" }, { "count": 655388, "value": "SG" } ] }, { "key": "2022-09", "values": [ { "count": 8738658, "value": "US" }, { "count": 3580990, "value": "CN" }, { "count": 2858085, "value": "HK" }, { "count": 2218715, "value": "DE" }, { "count": 860269, "value": "FR" }, { "count": 808995, "value": "RU" }, { "count": 799835, "value": "JP" }, { "count": 738421, "value": "NL" }, { "count": 683597, "value": "GB" }, { "count": 634799, "value": "SG" } ] }, { "key": "2022-10", "values": [ { "count": 8444678, "value": "US" }, { "count": 3527650, "value": "CN" }, { "count": 2871371, "value": "HK" }, { "count": 2199075, "value": "DE" }, { "count": 861246, "value": "FR" }, { "count": 811757, "value": "JP" }, { "count": 807936, "value": "RU" }, { "count": 721670, "value": "NL" }, { "count": 674542, "value": "GB" }, { "count": 642547, "value": "SG" } ] }, { "key": "2022-11", "values": [ { "count": 8366581, "value": "US" }, { "count": 3621566, "value": "CN" }, { "count": 2993512, "value": "HK" }, { "count": 2173666, "value": "DE" }, { "count": 845704, "value": "FR" }, { "count": 805183, "value": "JP" }, { "count": 802826, "value": "RU" }, { "count": 716129, "value": "NL" }, { "count": 659536, "value": "GB" }, { "count": 644204, "value": "SG" } ] }, { "key": "2022-12", "values": [ { "count": 8366345, "value": "US" }, { "count": 3834305, "value": "CN" }, { "count": 3189882, "value": "HK" }, { "count": 2186270, "value": "DE" }, { "count": 815628, "value": "RU" }, { "count": 806829, "value": "JP" }, { "count": 731139, "value": "FR" }, { "count": 720143, "value": "NL" }, { "count": 695829, "value": "GB" }, { "count": 647306, "value": "SG" } ] }, { "key": "2023-01", "values": [ { "count": 7971216, "value": "US" }, { "count": 3655723, "value": "CN" }, { "count": 3195539, "value": "HK" }, { "count": 2181171, "value": "DE" }, { "count": 827645, "value": "FR" }, { "count": 814161, "value": "RU" }, { "count": 803636, "value": "JP" }, { "count": 731403, "value": "NL" }, { "count": 674526, "value": "GB" }, { "count": 641548, "value": "SG" } ] }, { "key": "2023-02", "values": [ { "count": 7517417, "value": "US" }, { "count": 3445323, "value": "CN" }, { "count": 2999832, "value": "HK" }, { "count": 2069510, "value": "DE" }, { "count": 793056, "value": "JP" }, { "count": 792405, "value": "FR" }, { "count": 788631, "value": "RU" }, { "count": 703665, "value": "NL" }, { "count": 643075, "value": "GB" }, { "count": 635976, "value": "SG" } ] }, { "key": "2023-03", "values": [ { "count": 7594501, "value": "US" }, { "count": 3654450, "value": "CN" }, { "count": 3202689, "value": "HK" }, { "count": 2101095, "value": "DE" }, { "count": 813291, "value": "JP" }, { "count": 808025, "value": "RU" }, { "count": 801658, "value": "FR" }, { "count": 709502, "value": "NL" }, { "count": 660476, "value": "SG" }, { "count": 637092, "value": "GB" } ] }, { "key": "2023-04", "values": [ { "count": 7458199, "value": "US" }, { "count": 3686191, "value": "CN" }, { "count": 3204505, "value": "HK" }, { "count": 2070362, "value": "DE" }, { "count": 801620, "value": "RU" }, { "count": 782797, "value": "FR" }, { "count": 781625, "value": "JP" }, { "count": 697022, "value": "NL" }, { "count": 654356, "value": "SG" }, { "count": 617204, "value": "GB" } ] }, { "key": "2023-05", "values": [ { "count": 9206970, "value": "US" }, { "count": 7554422, "value": "CN" }, { "count": 4191755, "value": "HK" }, { "count": 2472756, "value": "DE" }, { "count": 1606691, "value": "JP" }, { "count": 1080430, "value": "RU" }, { "count": 980460, "value": "SG" }, { "count": 979048, "value": "FR" }, { "count": 857580, "value": "NL" }, { "count": 741169, "value": "GB" } ] }, { "key": "2023-06", "values": [ { "count": 4551750, "value": "US" }, { "count": 2907689, "value": "CN" }, { "count": 1853804, "value": "HK" }, { "count": 1229259, "value": "DE" }, { "count": 702268, "value": "JP" }, { "count": 547271, "value": "RU" }, { "count": 514044, "value": "FR" }, { "count": 449945, "value": "SG" }, { "count": 443064, "value": "NL" }, { "count": 384831, "value": "GB" } ] } ] } } } } }, "400": { "description": "Bad Request", "content": { "application/json": { "schema": { "type": "object" }, "example": { "error": "Invalid search query" } } } } } } }, "/api/v1/search/filters": { "get": { "operationId": "listFilters", "tags": [ "Historical Data (Enterprise)" ], "summary": "List all filters that can be used when searching", "description": "This method returns a list of search filters that can be used in the search query.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": [ "all", "asn", "city", "country", "cpe", "has_ipv6", "has_screenshot", "has_ssl", "has_vuln", "hash", "hostname", "http.component", "http.component_category", "http.favicon.hash", "http.html_hash", "http.robots_hash", "http.securitytxt", "http.status", "http.title", "http.waf", "ip", "isp", "net", "org", "os", "port", "product", "region", "screenshot.label", "ssh.fingerprint", "ssl", "ssl.alpn", "ssl.cert.fingerprint", "ssl.cert.issuer.cn", "ssl.cert.serial", "ssl.cert.subject.cn", "ssl.ja3s", "ssl.jarm", "ssl.version", "state", "tag", "title", "version", "vuln" ] } } } } } }, "/api/v1/search/facets": { "get": { "operationId": "listFacets", "tags": [ "Historical Data (Enterprise)" ], "summary": "List all search facets", "description": "This method returns a list of facets that can be used to get a breakdown of the top values for a property.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" } ], "responses": { "200": { "description": "OK", "content": { "application/json": { "schema": { "type": "object" }, "example": [ "asn", "city", "country", "domain", "has_screenshot", "hash", "http.component", "http.component_category", "http.favicon.hash", "http.html_hash", "http.robots_hash", "http.status", "http.title", "http.waf", "ip", "isp", "mongodb.database.name", "org", "os", "port", "product", "redis.key", "region", "rsync.module", "screenshot.label", "ssh.fingerprint", "ssl.alpn", "ssl.cert.fingerprint", "ssl.cert.issuer.cn", "ssl.cert.serial", "ssl.cert.subject.cn", "ssl.ja3s", "ssl.jarm", "ssl.version", "state", "tag", "version", "vuln", "vuln.verified" ] } } } } } } } } ``` --- # Unknown ```json { "openapi": "3.0.0", "info": { "title": "Shodan Streaming API Documentation", "description": "The Streaming API is an HTTP-based service that returns a real-time stream of data collected by Shodan. The stream returns the information as a JSON-encoded string using 2 output formats that can be set using the \"t\" URL parameter: - **json:**Each item is separated by a newline. For example, the Banners stream returns 1 banner per line where the banner contains all of the data that was just collected for a given service on the Internet. - **sse:**Outputs the JSON data using the Server-Sent Events protocol, making it easy to consume directly in the browser.\n \nThe base URL for all of these methods is: `https://stream.shodan.io`\n \n\n**Note:**\n \nPostman does not natively support streaming responses. There is an existing issue regarding this on their GitHub repository, which you can find [here](https://github.com/postmanlabs/postman-app-support/issues/5040). As an alternative, you can use cURL to view a stream of data in a terminal.", "version": "1.0.0" }, "servers": [ { "url": "https://stream.shodan.io" } ], "tags": [ { "name": "Data Stream (Enterprise)" }, { "name": "Network Alerts" } ], "paths": { "/shodan/banners": { "get": { "operationId": "getBanners", "tags": ["Data Stream (Enterprise)"], "summary": "Banners", "description": "This stream provides ALL of the data that Shodan collects. Use this stream if you need access to everything and/ or want to store your own Shodan database locally. If you only care about specific ports, please use the Ports stream.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "content": { "text/plain": { "schema": { "type": "string" }, "example": "109.70.101.126\t10443\t\tHTTP/1.1 200 OK\\r\\nDate: Thu, 28 Jan 2021 04:19:19 GMT\\r\\nServer: xxxxxxxx-xxxxx\\r\\nVary: Accept-Encoding\\r\\nContent-Length: 79\\r\\nContent-Type: text/html; charset=utf-8\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nContent-Security-Policy: frame-ancestors 'self'\\r\\nX-XSS-Protection: 1; mode=block\\r\\nX-UA-Compatible: IE=Edge\\r\\n\\r\\n\n198.1.94.209\t2083\tthehovercam.thehovercam.com\tHTTP/1.1 401 Access Denied\\r\\nConnection: close\\r\\nContent-Type: text/html; charset=\"utf-8\"\\r\\nDate: Thu, 28 Jan 2021 04:19:45 GMT\\r\\nSet-Cookie: cprelogin=no; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\\r\\nSet-Cookie: cpsession=%3aKF7VjeDJlFfsEZ7y%2c19ed6a6b5dfd4383c6c1b334518bb6d7; HttpOnly; path=/; port=2083; secure\\r\\nSet-Cookie: roundcube_sessid=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\\r\\nSet-Cookie: Horde=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2083; secure\\r\\nSet-Cookie: PPA_ID=expired; HttpOnly; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\\r\\nSet-Cookie: imp_key=expired; HttpOnly; domain=198.1.94.209; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/horde; port=2083; secure\\r\\nSet-Cookie: key=expired; HttpOnly; domain=198.1.94.209; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/3rdparty/squirrelmail/; port=2083; secure\\r\\nSet-Cookie: SQMSESSID=expired; HttpOnly; domain=198.1.94.209; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; port=2083; secure\\r\\nCache-Control: no-cache, must-revalidate\\r\\nContent-Length: 42455\\r\\n\\r\\n\n54.208.97.80\t80\tec2-54-208-97-80.compute-1.amazonaws.com\tHTTP/1.1 401 Unauthorized\\r\\nServer: nginx/1.10.3 (Ubuntu)\\r\\nDate: Thu, 28 Jan 2021 04:19:58 GMT\\r\\nContent-Type: text/html\\r\\nContent-Length: 606\\r\\nConnection: keep-alive\\r\\nWWW-Authenticate: Basic realm=\"Prometheus server authentication\"\\r\\n\\r\\n\n..." } } } } } }, "/shodan/asn/{asn}": { "get": { "operationId": "filteredByASN", "tags": ["Data Stream (Enterprise)"], "summary": "Filtered by ASN", "description": "This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in devices located in certain ASNs.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "asn", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of ASNs; example \"3303,32475\"", "example": "3303,32475" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": 1574478560,\n \"http\": {\n \"robots_hash\": null,\n \"redirects\": [],\n \"securitytxt\": null,\n \"title\": null,\n \"sitemap_hash\": null,\n \"robots\": null,\n \"server\": \"LiteSpeed\",\n \"host\": \"96.127.186.100\",\n \"html\": \"\",\n \"location\": \"/\",\n \"html_hash\": 0,\n \"sitemap\": null,\n \"securitytxt_hash\": null\n },\n \"timestamp\": \"2021-01-28T04:29:02.206862\",\n \"hostnames\": [\n \"ams-pnode1.websitehostserver.net\"\n ],\n \"org\": \"SingleHop LLC\",\n \"data\": \"HTTP/1.0 301 Moved Permanently\\r\\nLocation: https://96.127.186.100/\\r\\nCache-Control: private, no-cache, max-age=0\\r\\nPragma: no-cache\\r\\nServer:LiteSpeed\\r\\nContent-Length: 0\\r\\nConnection: Close\\r\\n\\r\\n\",\n \"port\": 443,\n \"transport\": \"tcp\",\n \"isp\": \"SingleHop LLC\",\n \"asn\": \"AS32475\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": -97.822,\n \"country_code\": \"US\",\n \"latitude\": 37.751,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"ip\": 1618983524,\n \"domains\": [\n \"websitehostserver.net\"\n ],\n \"ip_str\": \"96.127.186.100\",\n \"_id\": \"97533624-bd22-46ce-9395-17ad28b304d6\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"6d64feef3c6422575abbbf34b1a2e0d9a29b812d\",\n \"options\": {},\n \"id\": \"1dbb01bb-5cd8-46b5-94d0-aee415b8c9ed\",\n \"module\": \"auto\",\n \"ptr\": true\n },\n \"opts\": {}\n}\n{\n \"hash\": -1008615971,\n \"product\": \"AkamaiGHost\",\n \"http\": {\n \"robots_hash\": null,\n \"redirects\": [],\n \"securitytxt\": null,\n \"title\": \"Invalid URL\",\n \"sitemap_hash\": null,\n \"robots\": null,\n \"server\": \"AkamaiGHost\",\n \"host\": \"104.66.169.60\",\n \"html\": '...',\n \"location\": \"/\",\n \"components\": {},\n \"html_hash\": 1470236789,\n \"sitemap\": null,\n \"securitytxt_hash\": null,\n },\n \"timestamp\": \"2021-01-28T04:29:01.265871\",\n \"hostnames\": [\"a104-66-169-60.deploy.static.akamaitechnologies.com\"],\n \"org\": \"Akamai Technologies\",\n \"data\": \"HTTP/1.0 400 Bad Request\\r\\nServer: AkamaiGHost\\r\\nMime-Version: 1.0\\r\\nContent-Type: text/html\\r\\nContent-Length: 208\\r\\nExpires: Thu, 28 Jan 2021 04:29:01 GMT\\r\\nDate: Thu, 28 Jan 2021 04:29:01 GMT\\r\\nConnection: close\\r\\n\\r\\n\",\n \"port\": 80,\n \"transport\": \"tcp\",\n \"info\": \"Akamai's HTTP Acceleration & Mirror service\",\n \"isp\": \"Akamai Technologies\",\n \"asn\": \"AS3303\",\n \"location\": {\n \"country_code3\": null,\n \"city\": \"Zurich\",\n \"region_code\": \"ZH\",\n \"postal_code\": null,\n \"longitude\": 8.5394,\n \"country_code\": \"CH\",\n \"latitude\": 47.3624,\n \"country_name\": \"Switzerland\",\n \"area_code\": null,\n \"dma_code\": null,\n },\n \"ip\": 1749199164,\n \"domains\": [\"akamaitechnologies.com\"],\n \"ip_str\": \"104.66.169.60\",\n \"_id\": \"93aa0f66-a2fb-44bc-9b04-6488b776b915\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"530935e60964ee0af497843f10b63adf84a753e3\",\n \"options\": {},\n \"id\": \"81d22eeb-60e5-4937-93af-557fcd7c089e\",\n \"module\": \"http\",\n \"ptr\": true,\n },\n \"opts\": {},\n}\n" } } } } } }, "/shodan/countries/{countries}": { "get": { "operationId": "filteredByCountry", "tags": ["Data Stream (Enterprise)"], "summary": "Filtered by Country", "description": "This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in devices located in certain countries.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "countries", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of countries indicated by their 2 letter code; example \"DE,US\"", "example": "DE,US" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": -947592388,\n \"product\": \"Apache httpd\",\n \"http\": {\n \"robots_hash\": null,\n \"redirects\": [],\n \"securitytxt\": null,\n \"title\": null,\n \"sitemap_hash\": null,\n \"robots\": null,\n \"server\": \"Apache\",\n \"host\": \"50.63.119.180\",\n \"html\": \"\\n\\n\\npageok\\n\\n\",\n \"location\": \"/\",\n \"components\": {},\n \"html_hash\": -295716025,\n \"sitemap\": null,\n \"securitytxt_hash\": null\n },\n \"timestamp\": \"2021-01-28T04:37:03.375136\",\n \"hostnames\": [\n \"ip-50-63-119-180.ip.secureserver.net\"\n ],\n \"org\": \"GoDaddy.com, LLC\",\n \"data\": \"HTTP/1.1 200 OK\\r\\nDate: Thu, 28 Jan 2021 04:36:59 GMT\\r\\nServer: Apache\\r\\nLast-Modified: Fri, 26 Apr 2013 01:57:05 GMT\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 76\\r\\nVary: Accept-Encoding\\r\\nContent-Type: text/html\\r\\n\\r\\n\",\n \"port\": 80,\n \"transport\": \"tcp\",\n \"isp\": \"GoDaddy.com, LLC\",\n \"cpe23\": [\n \"cpe:2.3:a:apache:http_server\"\n ],\n \"cpe\": [\n \"cpe:/a:apache:http_server\"\n ],\n \"asn\": \"AS26496\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": -97.822,\n \"country_code\": \"US\",\n \"latitude\": 37.751,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"ip\": 843020212,\n \"domains\": [\n \"secureserver.net\"\n ],\n \"ip_str\": \"50.63.119.180\",\n \"_id\": \"85efede2-0730-422c-9e50-bb78054c6d82\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"6d64feef3c6422575abbbf34b1a2e0d9a29b812d\",\n \"options\": {},\n \"id\": \"e418aa3b-c938-4124-be79-1ae40eaec50c\",\n \"module\": \"auto\",\n \"ptr\": true\n },\n \"opts\": {}\n}\n{\n \"hash\": 561623480,\n \"tags\": [\n \"cloud\"\n ],\n \"timestamp\": \"2021-01-28T04:37:05.314514\",\n \"hostnames\": [\n \"server-13-249-211-149.blr50.r.cloudfront.net\"\n ],\n \"org\": \"Amazon CloudFront\",\n \"data\": \"HTTP/1.1 400 Bad Request\\r\\nServer: CloudFront\\r\\nDate: Thu, 28 Jan 2021 04:37:05 GMT\\r\\nContent-Type: text/html\\r\\nContent-Length: 915\\r\\nConnection: close\\r\\nX-Cache: Error from cloudfront\\r\\nVia: 1.1 b5f6daf006d688b2f5eef74923ab8562.cloudfront.net (CloudFront)\\r\\nX-Amz-Cf-Pop: BLR50-C3\\r\\nX-Amz-Cf-Id: jxkyP17GNCKAKARB8a3XpoQBB2yCkyNFv16WnkukSV5z8Sm-vcNBiA==\\r\\n\\r\\n\\n\\nERROR: The request could not be satisfied\\n\\n400 ERROR\\nThe request could not be satisfied.\\n\\nBad request.\\nWe can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.\\n\\nIf you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.\\n\\n\\n\\nGenerated by cloudfront (CloudFront)\\nRequest ID: jxkyP17GNCKAKARB8a3XpoQBB2yCkyNFv16WnkukSV5z8Sm-vcNBiA==\\n\\n\\n\\n\",\n \"port\": 443,\n \"cloud\": {\n \"region\": \"GLOBAL\",\n \"service\": \"AMAZON\",\n \"provider\": \"Amazon\"\n },\n \"isp\": \"Amazon CloudFront\",\n \"transport\": \"tcp\",\n \"asn\": \"AS16509\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": -97.822,\n \"country_code\": \"US\",\n \"latitude\": 37.751,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"ip\": 234476437,\n \"domains\": [\n \"cloudfront.net\"\n ],\n \"ip_str\": \"13.249.211.149\",\n \"_id\": \"da4400f5-e491-4b6b-a59d-87daa61f5a6f\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"cdd92e2d835a37d2798fa6c7105171f4d214012f\",\n \"options\": {},\n \"id\": \"fccd014d-c1fb-4ccc-9608-c0f918994cd6\",\n \"module\": \"https\",\n \"ptr\": true\n },\n \"opts\": {}\n}" } } } } } }, "/shodan/ports/{ports}": { "get": { "operationId": "filteredByPorts", "tags": ["Data Stream (Enterprise)"], "summary": "Filtered by Ports", "description": "Only returns banner data for the list of specified ports. This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in a specific list of ports.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "ports", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of ports; example \"22,443\"", "example": "22,443" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": 1592590585,\n \"product\": \"AkamaiGHost\",\n \"http\": {\n \"robots_hash\": null,\n \"redirects\": [],\n \"securitytxt\": null,\n \"title\": \"Invalid URL\",\n \"sitemap_hash\": null,\n \"robots\": null,\n \"server\": \"AkamaiGHost\",\n \"host\": \"23.8.80.84\",\n \"html\": \"\\nInvalid URL\\n\\nInvalid URL\\nThe requested URL \\\"[no URL]\\\", is invalid.\\nReference #9.4ede3717.1611810347.6c0f8ec\\n\\n\",\n \"location\": \"/\",\n \"components\": {},\n \"html_hash\": 1809591553,\n \"sitemap\": null,\n \"securitytxt_hash\": null\n },\n \"timestamp\": \"2021-01-28T05:05:47.864200\",\n \"ssl\": {\n \"chain_sha256\": [\n \"555a575d447769003b96bc6b6849ffecc710831ccf648082dbcb0a6e81f0037f\",\n \"14363822517e2989b087d0c9a42eef134a774bd0b2a0664d455af784bc08f4d0\",\n \"68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b\",\n \"d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef4\"\n ],\n \"jarm\": \"2ad2ad0002ad2ad22c42d42d00000061cdb625ec378ec3fce160d347caef64\",\n \"chain\": [\n \"-----BEGIN CERTIFICATE-----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\\nfVvWpv/iYwvgQ3gOxP5FkRI2masF\\n-----END CERTIFICATE-----\\n\",\n \"-----BEGIN CERTIFICATE-----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\\nKw/4P1yG/5xtH6HrU2uqz3qOmM4yWg==\\n-----END CERTIFICATE-----\\n\",\n \"-----BEGIN CERTIFICATE-----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\\nvGp4z7h/jnZymQyd/teRCBaho1+V\\n-----END CERTIFICATE-----\\n\",\n \"-----BEGIN CERTIFICATE-----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\\nsmPi9WIsgtRqAEFQ8TmDn5XpNpaYbg==\\n-----END CERTIFICATE-----\\n\"\n ],\n \"dhparams\": null,\n \"versions\": [\n \"TLSv1\",\n \"-SSLv2\",\n \"-SSLv3\",\n \"TLSv1.1\",\n \"TLSv1.2\",\n \"TLSv1.3\"\n ],\n \"acceptable_cas\": [],\n \"tlsext\": [\n {\n \"id\": 65281,\n \"name\": \"renegotiation_info\"\n },\n {\n \"id\": 11,\n \"name\": \"ec_point_formats\"\n },\n {\n \"id\": 35,\n \"name\": \"session_ticket\"\n }\n ],\n \"ja3s\": \"e35df3e00ca4ef31d42b34bebaa2f86e\",\n \"cert\": {\n \"sig_alg\": \"sha256WithRSAEncryption\",\n \"issued\": \"20210115000000Z\",\n \"expires\": \"20220215235959Z\",\n \"expired\": false,\n \"version\": 2,\n \"extensions\": [\n {\n \"data\": \"0\\\\x16\\\\x80\\\\x14\\\\xf2\\\\xbbU\\\\xee\\\\xfc\\\\x8f\\\\xcf\\\\xd0?\\\\x14h\\\\x1a\\\\x95~y\\\\x0e\\\\xab\\\\x170\\\\xf4\",\n \"name\": \"authorityKeyIdentifier\"\n },\n {\n \"data\": \"\\\\x04\\\\x14\\\\xb5~R\\\\xa4\\\\x99\\\\xbd\\\\x84\\\\xc2\\\\xd5q\\\\xb6\\\\xc9\\\\x03\\\\x0e\\\\x02\\\\'\\\\x14\\\\xe2\\\\xa4\\\\xc4\",\n \"name\": \"subjectKeyIdentifier\"\n },\n {\n \"critical\": true,\n \"data\": \"\\\\x03\\\\x02\\\\x05\\\\xa0\",\n \"name\": \"keyUsage\"\n },\n {\n \"critical\": true,\n \"data\": \"0\\\\x00\",\n \"name\": \"basicConstraints\"\n },\n {\n \"data\": \"0\\\\x14\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x01\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x02\",\n \"name\": \"extendedKeyUsage\"\n },\n {\n \"data\": \"0B06\\\\x06\\\\x0b+\\\\x06\\\\x01\\\\x04\\\\x01\\\\xb21\\\\x01\\\\x02\\\\x02\\\\x080\\\\'0%\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x02\\\\x01\\\\x16\\\\x19https://cps.usertrust.com0\\\\x08\\\\x06\\\\x06g\\\\x81\\\\x0c\\\\x01\\\\x02\\\\x02\",\n \"name\": \"certificatePolicies\"\n },\n {\n \"data\": \"0G0E\\\\xa0C\\\\xa0A\\\\x86?http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl\",\n \"name\": \"crlDistributionPoints\"\n },\n {\n \"data\": \"0t0K\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x070\\\\x02\\\\x86?http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt0%\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x070\\\\x01\\\\x86\\\\x19http://ocsp.usertrust.com\",\n \"name\": \"authorityInfoAccess\"\n },\n {\n \"data\": \"\\\\x04\\\\x81\\\\xf1\\\\x00\\\\xef\\\\x00u\\\\x00F\\\\xa5U\\\\xebu\\\\xfa\\\\x91 0\\\\xb5\\\\xa2\\\\x89i\\\\xf4\\\\xf3}\\\\x11,At\\\\xbe\\\\xfdI\\\\xb8\\\\x85\\\\xab\\\\xf2\\\\xfcp\\\\xfemG\\\\x00\\\\x00\\\\x01w\\\\x05\\\\x02\\\\x06\\\\xa0\\\\x00\\\\x00\\\\x04\\\\x03\\\\x00F0D\\\\x02 Zp\\\\x87\\\"\\\\xe7.k\\\\x1c+\\\\xd8\\\\x06\\\\x96_\\\\x80\\\\x96\\\\x1a\\\\xe5\\\\xc9\\\\xc5\\\\xb0\\\\xc6\\\\xb9\\\\xfe\\\\xda\\\\xd5\\\\x00\\\\xcf\\\\xbf,\\\\xeaC\\\\xf9\\\\x02 V\\\\xa0\\\\xd7\\\\xb56\\\\x8d?\\\\x08i\\\\xecK\\\\x17s\\\\xceT\\\\'\\\\xfe\\\\x18\\\\xdd\\\\xf1\\\\x84e#\\\\x80\\\\xe5\\\\x0c*\\\\x00\\\\x8b/k\\\\xc9\\\\x00v\\\\x00\\\\xdf\\\\xa5^\\\\xabh\\\\x82O\\\\x1fl\\\\xad\\\\xee\\\\xb8_N>Z\\\\xea\\\\xcd\\\\xa2\\\\x12\\\\xa4j^\\\\x8e;\\\\x12\\\\xc0 D\\\\\\\\*s\\\\x00\\\\x00\\\\x01w\\\\x05\\\\x02\\\\x06\\\\xc7\\\\x00\\\\x00\\\\x04\\\\x03\\\\x00G0E\\\\x02 S\\\\xb1\\\"$\\\\x15\\\\xf6\\\\x91\\\\xc0\\\\xb0\\\\x16\\\\x91 \\\\xa1I\\\\x85\\\\xa0\\\\x1d{\\\\x84\\\\xb0\\\\xf9Y\\\\xe3J^\\\\x19g\\\\xa2=d\\\\xe1\\\\t\\\\x02!\\\\x00\\\\x92\\\\x8b\\\\x85\\\\x91d\\\\xff\\\\xcb\\\\xa6\\\\x1dF\\\\xc8(\\\\xa9\\\\xff\\\\xa6i\\\\xbfYq\\\\x8ec\\\\x01{\\\\xb6\\\\xa9\\\\xe5\\\\xcc3\\\\xc2!\\\\xe8\\\\xe6\",\n \"name\": \"ct_precert_scts\"\n },\n {\n \"data\": \"0\\\\x82\\\\n\\\\xb2\\\\x82\\\\x17pft.bayercropscience.us\\\\x82\\\\x15admin.hot-potatoes.ca\\\\x82\\\\x11agro.bayer-ca.com\\\\x82\\\\x18alumni.youthagsummit.com\\\\x82\\\\x10api.bayerweb.com\\\\x82\\\\x19appportfolio.bayer.com.br\\\\x82\\\\x14aprendecon.bayer.com\\\\x82\\\\x18cropscience.bayer.com.ar\\\\x82\\\\x15enmovimiento.bayer.es\\\\x82\\\\x13focus.bayer-agri.fr\\\\x82\\\\x17grants4traits.bayer.com\\\\x82\\\\x13imagebank.bayer.com\\\\x82\\\\x1ainfo.cropscience.bayer.com\\\\x82\\\\x0fleaps.bayer.com\\\\x82\\\\x11maverick.bayer.us\\\\x82#mdmwebservice.cropscience.bayer.com\\\\x82\\\\x17melangespublic.bayer.fr\\\\x82\\\\x1bmobileapi.backedbybayer.com\\\\x82\\\\'mobileapi.environmentalscience.bayer.us\\\\x82\\\\x1cnewsletter.youthagsummit.com\\\\x82\\\\rnps.bayer.com\\\\x82\\\\x16phytobac.bayer-agri.fr\\\\x82\\\\x1bphytoprogress.bayer-agri.fr\\\\x82/platformadystrybucyjna.cropscience.bayer.com.pl\\\\x82\\\\x13pontos.bayer.com.br\\\\x82&ppmlogin.environmentalscience.bayer.us\\\\x82\\\\x1eprod2.cropscience.bayer.com.py\\\\x82\\\\x1eprod2.cropscience.bayer.com.uy\\\\x82\\\\x13protecmais.bayer.fr\\\\x82\\\\x18proveedores.bayer.com.mx\\\\x82\\\\x16publichealth.bayer.com\\\\x82\\\\x19publichealthmag.bayer.com\\\\x82\\\\x16stage.api.bayerweb.com\\\\x82\\\\x1dstage.bayercropscience.com.ar\\\\x82\\\\x1dstage.bayercropscience.com.co\\\\x82\\\\x1dstage.bayercropscience.com.ec\\\\x82\\\\x1dstage.bayercropscience.com.py\\\\x82\\\\x1dstage.bayercropscience.com.ve\\\\x82\\\\x17stage.beja.bayerweb.com\\\\x82\\\\x18stage.bicanada.bayer.com\\\\x82\\\\x1cstage.circulo13.bayer.com.mx\\\\x82\\\\x1estage.cropscience.bayer.com.ar\\\\x82\\\\x1estage.cropscience.bayer.com.bo\\\\x82\\\\x1estage.cropscience.bayer.com.py\\\\x82\\\\x1estage.cropscience.bayer.com.uy\\\\x82\\\\x12stage.feedabee.com\\\\x82)stage.mdmwebservice.cropscience.bayer.com\\\\x82\\\\x1cstage.micultivo.bayer.com.mx\\\\x82\\\\x18stage.miportal.bayer.com\\\\x82!stage.mobileapi.backedbybayer.com\\\\x82\\\\x1estage.proveedores.bayer.com.mx\\\\x82\\\\x1bstage.saludambiental.com.mx\\\\x82%stage.seedtag.bayercropscience.us.com\\\\x82,stage.stewardshipmtg.bayercropscience.us.com\\\\x82\\\\x10stardl.bayer.com\\\\x82\\\\x12stardlqa.bayer.com\\\\x82\\\\x10starqa.bayer.com\\\\x82\\\"stewardship.bayercropscienceus.com\\\\x82&stewardshipmtg.bayercropscience.us.com\\\\x82\\\\x1bszkolenia.agro.bayer.com.pl\\\\x82)test.bcsfieldbids.bayercropscience.us.com\\\\x82#test.digital-marketing.cs.bayer.com\\\\x82\\\\x17test.int.agrar.bayer.de\\\\x82\\\\x1ctest.net.mybayerservices.com\\\\x82\\\\x15test.pft.bayerweb.com\\\\x82\\\\rwww.baydir.cl\\\\x82\\\\x11www.bayer-agri.fr\\\\x82\\\\x1bwww.bayercropscience.com.ar\\\\x82\\\\x14www.bayertoolbox.com\\\\x82\\\\x10www.bayexpert.cz\\\\x82\\\\x10www.bayexpert.sk\\\\x82\\\\x10www.bayprofit.cz\\\\x82\\\\x10www.bayprofit.sk\\\\x82(www.bcsfieldbids.bayercropscience.us.com\\\\x82&www.bulkrepack.bayercropscience.us.com\\\\x82\\\\x16www.colturaecultura.it\\\\x82\\\\x18www.covoiturage.bayer.fr\\\\x82\\\\x18www.cropscience.bayer.cl\\\\x82\\\\x1cwww.cropscience.bayer.com.py\\\\x82\\\\x1cwww.cropscience.bayer.com.uy\\\\x82\\\\x18www.cropscience.bayer.ro\\\\x82\\\\x18www.cropscience.bayer.sk\\\\x82\\\\x0fwww.csavazas.hu\\\\x82\\\"www.digital-marketing.cs.bayer.com\\\\x82&www.katalograstitelnazashtita.bayer.bg\\\\x82\\\\x15www.momentos.bayer.mx\\\\x82\\\\x1ewww.monitoraggiococciniglia.it\\\\x82\\\\x18www.monografias.bayer.mx\\\\x82\\\\x16www.mybayeraccount.com\\\\x82\\\\x17www.mybayerservices.com\\\\x82\\\\x1ewww.proteccionambiental.com.ar\\\\x82\\\\x1cwww.proveedores.bayer.com.mx\\\\x82\\\\x1dwww.publichealthmag.bayer.com\\\\x82\\\\x16www.smartagro.bayer.ec\\\\x82!www.stage.bayercropscience.com.ar\\\\x82!www.stage.bayercropscience.com.uy\\\\x82\\\\x16www.tarim.bayer.com.tr\\\\x82\\\\x1awww.xn--h1apeh1c.xn--p1acf\",\n \"name\": \"subjectAltName\"\n }\n ],\n \"fingerprint\": {\n \"sha256\": \"555a575d447769003b96bc6b6849ffecc710831ccf648082dbcb0a6e81f0037f\",\n \"sha1\": \"39c0a00060c1a0df4b9dea017c8d87950fe0250a\"\n },\n \"serial\": 2.3917953139147504e+38,\n \"subject\": {\n \"C\": \"DE\",\n \"CN\": \"pft.bayercropscience.us\",\n \"L\": \"Leverkusen\",\n \"O\": \"Bayer AG\",\n \"ST\": \"Nordrhein-Westfalen\",\n \"street\": \"Kaiser-Wilhelm-Allee 1\",\n \"postalCode\": \"51368\",\n \"OU\": \"Bayer Business Services GmbH\"\n },\n \"pubkey\": {\n \"type\": \"rsa\",\n \"bits\": 2048\n },\n \"issuer\": {\n \"C\": \"US\",\n \"L\": \"Wilmington\",\n \"CN\": \"Trusted Secure Certificate Authority 5\",\n \"O\": \"Corporation Service Company\",\n \"ST\": \"DE\"\n }\n },\n \"cipher\": {\n \"version\": \"TLSv1/SSLv3\",\n \"bits\": 256,\n \"name\": \"ECDHE-RSA-AES256-GCM-SHA384\"\n },\n \"trust\": {\n \"revoked\": false,\n \"browser\": {\n \"mozilla\": true,\n \"apple\": true,\n \"microsoft\": true\n }\n },\n \"alpn\": [\n \"http/1.1\",\n \"http/1.0\"\n ],\n \"ocsp\": {}\n },\n \"hostnames\": [\n \"a23-8-80-84.deploy.static.akamaitechnologies.com\"\n ],\n \"org\": \"Akamai Technologies\",\n \"data\": \"HTTP/1.0 400 Bad Request\\r\\nServer: AkamaiGHost\\r\\nMime-Version: 1.0\\r\\nContent-Type: text/html\\r\\nContent-Length: 208\\r\\nExpires: Thu, 28 Jan 2021 05:05:47 GMT\\r\\nDate: Thu, 28 Jan 2021 05:05:47 GMT\\r\\nConnection: close\\r\\n\\r\\n\",\n \"port\": 443,\n \"transport\": \"tcp\",\n \"info\": \"Akamai's HTTP Acceleration & Mirror service\",\n \"isp\": \"Akamai Technologies\",\n \"asn\": \"AS16625\",\n \"location\": {\n \"country_code3\": null,\n \"city\": \"Adelaide\",\n \"region_code\": \"SA\",\n \"postal_code\": null,\n \"longitude\": 138.6005,\n \"country_code\": \"AU\",\n \"latitude\": -34.9274,\n \"country_name\": \"Australia\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"ip\": 386420820,\n \"domains\": [\n \"akamaitechnologies.com\"\n ],\n \"ip_str\": \"23.8.80.84\",\n \"_id\": \"95d23749-3a9f-40fb-aa32-5e64fe763da7\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"91597136eb9b132d7cc954511e0d9cbe7ce2e377\",\n \"options\": {},\n \"id\": \"7d720834-91ea-42dc-8b41-0100933116f1\",\n \"module\": \"https\",\n \"ptr\": true\n },\n \"opts\": {\n \"vulns\": [],\n \"heartbleed\": \"2021/01/28 05:06:04 23.8.80.84:443 - SAFE\\n\"\n }\n}\n{\n \"hash\": -1180342095,\n \"product\": \"Microsoft IIS httpd\",\n \"http\": {\n \"robots_hash\": null,\n \"redirects\": [],\n \"securitytxt\": null,\n \"title\": \"Object moved\",\n \"sitemap_hash\": null,\n \"robots\": null,\n \"server\": \"Microsoft-IIS/10.0\",\n \"host\": \"104.208.220.204\",\n \"html\": \"Object moved\\r\\nObject moved to here.\\r\\n\\r\\n\",\n \"location\": \"/\",\n \"components\": {},\n \"html_hash\": -1401938847,\n \"sitemap\": null,\n \"securitytxt_hash\": null\n },\n \"tags\": [\n \"cloud\"\n ],\n \"timestamp\": \"2021-01-28T05:06:00.832166\",\n \"ssl\": {\n \"chain_sha256\": [\n \"9e9296f5bdfafaa18ded4e605b4bde781d7e6ed3120ea3c7f4d6a2a2ad82c926\",\n \"04eeea8e50b4775b3c24797262917ee50002ec4c75b56cdf3ee1c18cfca5ba52\",\n \"16af57a9f676b0ab126095aa5ebadef22ab31119d644ac95cd4b93dbf3f26aeb\"\n ],\n \"jarm\": \"2ad2ad0000000000002ad2ad2ad2ad0f0dcb2ae084f34cae790be1eab88c30\",\n \"chain\": [\n \"-----BEGIN CERTIFICATE-----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\\nvmvOoX+Uqrupd8sFyF5Alhzt3wfofG+lqREYmYQ=\\n-----END CERTIFICATE-----\\n\",\n \"-----BEGIN CERTIFICATE-----\\nMIIFWjCCBEKgAwIBAgIQDxSWXyAgaZlP1ceseIlB4jANBgkqhkiG9w0BAQsFADBa\\nMQswCQYDVQQGEwJJRTESMBAGA1UEChMJQmFsdGltb3JlMRMwEQYDVQQLEwpDeWJl\\nclRydXN0MSIwIAYDVQQDExlCYWx0aW1vcmUgQ3liZXJUcnVzdCBSb290MB4XDTIw\\nMDcyMTIzMDAwMFoXDTI0MTAwODA3MDAwMFowTzELMAkGA1UEBhMCVVMxHjAcBgNV\\nBAoTFU1pY3Jvc29mdCBDb3Jwb3JhdGlvbjEgMB4GA1UEAxMXTWljcm9zb2Z0IFJT\\nQSBUTFMgQ0EgMDEwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCqYnfP\\nmmOyBoTzkDb0mfMUUavqlQo7Rgb9EUEf/lsGWMk4bgj8T0RIzTqk970eouKVuL5R\\nIMW/snBjXXgMQ8ApzWRJCZbar879BV8rKpHoAW4uGJssnNABf2n17j9TiFy6BWy+\\nIhVnFILyLNK+W2M3zK9gheiWa2uACKhuvgCca5Vw/OQYErEdG7LBEzFnMzTmJcli\\nW1iCdXby/vI/OxbfqkKD4zJtm45DJvC9Dh+hpzqvLMiK5uo/+aXSJY+SqhoIEpz+\\nrErHw+uAlKuHFtEjSeeku8eR3+Z5ND9BSqc6JtLqb0bjOHPm5dSRrgt4nnil75bj\\nc9j3lWXpBb9PXP9Sp/nPCK+nTQmZwHGjUnqlO9ebAVQD47ZisFonnDAmjrZNVqEX\\nF3p7laEHrFMxttYuD81BdOzxAbL9Rb/8MeFGQjE2Qx65qgVfhH+RsYuuD9dUw/3w\\nZAhq05yO6nk07AM9c+AbNtRoEcdZcLCHfMDcbkXKNs5DJncCqXAN6LhXVERCw/us\\nG2MmCMLSIx9/kwt8bwhUmitOXc6fpT7SmFvRAtvxg84wUkg4Y/Gx++0j0z6StSeN\\n0EJz150jaHG6WV4HUqaWTb98Tm90IgXAU4AW2GBOlzFPiU5IY9jt+eXC2Q6yC/Zp\\nTL1LAcnL3Qa/OgLrHN0wiw1KFGD51WRPQ0Sh7QIDAQABo4IBJTCCASEwHQYDVR0O\\nBBYEFLV2DDARzseSQk1Mx1wsyKkM6AtkMB8GA1UdIwQYMBaAFOWdWTCCR1jMrPoI\\nVDaGezq1BE3wMA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYI\\nKwYBBQUHAwIwEgYDVR0TAQH/BAgwBgEB/wIBADA0BggrBgEFBQcBAQQoMCYwJAYI\\nKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTA6BgNVHR8EMzAxMC+g\\nLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vT21uaXJvb3QyMDI1LmNybDAq\\nBgNVHSAEIzAhMAgGBmeBDAECATAIBgZngQwBAgIwCwYJKwYBBAGCNyoBMA0GCSqG\\nSIb3DQEBCwUAA4IBAQCfK76SZ1vae4qt6P+dTQUO7bYNFUHR5hXcA2D59CJWnEj5\\nna7aKzyowKvQupW4yMH9fGNxtsh6iJswRqOOfZYC4/giBO/gNsBvwr8uDW7t1nYo\\nDYGHPpvnpxCM2mYfQFHq576/TmeYu1RZY29C4w8xYBlkAA8mDJfRhMCmehk7cN5F\\nJtyWRj2cZj/hOoI45TYDBChXpOlLZKIYiG1giY16vhCRi6zmPzEwv+tk156N6cGS\\nVm44jTQ/rs1sa0JSYjzUaYngoFdZC4OfxnIkQvUIA4TOFmPzNPEFdjcZsgbeEz4T\\ncGHTBPK4R28F44qIMCtHRV55VMX53ev6P3hRddJb\\n-----END CERTIFICATE-----\\n\",\n \"-----BEGIN CERTIFICATE-----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\\nR9I4LtD+gdwyah617jzV/OeBHRnDJELqYzmp\\n-----END CERTIFICATE-----\\n\"\n ],\n \"dhparams\": null,\n \"versions\": [\n \"-TLSv1\",\n \"-SSLv2\",\n \"-SSLv3\",\n \"-TLSv1.1\",\n \"TLSv1.2\",\n \"-TLSv1.3\"\n ],\n \"acceptable_cas\": [],\n \"tlsext\": [\n {\n \"id\": 5,\n \"name\": \"status_request\"\n },\n {\n \"id\": 65281,\n \"name\": \"renegotiation_info\"\n }\n ],\n \"ja3s\": \"1d9c3e8c45ab7a2112263449a3ad9ece\",\n \"cert\": {\n \"sig_alg\": \"sha256WithRSAEncryption\",\n \"issued\": \"20201001180549Z\",\n \"expires\": \"20211001180549Z\",\n \"expired\": false,\n \"version\": 2,\n \"extensions\": [\n {\n \"data\": \"\\\\x04\\\\x81\\\\xf3\\\\x00\\\\xf1\\\\x00w\\\\x00\\\\xf6\\\\\\\\\\\\x94/\\\\xd1w0\\\"\\\\x14T\\\\x18\\\\x080\\\\x94V\\\\x8e\\\\xe3M\\\\x13\\\\x193\\\\xbf\\\\xdf\\\\x0c/ \\\\x0b\\\\xccN\\\\xf1d\\\\xe3\\\\x00\\\\x00\\\\x01t\\\\xe5`\\\\xb3\\\\x08\\\\x00\\\\x00\\\\x04\\\\x03\\\\x00H0F\\\\x02!\\\\x00\\\\xe10\\\\xa0\\\\x93\\\\x8cQ\\\\x7f5g\\\\x9f\\\\x81\\\\xa8\\\\xb4\\\\xd1R\\\\xa4N\\\\xe1^\\\\xc1\\\\x96*\\\\xc7\\\\xa8i\\\\xf8\\\\xa1\\\\x16\\\\xd1@\\\\xac\\\\xba\\\\x02!\\\\x00\\\\xc3\\\\xb4\\\\x9e\\\\xc8;\\\\xbd\\\\x15\\\\x8e\\\\xfa\\\\xdb%\\\\x84f\\\\xaa\\\\xc1\\\\nzA\\\\x98p\\\\xf9\\\\x8c\\\\xe8(54\\\\xcd\\\\x9dtd|\\\\xe9\\\\x00v\\\\x00D\\\\x94e.\\\\xb0\\\\xee\\\\xce\\\\xaf\\\\xc4@\\\\x07\\\\xd8\\\\xa8\\\\xfe(\\\\xc0\\\\xda\\\\xe6\\\\x82\\\\xbe\\\\xd8\\\\xcb1\\\\xb5?\\\\xd33\\\\x96\\\\xb5\\\\xb6\\\\x81\\\\xa8\\\\x00\\\\x00\\\\x01t\\\\xe5`\\\\xb3\\\\x07\\\\x00\\\\x00\\\\x04\\\\x03\\\\x00G0E\\\\x02!\\\\x00\\\\x88 \\\\xaa\\\\xe8\\\\xf4\\\\xc5c\\\\xf6\\\\x10\\\\xef\\\\xda\\\\x88\\\\xc4\\\\x1a\\\\xcfQ\\\\xdf\\\\xbd\\\\xe3\\\\x1b\\\\x8c\\\\xf3z\\\\x92\\\\xe5ia\\\\x0f3k\\\\x9e\\\\x00\\\\x02 3\\\\x9d\\\\x91\\\\xa6~\\\\x95\\\\xe9\\\\x00+s\\\\x08=\\\\x1fj\\\\x03\\\\x08.\\\\xfb\\\\xce\\\\xa7\\\\xc5\\\\xed5\\\\xaf\\\\xe9Ws`\\\\xba\\\\x1a\\\\xc2\\\\x1e\",\n \"name\": \"ct_precert_scts\"\n },\n {\n \"data\": \"0\\\\x180\\\\n\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x010\\\\n\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x02\",\n \"name\": \"UNDEF\"\n },\n {\n \"data\": \"0/\\\\x06\\\\'+\\\\x06\\\\x01\\\\x04\\\\x01\\\\x827\\\\x15\\\\x08\\\\x87\\\\xda\\\\x86u\\\\x83\\\\xee\\\\xd9\\\\x01\\\\x82\\\\xc9\\\\x85\\\\x1b\\\\x81\\\\xb5\\\\x9ea\\\\x85\\\\xf4\\\\xeb`\\\\x81]\\\\x85\\\\x86\\\\x8eA\\\\x87\\\\xc2\\\\x98P\\\\x02\\\\x01d\\\\x02\\\\x01%\",\n \"name\": \"UNDEF\"\n },\n {\n \"data\": \"0y0S\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x070\\\\x02\\\\x86Ghttp://www.microsoft.com/pki/mscorp/Microsoft%20RSA%20TLS%20CA%2001.crt0\\\"\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x070\\\\x01\\\\x86\\\\x16http://ocsp.msocsp.com\",\n \"name\": \"authorityInfoAccess\"\n },\n {\n \"data\": \"\\\\x04\\\\x14\\\\xbac\\\\x19T\\\\x9dcn\\\\xce\\\\x1e\\\\xaa7\\\\x86w\\\\xf7\\\\xa7@\\\\x08bJ~\",\n \"name\": \"subjectKeyIdentifier\"\n },\n {\n \"data\": \"\\\\x03\\\\x02\\\\x04\\\\xb0\",\n \"name\": \"keyUsage\"\n },\n {\n \"data\": \"0@\\\\x82\\\\x1dpods.edog.officeapps.live.com\\\\x82\\\\x1f*.pods.edog.officeapps.live.com\",\n \"name\": \"subjectAltName\"\n },\n {\n \"data\": \"0\\\\x81\\\\xa50\\\\x81\\\\xa2\\\\xa0\\\\x81\\\\x9f\\\\xa0\\\\x81\\\\x9c\\\\x86Mhttp://mscrl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl\\\\x86Khttp://crl.microsoft.com/pki/mscorp/crl/Microsoft%20RSA%20TLS%20CA%2001.crl\",\n \"name\": \"crlDistributionPoints\"\n },\n {\n \"data\": \"0N0B\\\\x06\\\\t+\\\\x06\\\\x01\\\\x04\\\\x01\\\\x827*\\\\x010503\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x02\\\\x01\\\\x16\\\\'http://www.microsoft.com/pki/mscorp/cps0\\\\x08\\\\x06\\\\x06g\\\\x81\\\\x0c\\\\x01\\\\x02\\\\x01\",\n \"name\": \"certificatePolicies\"\n },\n {\n \"data\": \"0\\\\x16\\\\x80\\\\x14\\\\xb5v\\\\x0c0\\\\x11\\\\xce\\\\xc7\\\\x92BML\\\\xc7\\\\\\\\,\\\\xc8\\\\xa9\\\\x0c\\\\xe8\\\\x0bd\",\n \"name\": \"authorityKeyIdentifier\"\n },\n {\n \"data\": \"0\\\\x14\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x01\\\\x06\\\\x08+\\\\x06\\\\x01\\\\x05\\\\x05\\\\x07\\\\x03\\\\x02\",\n \"name\": \"extendedKeyUsage\"\n }\n ],\n \"fingerprint\": {\n \"sha256\": \"9e9296f5bdfafaa18ded4e605b4bde781d7e6ed3120ea3c7f4d6a2a2ad82c926\",\n \"sha1\": \"9fa0354d790576aa30f02f21b16612fbb8773b21\"\n },\n \"serial\": 2.3861798313051083e+45,\n \"subject\": {\n \"CN\": \"pods.edog.officeapps.live.com\"\n },\n \"pubkey\": {\n \"type\": \"rsa\",\n \"bits\": 2048\n },\n \"issuer\": {\n \"C\": \"US\",\n \"CN\": \"Microsoft RSA TLS CA 01\",\n \"O\": \"Microsoft Corporation\"\n }\n },\n \"cipher\": {\n \"version\": \"TLSv1/SSLv3\",\n \"bits\": 256,\n \"name\": \"ECDHE-RSA-AES256-GCM-SHA384\"\n },\n \"trust\": {\n \"revoked\": false,\n \"browser\": {\n \"mozilla\": true,\n \"apple\": true,\n \"microsoft\": true\n }\n },\n \"alpn\": [],\n \"ocsp\": {}\n },\n \"cloud\": {\n \"region\": \"useast2\",\n \"service\": null,\n \"provider\": \"Azure\"\n },\n \"hostnames\": [],\n \"org\": \"Microsoft Azure\",\n \"data\": \"HTTP/1.1 302 Found\\r\\nCache-Control: private\\r\\nContent-Type: text/html; charset=utf-8\\r\\nLocation: http://www.office.com/\\r\\nServer: Microsoft-IIS/10.0\\r\\nAccess-Control-Allow-Origin: *\\r\\nAccess-Control-Expose-Headers: si, esid, X-EndSession, X-CorrelationID, X-OfficeFE, X-NewKey, X-OfficeCluster, Pid, SlideWidth, SlideHeight, ErrorCode, ErrorCategory, X-ErrorCode\\r\\nX-OfficeVersion: 16.0.13727.40505\\r\\nX-CorrelationId: 1f0ef74d-9cfc-4c22-a17e-8ef12d06ae9f\\r\\nX-UserSessionId: 1f0ef74d-9cfc-4c22-a17e-8ef12d06ae9f\\r\\nX-OfficeCluster: eus2-000.PODS.edog.officeapps.live.com\\r\\nX-AspNet-Version: 4.0.30319\\r\\nX-Powered-By: ASP.NET\\r\\nDate: Thu, 28 Jan 2021 05:06:00 GMT\\r\\nContent-Length: 139\\r\\n\\r\\n\",\n \"port\": 443,\n \"cpe23\": [\n \"cpe:2.3:a:microsoft:internet_information_server:10.0\",\n \"cpe:2.3:o:microsoft:windows\"\n ],\n \"isp\": \"Microsoft Corporation\",\n \"transport\": \"tcp\",\n \"cpe\": [\n \"cpe:/a:microsoft:internet_information_server:10.0\",\n \"cpe:/o:microsoft:windows\"\n ],\n \"asn\": \"AS8075\",\n \"version\": \"10.0\",\n \"location\": {\n \"country_code3\": null,\n \"city\": \"Boydton\",\n \"region_code\": \"VA\",\n \"postal_code\": null,\n \"longitude\": -78.375,\n \"country_code\": \"US\",\n \"latitude\": 36.6534,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": 560\n },\n \"ip\": 1758518476,\n \"domains\": [],\n \"ip_str\": \"104.208.220.204\",\n \"_id\": \"7c29cbd8-51d2-44ed-ade2-d2f75eb6617a\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"cdd92e2d835a37d2798fa6c7105171f4d214012f\",\n \"options\": {},\n \"id\": \"d31f59c7-6d19-4277-b89d-3f1b8413e5bf\",\n \"module\": \"https\",\n \"ptr\": true\n },\n \"opts\": {\n \"vulns\": [],\n \"heartbleed\": \"2021/01/28 05:06:08 104.208.220.204:443 - ERROR: write tcp 104.208.220.204:443: broken pipe\\n\"\n }\n}" } } } } } }, "/shodan/vulns/{vulns}": { "get": { "operationId": "filteredByVulnerabilities", "tags": ["Data Stream (Enterprise)"], "summary": "Filtered by Vulnerabilities", "description": "Only returns banner data for the list of specified vulnerabilities. This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in a specific list of vulnerabilities.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "vulns", "in": "path", "schema": { "type": "string" }, "required": true, "description": "Comma-separated list of case-insensitive vulnerabilities; example \"CVE-2017-7679,CVE-2018-15919\"", "example": "CVE-2017-7679,CVE-2018-15919" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": -286560,\n \"product\": \"Apache httpd\",\n \"http\": {\n \"status\": 400,\n \"robots_hash\": -1022729730,\n \"redirects\": [\n {\n \"host\": \"136.243.203.117\",\n \"html\": \"\\n\\n\\n\\t window.location.href=\\\"index.php\\\"; \\n\\t\\n\\n\\n\",\n \"data\": \"HTTP/1.1 200 OK\\r\\nDate: Sun, 26 Dec 2021 13:50:37 GMT\\r\\nServer: Apache/2.4.25 (Debian)\\r\\nLast-Modified: Sat, 02 May 2020 19:49:04 GMT\\r\\nETag: \\\"9c-5a4af97139ebf\\\"\\r\\nAccept-Ranges: bytes\\r\\nContent-Length: 156\\r\\nVary: Accept-Encoding\\r\\nContent-Type: text/html\\r\\n\\r\\n\",\n \"location\": \"/\"\n }\n ],\n \"securitytxt\": null,\n \"title\": null,\n \"sitemap_hash\": null,\n \"robots\": \"User-agent: *\\nDisallow: /\\n\",\n \"server\": \"Apache/2.4.25 (Debian)\",\n \"host\": \"136.243.203.117\",\n \"html\": \"\\n\\n\\n\\t window.location.href=\\\"index.php\\\"; \\n\\t\\n\\n\\n\",\n \"location\": \"/index.php\",\n \"components\": {\n \"PHP\": {\n \"categories\": []\n }\n },\n \"html_hash\": 823453261,\n \"sitemap\": null,\n \"securitytxt_hash\": null\n },\n \"vulns\": {\n \"CVE-2019-0196\": {\n \"verified\": false,\n \"references\": [\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html\",\n \"http://www.apache.org/dist/httpd/CHANGES_2.4.39\",\n \"http://www.openwall.com/lists/oss-security/2019/04/02/1\",\n \"http://www.securityfocus.com/bid/107669\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/97a1c58e138ed58a364513b58d807a802e72bf6079ff81a10948ef7c@%3Ccvs.httpd.apache.org%3E\",\n \"https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85576ed9285686ac@%3Ccvs.httpd.apache.org%3E\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YTJPHI3E3OKW7OT7COQXVG7DE7IDQ2OT/\",\n \"https://seclists.org/bugtraq/2019/Apr/5\",\n \"https://security.netapp.com/advisory/ntap-20190617-0002/\",\n \"https://support.f5.com/csp/article/K44591505\",\n \"https://usn.ubuntu.com/3937-1/\",\n \"https://www.debian.org/security/2019/dsa-4422\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"A vulnerability was found in Apache HTTP Server 2.4.17 to 2.4.38. Using fuzzed network input, the http/2 request handling could be made to access freed memory in string comparison when determining the method of a request and thus process the request incorrectly.\"\n },\n \"CVE-2017-7679\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3896\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\n \"http://www.securityfocus.com/bid/99170\",\n \"http://www.securitytracker.com/id/1038711\",\n \"https://access.redhat.com/errata/RHSA-2017:2478\",\n \"https://access.redhat.com/errata/RHSA-2017:2479\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://access.redhat.com/errata/RHSA-2017:3195\",\n \"https://access.redhat.com/errata/RHSA-2017:3475\",\n \"https://access.redhat.com/errata/RHSA-2017:3476\",\n \"https://access.redhat.com/errata/RHSA-2017:3477\",\n \"https://github.com/gottburgm/Exploits/tree/master/CVE-2017-7679\",\n \"https://lists.apache.org/thread.html/f4515e580dfb6eeca589a5cdebd4c4c709ce632b12924f343c3b7751@%3Cdev.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\",\n \"https://www.nomachine.com/SU08O00185\"\n ],\n \"cvss\": \"7.5\",\n \"summary\": \"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.\"\n },\n \"CVE-2017-7659\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3896\",\n \"http://www.securityfocus.com/bid/99132\",\n \"http://www.securitytracker.com/id/1038711\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://lists.apache.org/thread.html/1d0b746bbaa3a64890fcdab59ee9050aaa633b7143e7d412374e5a9a@%3Cannounce.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.\"\n },\n \"CVE-2017-9788\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3913\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\n \"http://www.securityfocus.com/bid/99569\",\n \"http://www.securitytracker.com/id/1038906\",\n \"https://access.redhat.com/errata/RHSA-2017:2478\",\n \"https://access.redhat.com/errata/RHSA-2017:2479\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://access.redhat.com/errata/RHSA-2017:2708\",\n \"https://access.redhat.com/errata/RHSA-2017:2709\",\n \"https://access.redhat.com/errata/RHSA-2017:2710\",\n \"https://access.redhat.com/errata/RHSA-2017:3113\",\n \"https://access.redhat.com/errata/RHSA-2017:3114\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://access.redhat.com/errata/RHSA-2017:3195\",\n \"https://access.redhat.com/errata/RHSA-2017:3239\",\n \"https://access.redhat.com/errata/RHSA-2017:3240\",\n \"https://httpd.apache.org/security/vulnerabilities_22.html\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/0dd69204a6bd643cc4e9ccd008f07a9375525d977c6ebeb07a881afb@%3Cannounce.httpd.apache.org%3E\",\n \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20170911-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\"\n ],\n \"cvss\": \"6.4\",\n \"summary\": \"In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.\"\n },\n \"CVE-2017-9798\": {\n \"verified\": false,\n \"references\": [\n \"http://openwall.com/lists/oss-security/2017/09/18/2\",\n \"http://www.debian.org/security/2017/dsa-3980\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html\",\n \"http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html\",\n \"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html\",\n \"http://www.securityfocus.com/bid/100872\",\n \"http://www.securityfocus.com/bid/105598\",\n \"http://www.securitytracker.com/id/1039387\",\n \"https://access.redhat.com/errata/RHSA-2017:2882\",\n \"https://access.redhat.com/errata/RHSA-2017:2972\",\n \"https://access.redhat.com/errata/RHSA-2017:3018\",\n \"https://access.redhat.com/errata/RHSA-2017:3113\",\n \"https://access.redhat.com/errata/RHSA-2017:3114\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://access.redhat.com/errata/RHSA-2017:3195\",\n \"https://access.redhat.com/errata/RHSA-2017:3239\",\n \"https://access.redhat.com/errata/RHSA-2017:3240\",\n \"https://access.redhat.com/errata/RHSA-2017:3475\",\n \"https://access.redhat.com/errata/RHSA-2017:3476\",\n \"https://access.redhat.com/errata/RHSA-2017:3477\",\n \"https://blog.fuzzing-project.org/60-Optionsbleed-HTTP-OPTIONS-method-can-leak-Apaches-server-memory.html\",\n \"https://blog.fuzzing-project.org/uploads/apache-2.2-optionsbleed-backport.patch\",\n \"https://github.com/apache/httpd/commit/29afdd2550b3d30a8defece2b95ae81edcf66ac9\",\n \"https://github.com/hannob/optionsbleed\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2017-9798\",\n \"https://security-tracker.debian.org/tracker/CVE-2017-9798\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0003/\",\n \"https://support.apple.com/HT208331\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://svn.apache.org/viewvc/httpd/httpd/branches/2.4.x/server/core.c?r1=1805223&r2=1807754&pathrev=1807754&view=patch\",\n \"https://www.exploit-db.com/exploits/42745/\",\n \"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\",\n \"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigurations, aka Optionsbleed. This affects the Apache HTTP Server through 2.2.34 and 2.4.x through 2.4.27. The attacker sends an unauthenticated OPTIONS HTTP request when attempting to read secret data. This is a use-after-free issue and thus secret data is not always sent, and the specific data depends on many factors including configuration. Exploitation with .htaccess can be blocked with a patch to the ap_limit_section function in server/core.c.\"\n },\n \"CVE-2018-11763\": {\n \"verified\": false,\n \"references\": [\n \"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00030.html\",\n \"http://www.securityfocus.com/bid/105414\",\n \"http://www.securitytracker.com/id/1041713\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://security.netapp.com/advisory/ntap-20190204-0004/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3783-1/\",\n \"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\",\n \"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\"\n ],\n \"cvss\": \"4.3\",\n \"summary\": \"In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP/2 connections. A possible mitigation is to not enable the h2 protocol.\"\n },\n \"CVE-2017-3167\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3896\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\n \"http://www.securityfocus.com/bid/99135\",\n \"http://www.securitytracker.com/id/1038711\",\n \"https://access.redhat.com/errata/RHSA-2017:2478\",\n \"https://access.redhat.com/errata/RHSA-2017:2479\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://access.redhat.com/errata/RHSA-2017:3195\",\n \"https://access.redhat.com/errata/RHSA-2017:3475\",\n \"https://access.redhat.com/errata/RHSA-2017:3476\",\n \"https://access.redhat.com/errata/RHSA-2017:3477\",\n \"https://lists.apache.org/thread.html/8409e41a8f7dd9ded37141c38df001be930115428c3d64f70bbdb8b4@%3Cdev.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\",\n \"https://www.nomachine.com/SU08O00185\"\n ],\n \"cvss\": \"7.5\",\n \"summary\": \"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.\"\n },\n \"CVE-2018-1312\": {\n \"verified\": false,\n \"references\": [\n \"http://www.openwall.com/lists/oss-security/2018/03/24/7\",\n \"http://www.securityfocus.com/bid/103524\",\n \"http://www.securitytracker.com/id/1040571\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://access.redhat.com/errata/RHSA-2019:1898\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html\",\n \"https://security.netapp.com/advisory/ntap-20180601-0004/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3627-1/\",\n \"https://usn.ubuntu.com/3627-2/\",\n \"https://usn.ubuntu.com/3937-2/\",\n \"https://www.debian.org/security/2018/dsa-4164\"\n ],\n \"cvss\": \"6.8\",\n \"summary\": \"In Apache httpd 2.2.0 to 2.4.29, when generating an HTTP Digest authentication challenge, the nonce sent to prevent reply attacks was not correctly generated using a pseudo-random seed. In a cluster of servers using a common Digest authentication configuration, HTTP requests could be replayed across servers by an attacker without detection.\"\n },\n \"CVE-2018-1333\": {\n \"verified\": false,\n \"references\": [\n \"http://www.securitytracker.com/id/1041402\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html#CVE-2018-1333\",\n \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E\",\n \"https://security.netapp.com/advisory/ntap-20180926-0007/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3783-1/\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33).\"\n },\n \"CVE-2017-3169\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3896\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\n \"http://www.securityfocus.com/bid/99134\",\n \"http://www.securitytracker.com/id/1038711\",\n \"https://access.redhat.com/errata/RHSA-2017:2478\",\n \"https://access.redhat.com/errata/RHSA-2017:2479\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://access.redhat.com/errata/RHSA-2017:3195\",\n \"https://access.redhat.com/errata/RHSA-2017:3475\",\n \"https://access.redhat.com/errata/RHSA-2017:3476\",\n \"https://access.redhat.com/errata/RHSA-2017:3477\",\n \"https://github.com/gottburgm/Exploits/tree/master/CVE-2017-3169\",\n \"https://lists.apache.org/thread.html/84bf7fcc5cad35d355f11839cbdd13cbc5ffc1d34675090bff0f96ae@%3Cdev.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\",\n \"https://www.nomachine.com/SU08O00185\"\n ],\n \"cvss\": \"7.5\",\n \"summary\": \"In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.\"\n },\n \"CVE-2019-0197\": {\n \"verified\": false,\n \"references\": [\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html\",\n \"http://www.openwall.com/lists/oss-security/2019/04/02/2\",\n \"http://www.securityfocus.com/bid/107665\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/e0b8f6e858b1c8ec2ce8e291a2c543d438915037c7af661ab6d33808@%3Cdev.httpd.apache.org%3E\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/\",\n \"https://security.netapp.com/advisory/ntap-20190617-0002/\",\n \"https://support.f5.com/csp/article/K44591505\"\n ],\n \"cvss\": \"4.9\",\n \"summary\": \"A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. Server that never enabled the h2 protocol or that only enabled it for https: and did not set \\\"H2Upgrade on\\\" are unaffected by this issue.\"\n },\n \"CVE-2019-0220\": {\n \"verified\": false,\n \"references\": [\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html\",\n \"http://www.openwall.com/lists/oss-security/2019/04/02/6\",\n \"http://www.securityfocus.com/bid/107670\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.debian.org/debian-lts-announce/2019/04/msg00008.html\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/\",\n \"https://seclists.org/bugtraq/2019/Apr/5\",\n \"https://security.netapp.com/advisory/ntap-20190625-0007/\",\n \"https://support.f5.com/csp/article/K44591505\",\n \"https://usn.ubuntu.com/3937-1/\",\n \"https://www.debian.org/security/2019/dsa-4422\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes ('/'), directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing will implicitly collapse them.\"\n },\n \"CVE-2019-0211\": {\n \"verified\": false,\n \"references\": [\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00051.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00061.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html\",\n \"http://packetstormsecurity.com/files/152386/Apache-2.4.38-Root-Privilege-Escalation.html\",\n \"http://packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-Updates.html\",\n \"http://packetstormsecurity.com/files/152441/CARPE-DIEM-Apache-2.4.x-Local-Privilege-Escalation.html\",\n \"http://www.apache.org/dist/httpd/CHANGES_2.4.39\",\n \"http://www.openwall.com/lists/oss-security/2019/04/02/3\",\n \"http://www.securityfocus.com/bid/107666\",\n \"https://access.redhat.com/errata/RHBA-2019:0959\",\n \"https://access.redhat.com/errata/RHSA-2019:0746\",\n \"https://access.redhat.com/errata/RHSA-2019:0980\",\n \"https://access.redhat.com/errata/RHSA-2019:1296\",\n \"https://access.redhat.com/errata/RHSA-2019:1297\",\n \"https://access.redhat.com/errata/RHSA-2019:1543\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/890507b85c30adf133216b299cc35cd8cd0346a885acfc671c04694e@%3Cdev.community.apache.org%3E\",\n \"https://lists.apache.org/thread.html/b1613d44ec364c87bb7ee8c5939949f9b061c05c06e0e90098ebf7aa@%3Cusers.httpd.apache.org%3E\",\n \"https://lists.apache.org/thread.html/b2bdb308dc015e771ba79c0586b2de6fb50caa98b109833f5d4daf28@%3Cdev.community.apache.org%3E\",\n \"https://lists.apache.org/thread.html/de881a130bc9cb2f3a9ff220784520556884fb8ea80e69400a45509e@%3Cdev.community.apache.org%3E\",\n \"https://lists.apache.org/thread.html/fd110f4ace2d8364c7d9190e1993cde92f79e4eb85576ed9285686ac@%3Ccvs.httpd.apache.org%3E\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ALIR5S3O7NRHEGFMIDMUSYQIZOE4TJJN/\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EZRMTEIGZKYFNGIDOTXN3GNEJTLVCYU7/\",\n \"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WETXNQWNQLWHV6XNW6YTO5UGDTIWAQGT/\",\n \"https://seclists.org/bugtraq/2019/Apr/16\",\n \"https://seclists.org/bugtraq/2019/Apr/5\",\n \"https://security.gentoo.org/glsa/201904-20\",\n \"https://security.netapp.com/advisory/ntap-20190423-0001/\",\n \"https://support.f5.com/csp/article/K32957101\",\n \"https://usn.ubuntu.com/3937-1/\",\n \"https://www.debian.org/security/2019/dsa-4422\",\n \"https://www.exploit-db.com/exploits/46676/\",\n \"https://www.synology.com/security/advisory/Synology_SA_19_14\"\n ],\n \"cvss\": \"7.2\",\n \"summary\": \"In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.\"\n },\n \"CVE-2017-15710\": {\n \"verified\": false,\n \"references\": [\n \"http://www.openwall.com/lists/oss-security/2018/03/24/8\",\n \"http://www.securityfocus.com/bid/103512\",\n \"http://www.securitytracker.com/id/1040569\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E\",\n \"https://lists.debian.org/debian-lts-announce/2018/05/msg00020.html\",\n \"https://security.netapp.com/advisory/ntap-20180601-0004/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3627-1/\",\n \"https://usn.ubuntu.com/3627-2/\",\n \"https://usn.ubuntu.com/3937-2/\",\n \"https://www.debian.org/security/2018/dsa-4164\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"In Apache httpd 2.0.23 to 2.0.65, 2.2.0 to 2.2.34, and 2.4.0 to 2.4.29, mod_authnz_ldap, if configured with AuthLDAPCharsetConfig, uses the Accept-Language header value to lookup the right charset encoding when verifying the user's credentials. If the header value is not present in the charset conversion table, a fallback mechanism is used to truncate it to a two characters value to allow a quick retry (for example, 'en-US' is truncated to 'en'). A header value of less than two characters forces an out of bound write of one NUL byte to a memory location that is not part of the string. In the worst case, quite unlikely, the process would crash which could be used as a Denial of Service attack. In the more likely case, this memory is already reserved for future use and the issue has no effect at all.\"\n },\n \"CVE-2018-1283\": {\n \"verified\": false,\n \"references\": [\n \"http://www.openwall.com/lists/oss-security/2018/03/24/4\",\n \"http://www.securityfocus.com/bid/103520\",\n \"http://www.securitytracker.com/id/1040568\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E\",\n \"https://security.netapp.com/advisory/ntap-20180601-0004/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3627-1/\",\n \"https://usn.ubuntu.com/3627-2/\",\n \"https://www.debian.org/security/2018/dsa-4164\"\n ],\n \"cvss\": \"3.5\",\n \"summary\": \"In Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a \\\"Session\\\" header. This comes from the \\\"HTTP_SESSION\\\" variable name used by mod_session to forward its data to CGIs, since the prefix \\\"HTTP_\\\" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.\"\n },\n \"CVE-2017-7668\": {\n \"verified\": false,\n \"references\": [\n \"http://www.debian.org/security/2017/dsa-3896\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html\",\n \"http://www.securityfocus.com/bid/99137\",\n \"http://www.securitytracker.com/id/1038711\",\n \"https://access.redhat.com/errata/RHSA-2017:2479\",\n \"https://access.redhat.com/errata/RHSA-2017:2483\",\n \"https://access.redhat.com/errata/RHSA-2017:3193\",\n \"https://access.redhat.com/errata/RHSA-2017:3194\",\n \"https://lists.apache.org/thread.html/55a068b6a5eec0b3198ae7d96a7cb412352d0ffa7716612c5af3745b@%3Cdev.httpd.apache.org%3E\",\n \"https://security.gentoo.org/glsa/201710-32\",\n \"https://security.netapp.com/advisory/ntap-20180601-0002/\",\n \"https://support.apple.com/HT208221\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03821en_us\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03908en_us\"\n ],\n \"cvss\": \"7.5\",\n \"summary\": \"The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.\"\n },\n \"CVE-2017-15715\": {\n \"verified\": false,\n \"references\": [\n \"http://www.openwall.com/lists/oss-security/2018/03/24/6\",\n \"http://www.securityfocus.com/bid/103525\",\n \"http://www.securitytracker.com/id/1040570\",\n \"https://access.redhat.com/errata/RHSA-2018:3558\",\n \"https://access.redhat.com/errata/RHSA-2019:0366\",\n \"https://access.redhat.com/errata/RHSA-2019:0367\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba@%3Ccvs.httpd.apache.org%3E\",\n \"https://security.netapp.com/advisory/ntap-20180601-0004/\",\n \"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03909en_us\",\n \"https://usn.ubuntu.com/3627-1/\",\n \"https://usn.ubuntu.com/3627-2/\",\n \"https://www.debian.org/security/2018/dsa-4164\"\n ],\n \"cvss\": \"6.8\",\n \"summary\": \"In Apache httpd 2.4.0 to 2.4.29, the expression specified in could match '$' to a newline character in a malicious filename, rather than matching only the end of the filename. This could be exploited in environments where uploads of some files are are externally blocked, but only by matching the trailing portion of the filename.\"\n },\n \"CVE-2018-17199\": {\n \"verified\": false,\n \"references\": [\n \"http://www.securityfocus.com/bid/106742\",\n \"https://httpd.apache.org/security/vulnerabilities_24.html\",\n \"https://lists.debian.org/debian-lts-announce/2019/01/msg00024.html\",\n \"https://seclists.org/bugtraq/2019/Apr/5\",\n \"https://security.gentoo.org/glsa/201903-21\",\n \"https://security.netapp.com/advisory/ntap-20190125-0001/\",\n \"https://usn.ubuntu.com/3937-1/\",\n \"https://www.debian.org/security/2019/dsa-4422\",\n \"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html\",\n \"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"In Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time before decoding the session. This causes session expiry time to be ignored for mod_session_cookie sessions since the expiry time is loaded when the session is decoded.\"\n }\n },\n \"timestamp\": \"2021-12-26T13:50:38.138557\",\n \"hostnames\": [\n \"cloud.sata.support.de\"\n ],\n \"org\": null,\n \"data\": \"HTTP/1.1 400 Bad Request\\r\\nDate: Sun, 26 Dec 2021 13:50:38 GMT\\r\\nServer: Apache/2.4.25 (Debian)\\r\\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\\r\\nCache-Control: no-store, no-cache, must-revalidate\\r\\nPragma: no-cache\\r\\nContent-Security-Policy: default-src 'self'; script-src 'self' 'nonce-Uzg3RlR0SGV4eWk2ZkVQTzRYVHVweUl5Y2x0MVFuRUF5WGlhSmlKa0Rvcz06SkxTY0llR3RsMmZ5UkNTbXF5T2RrRlp4SWc4Z0lVQm9peW5VVkdNSU4rND0='; style-src 'self' 'unsafe-inline'; frame-src *; img-src * data: blob:; font-src 'self' data:; media-src *; connect-src *; object-src 'none'; base-uri 'self';\\r\\nReferrer-Policy: no-referrer\\r\\nX-Content-Type-Options: nosniff\\r\\nX-Download-Options: noopen\\r\\nX-Frame-Options: SAMEORIGIN\\r\\nX-Permitted-Cross-Domain-Policies: none\\r\\nX-Robots-Tag: none\\r\\nX-XSS-Protection: 1; mode=block\\r\\nSet-Cookie: ocywvd3d4ksh=eva1s52oicv8tdeb7g0b7e66bc; path=/; HttpOnly\\r\\nSet-Cookie: oc_sessionPassphrase=turMN1jcd3qqiI4qFzrzqLVxkULQrAqmYaBNYHnPK0glR4ABkZKVi1TWtcxL9p%2Fp3XJi9UE35rkiewLJaoKAb5d%2B74HSEZZI4GpPVWWasb7X6YAeC5MncH8FVtfFNS7O; path=/; HttpOnly\\r\\nSet-Cookie: nc_sameSiteCookielax=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax\\r\\nSet-Cookie: nc_sameSiteCookiestrict=true; path=/; httponly;expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict\\r\\nConnection: close\\r\\nTransfer-Encoding: chunked\\r\\nContent-Type: text/html; charset=UTF-8\\r\\n\\r\\n\",\n \"port\": 80,\n \"transport\": \"tcp\",\n \"info\": \"(Debian)\",\n \"isp\": \"Hetzner Online GmbH\",\n \"cpe23\": [\n \"cpe:2.3:a:php:php\",\n \"cpe:2.3:a:apache:http_server:2.4.25\"\n ],\n \"cpe\": [\n \"cpe:/a:php:php\",\n \"cpe:/a:apache:http_server:2.4.25\"\n ],\n \"asn\": \"AS24940\",\n \"version\": \"2.4.25\",\n \"location\": {\n \"city\": \"Oberdorla\",\n \"region_code\": \"TH\",\n \"area_code\": null,\n \"longitude\": 10.42163,\n \"latitude\": 51.16585,\n \"country_code\": \"DE\",\n \"country_name\": \"Germany\"\n },\n \"ip\": 2297678709,\n \"domains\": [\n \"support.de\"\n ],\n \"ip_str\": \"136.243.203.117\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"78039f81a0245caa8ab71c98182f0eff0ce52aab\",\n \"options\": {},\n \"id\": \"bb74aed0-dd93-4d4b-a51e-dd3bb2e10e04\",\n \"module\": \"http\",\n \"ptr\": true\n },\n \"opts\": {}\n}" } } } } } }, "/shodan/custom": { "get": { "operationId": "filteredByQuery", "tags": ["Data Stream (Enterprise)"], "summary": "Filtered by Query", "description": "Only returns banner data for the specified query. This stream provides a filtered, bandwidth-saving view of the Banners stream in case you are only interested in banners matching a specific query. It generally follows the query syntax of the main search engine except that here the query is **case-sensitive**! The list of available keys can be found at [Search Filters.](https://www.shodan.io/search/filters) Put a \"-\" or \"!\" before the key to negate the filter terms.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "query", "in": "query", "schema": { "type": "number" }, "description": "Space-separated list of case-sensitive key:value filters or data query; example \"port:8080,443\", \"port:22 SSH-2.0-OpenSSH_6.4\", \"!country:VN\"", "example": "port:22 SSH-2.0-OpenSSH_6.4" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"product\": \"OpenSSH\",\n \"hash\": -1029792425,\n \"timestamp\": \"2021-12-27T18:21:53.120661\",\n \"hostnames\": [],\n \"org\": \"PEG TECH INC\",\n \"data\": \"SSH-2.0-OpenSSH_6.4\\\\r\\\\n\",\n \"port\": 22,\n \"transport\": \"tcp\",\n \"info\": \"protocol 2.0\",\n \"isp\": \"PEG TECH INC\",\n \"cpe23\": [\n \"cpe:2.3:a:openbsd:openssh:6.4\\\\r\\\\n\"\n ],\n \"cpe\": [\n \"cpe:/a:openbsd:openssh:6.4\\\\r\\\\n\"\n ],\n \"asn\": \"AS54600\",\n \"version\": \"6.4\\\\r\\\\n\",\n \"location\": {\n \"city\": \"San Jose\",\n \"region_code\": \"CA\",\n \"area_code\": null,\n \"longitude\": -121.89496,\n \"latitude\": 37.33939,\n \"country_code\": \"US\",\n \"country_name\": \"United States\"\n },\n \"ip\": 1804948851,\n \"domains\": [],\n \"ip_str\": \"107.149.85.115\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"ada8582d54117e5eb7c72186882e76f0854a54ae\",\n \"options\": {},\n \"id\": \"37f17a39-b456-4dbf-85ea-6dfd2d3f362f\",\n \"module\": \"auto\",\n \"ptr\": true\n },\n \"opts\": {\n \"raw\": \"5353482d322e302d4f70656e5353485f362e340d0a\"\n }\n}\n{\n \"product\": \"OpenSSH\",\n \"hash\": -1400530513,\n \"vulns\": {\n \"CVE-2014-2532\": {\n \"verified\": false,\n \"references\": [\n \"http://advisories.mageia.org/MGASA-2014-0143.html\",\n \"http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc\",\n \"http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html\",\n \"http://marc.info/?l=bugtraq&m=141576985122836&w=2\",\n \"http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2\",\n \"http://rhn.redhat.com/errata/RHSA-2014-1552.html\",\n \"http://secunia.com/advisories/59855\",\n \"http://www.debian.org/security/2014/dsa-2894\",\n \"http://www.mandriva.com/security/advisories?name=MDVSA-2014:068\",\n \"http://www.mandriva.com/security/advisories?name=MDVSA-2015:095\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html\",\n \"http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\",\n \"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html\",\n \"http://www.securityfocus.com/bid/66355\",\n \"http://www.securitytracker.com/id/1029925\",\n \"http://www.ubuntu.com/usn/USN-2155-1\",\n \"https://exchange.xforce.ibmcloud.com/vulnerabilities/91986\",\n \"https://support.apple.com/HT205267\"\n ],\n \"cvss\": 5.8,\n \"summary\": \"sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.\"\n },\n \"CVE-2018-15919\": {\n \"verified\": false,\n \"references\": [\n \"http://seclists.org/oss-sec/2018/q3/180\",\n \"http://www.securityfocus.com/bid/105163\",\n \"https://security.netapp.com/advisory/ntap-20181221-0001/\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or \\\"oracle\\\") as a vulnerability.'\"\n },\n \"CVE-2017-15906\": {\n \"verified\": false,\n \"references\": [\n \"http://www.securityfocus.com/bid/101552\",\n \"https://access.redhat.com/errata/RHSA-2018:0980\",\n \"https://github.com/openbsd/src/commit/a6981567e8e215acc1ef690c8dbb30f2d9b00a19\",\n \"https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html\",\n \"https://security.gentoo.org/glsa/201801-05\",\n \"https://security.netapp.com/advisory/ntap-20180423-0004/\",\n \"https://www.openssh.com/txt/release-7.6\"\n ],\n \"cvss\": 5,\n \"summary\": \"The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.\"\n },\n \"CVE-2014-1692\": {\n \"verified\": false,\n \"references\": [\n \"http://marc.info/?l=bugtraq&m=141576985122836&w=2\",\n \"http://marc.info/?l=bugtraq&m=144050155601375&w=2\",\n \"http://openwall.com/lists/oss-security/2014/01/29/10\",\n \"http://openwall.com/lists/oss-security/2014/01/29/2\",\n \"http://secunia.com/advisories/60184\",\n \"http://www-01.ibm.com/support/docview.wss?uid=isg3T1020637\",\n \"http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/Attic/schnorr.c.diff?r1=1.9;r2=1.10;f=h\",\n \"http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/schnorr.c#rev1.10\",\n \"http://www.securityfocus.com/bid/65230\",\n \"https://exchange.xforce.ibmcloud.com/vulnerabilities/90819\"\n ],\n \"cvss\": 7.5,\n \"summary\": \"The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via vectors that trigger an error condition.\"\n },\n \"CVE-2014-2653\": {\n \"verified\": false,\n \"references\": [\n \"http://advisories.mageia.org/MGASA-2014-0166.html\",\n \"http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html\",\n \"http://marc.info/?l=bugtraq&m=141576985122836&w=2\",\n \"http://openwall.com/lists/oss-security/2014/03/26/7\",\n \"http://rhn.redhat.com/errata/RHSA-2014-1552.html\",\n \"http://rhn.redhat.com/errata/RHSA-2015-0425.html\",\n \"http://secunia.com/advisories/59855\",\n \"http://www.debian.org/security/2014/dsa-2894\",\n \"http://www.mandriva.com/security/advisories?name=MDVSA-2014:068\",\n \"http://www.mandriva.com/security/advisories?name=MDVSA-2015:095\",\n \"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html\",\n \"http://www.securityfocus.com/bid/66459\",\n \"http://www.ubuntu.com/usn/USN-2164-1\",\n \"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742513\"\n ],\n \"cvss\": 5.8,\n \"summary\": \"The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.\"\n },\n \"CVE-2016-10708\": {\n \"verified\": false,\n \"references\": [\n \"http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html\",\n \"http://www.securityfocus.com/bid/102780\",\n \"https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737\",\n \"https://kc.mcafee.com/corporate/index?page=content&id=SB10284\",\n \"https://lists.debian.org/debian-lts-announce/2018/01/msg00031.html\",\n \"https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html\",\n \"https://security.netapp.com/advisory/ntap-20180423-0003/\",\n \"https://usn.ubuntu.com/3809-1/\",\n \"https://www.openssh.com/releasenotes.html\"\n ],\n \"cvss\": \"5.0\",\n \"summary\": \"sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.\"\n },\n \"CVE-2016-0777\": {\n \"verified\": false,\n \"references\": [\n \"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734\",\n \"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html\",\n \"http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html\",\n \"http://seclists.org/fulldisclosure/2016/Jan/44\",\n \"http://www.debian.org/security/2016/dsa-3446\",\n \"http://www.openssh.com/txt/release-7.1p2\",\n \"http://www.openwall.com/lists/oss-security/2016/01/14/7\",\n \"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html\",\n \"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html\",\n \"http://www.securityfocus.com/archive/1/537295/100/0/threaded\",\n \"http://www.securityfocus.com/bid/80695\",\n \"http://www.securitytracker.com/id/1034671\",\n \"http://www.ubuntu.com/usn/USN-2869-1\",\n \"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/\",\n \"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/\",\n \"https://bto.bluecoat.com/security-advisory/sa109\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722\",\n \"https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc\",\n \"https://security.gentoo.org/glsa/201601-01\",\n \"https://support.apple.com/HT206167\"\n ],\n \"cvss\": \"4.0\",\n \"summary\": \"The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.\"\n },\n \"CVE-2016-0778\": {\n \"verified\": false,\n \"references\": [\n \"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734\",\n \"http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html\",\n \"http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html\",\n \"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html\",\n \"http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html\",\n \"http://seclists.org/fulldisclosure/2016/Jan/44\",\n \"http://www.debian.org/security/2016/dsa-3446\",\n \"http://www.openssh.com/txt/release-7.1p2\",\n \"http://www.openwall.com/lists/oss-security/2016/01/14/7\",\n \"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html\",\n \"http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html\",\n \"http://www.securityfocus.com/archive/1/537295/100/0/threaded\",\n \"http://www.securityfocus.com/bid/80698\",\n \"http://www.securitytracker.com/id/1034671\",\n \"http://www.ubuntu.com/usn/USN-2869-1\",\n \"https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/\",\n \"https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/\",\n \"https://bto.bluecoat.com/security-advisory/sa109\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05385680\",\n \"https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722\",\n \"https://security.gentoo.org/glsa/201601-01\",\n \"https://support.apple.com/HT206167\"\n ],\n \"cvss\": \"4.6\",\n \"summary\": \"The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.\"\n }\n },\n \"timestamp\": \"2021-12-27T18:21:39.929427\",\n \"hostnames\": [],\n \"ssh\": {\n \"hassh\": \"cca34b641961a75a15b91d1f1a13a3fb\",\n \"fingerprint\": \"03:b2:2e:ab:88:bc:48:67:d0:54:3e:4d:f4:bb:5c:d1\",\n \"mac\": \"hmac-sha2-256\",\n \"cipher\": \"aes128-ctr\",\n \"key\": \"AAAAB3NzaC1yc2EAAAADAQABAAABAQDFwCWAOWfK2UouwmiJ1pm4iXTNwvqhEPHtnR1Pc6wI5SiE\\nEhGI/ckuGstLUTIBLbgO6jz+B94MKt+SQqMzamaZd/khexavl2bzYq4YtF79o42V1/im7qw/lBXq\\ncUuyTYWakhxQUlOyz75Kw8G87O5Fl0Mgwp2bN9aRAKJpsjFCX3n/d8p6NKNZRdmvl+aimjhDAeKF\\nopxIRHlfSUruY9XHVIqI9XxE1IH3c7Ean7QkRI4hKTUC6BCLqGOW2lPtetFsbaFICYBugxSKGJkd\\nm/7DAakoYm9bTZsGexUFRz9P+h7pTXSMKmW3H2/ioqcarmvs2e+6QeTBOV9VTq2baOop\\n\",\n \"kex\": {\n \"languages\": [\n \"\"\n ],\n \"server_host_key_algorithms\": [\n \"ssh-rsa\",\n \"ecdsa-sha2-nistp256\"\n ],\n \"encryption_algorithms\": [\n \"aes128-ctr\",\n \"aes192-ctr\",\n \"aes256-ctr\",\n \"arcfour256\",\n \"arcfour128\",\n \"aes128-gcm@openssh.com\",\n \"aes256-gcm@openssh.com\",\n \"aes128-cbc\",\n \"3des-cbc\",\n \"blowfish-cbc\",\n \"cast128-cbc\",\n \"aes192-cbc\",\n \"aes256-cbc\",\n \"arcfour\",\n \"rijndael-cbc@lysator.liu.se\"\n ],\n \"kex_follows\": false,\n \"unused\": 0,\n \"kex_algorithms\": [\n \"ecdh-sha2-nistp256\",\n \"ecdh-sha2-nistp384\",\n \"ecdh-sha2-nistp521\",\n \"diffie-hellman-group-exchange-sha256\",\n \"diffie-hellman-group-exchange-sha1\",\n \"diffie-hellman-group14-sha1\",\n \"diffie-hellman-group1-sha1\"\n ],\n \"compression_algorithms\": [\n \"none\",\n \"zlib@openssh.com\"\n ],\n \"mac_algorithms\": [\n \"hmac-md5-etm@openssh.com\",\n \"hmac-sha1-etm@openssh.com\",\n \"umac-64-etm@openssh.com\",\n \"umac-128-etm@openssh.com\",\n \"hmac-sha2-256-etm@openssh.com\",\n \"hmac-sha2-512-etm@openssh.com\",\n \"hmac-ripemd160-etm@openssh.com\",\n \"hmac-sha1-96-etm@openssh.com\",\n \"hmac-md5-96-etm@openssh.com\",\n \"hmac-md5\",\n \"hmac-sha1\",\n \"umac-64@openssh.com\",\n \"umac-128@openssh.com\",\n \"hmac-sha2-256\",\n \"hmac-sha2-512\",\n \"hmac-ripemd160\",\n \"hmac-ripemd160@openssh.com\",\n \"hmac-sha1-96\",\n \"hmac-md5-96\"\n ]\n },\n \"type\": \"ssh-rsa\"\n },\n \"org\": \"Henan Telcom Union Technology Co., LTD\",\n \"data\": \"SSH-2.0-OpenSSH_6.4\\nKey type: ssh-rsa\\nKey: AAAAB3NzaC1yc2EAAAADAQABAAABAQDFwCWAOWfK2UouwmiJ1pm4iXTNwvqhEPHtnR1Pc6wI5SiE\\nEhGI/ckuGstLUTIBLbgO6jz+B94MKt+SQqMzamaZd/khexavl2bzYq4YtF79o42V1/im7qw/lBXq\\ncUuyTYWakhxQUlOyz75Kw8G87O5Fl0Mgwp2bN9aRAKJpsjFCX3n/d8p6NKNZRdmvl+aimjhDAeKF\\nopxIRHlfSUruY9XHVIqI9XxE1IH3c7Ean7QkRI4hKTUC6BCLqGOW2lPtetFsbaFICYBugxSKGJkd\\nm/7DAakoYm9bTZsGexUFRz9P+h7pTXSMKmW3H2/ioqcarmvs2e+6QeTBOV9VTq2baOop\\nFingerprint: 03:b2:2e:ab:88:bc:48:67:d0:54:3e:4d:f4:bb:5c:d1\\n\\nKex Algorithms:\\n\\tecdh-sha2-nistp256\\n\\tecdh-sha2-nistp384\\n\\tecdh-sha2-nistp521\\n\\tdiffie-hellman-group-exchange-sha256\\n\\tdiffie-hellman-group-exchange-sha1\\n\\tdiffie-hellman-group14-sha1\\n\\tdiffie-hellman-group1-sha1\\n\\nServer Host Key Algorithms:\\n\\tssh-rsa\\n\\tecdsa-sha2-nistp256\\n\\nEncryption Algorithms:\\n\\taes128-ctr\\n\\taes192-ctr\\n\\taes256-ctr\\n\\tarcfour256\\n\\tarcfour128\\n\\taes128-gcm@openssh.com\\n\\taes256-gcm@openssh.com\\n\\taes128-cbc\\n\\t3des-cbc\\n\\tblowfish-cbc\\n\\tcast128-cbc\\n\\taes192-cbc\\n\\taes256-cbc\\n\\tarcfour\\n\\trijndael-cbc@lysator.liu.se\\n\\nMAC Algorithms:\\n\\thmac-md5-etm@openssh.com\\n\\thmac-sha1-etm@openssh.com\\n\\tumac-64-etm@openssh.com\\n\\tumac-128-etm@openssh.com\\n\\thmac-sha2-256-etm@openssh.com\\n\\thmac-sha2-512-etm@openssh.com\\n\\thmac-ripemd160-etm@openssh.com\\n\\thmac-sha1-96-etm@openssh.com\\n\\thmac-md5-96-etm@openssh.com\\n\\thmac-md5\\n\\thmac-sha1\\n\\tumac-64@openssh.com\\n\\tumac-128@openssh.com\\n\\thmac-sha2-256\\n\\thmac-sha2-512\\n\\thmac-ripemd160\\n\\thmac-ripemd160@openssh.com\\n\\thmac-sha1-96\\n\\thmac-md5-96\\n\\nCompression Algorithms:\\n\\tnone\\n\\tzlib@openssh.com\\n\\n\",\n \"port\": 22,\n \"cpe23\": [\n \"cpe:2.3:a:openbsd:openssh:6.4\"\n ],\n \"info\": \"protocol 2.0\",\n \"isp\": \"Zhengzhou Fastidc Technology Co.,Ltd.\",\n \"transport\": \"tcp\",\n \"cpe\": [\n \"cpe:/a:openbsd:openssh:6.4\"\n ],\n \"asn\": \"AS56005\",\n \"version\": \"6.4\",\n \"location\": {\n \"city\": \"Tianjin\",\n \"region_code\": \"TJ\",\n \"area_code\": null,\n \"longitude\": 117.17667,\n \"latitude\": 39.14222,\n \"country_code\": \"CN\",\n \"country_name\": \"China\"\n },\n \"ip\": 707994107,\n \"domains\": [],\n \"ip_str\": \"42.51.33.251\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"49217c0cdcbcebaf23c2979ae16d4eba64180b1f\",\n \"options\": {},\n \"id\": \"202965c3-78b2-4938-936f-6899d2cec8e4\",\n \"module\": \"ssh\",\n \"ptr\": true\n },\n \"opts\": {}\n}" } } } } } }, "/shodan/alert": { "get": { "operationId": "getNetworkAlerts", "tags": ["Network Alerts"], "summary": "All Network Alerts", "description": "Subscribe to banners discovered on all IP ranges described in the network alerts. The network alerts are renewed periodically every 1 hour.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": -553166942,\n \"timestamp\": \"2021-01-28T05:39:12.152185\",\n \"hostnames\": [\"dns.google\"],\n \"org\": \"Google\",\n \"data\": \"\\nRecursion: enabled\",\n \"port\": 53,\n \"transport\": \"udp\",\n \"isp\": \"Google\",\n \"asn\": \"AS15169\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": -97.822,\n \"country_code\": \"US\",\n \"latitude\": 37.751,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": null,\n },\n \"dns\": {\n \"resolver_hostname\": null,\n \"recursive\": true,\n \"resolver_id\": null,\n \"software\": null,\n },\n \"ip\": 134744072,\n \"domains\": [\"dns.google\"],\n \"ip_str\": \"8.8.8.8\",\n \"_id\": \"23c49fa8-0c87-4b67-91b7-ab50d493ed7f\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"308515b6113c0645034fb8122d0ff0d5194e7e72\",\n \"options\": {},\n \"id\": \"0e055a10-9a16-4a8b-ae00-54ae10dd7f16\",\n \"module\": \"dns-udp\",\n \"ptr\": true,\n \"alert\": {\n \"id\": \"NKXOVKN5W4SPTOF2\",\n \"name\": \"scan 8.8.8.8\",\n },\n },\n \"opts\": {\"raw\": \"34ef818200010000000000000776657273696f6e0462696e640000100003\"},\n}\n{\n \"hash\": 1977582756,\n \"timestamp\": \"2021-01-28T05:39:16.231331\",\n \"hostnames\": [\"one.one.one.one\"],\n \"org\": \"Mountain View Communications\",\n \"data\": \"\\nRecursion: enabled\\nResolver ID: VIE\",\n \"port\": 53,\n \"transport\": \"udp\",\n \"isp\": \"Mountain View Communications\",\n \"asn\": \"AS13335\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": 143.2104,\n \"country_code\": \"AU\",\n \"latitude\": -33.494,\n \"country_name\": \"Australia\",\n \"area_code\": null,\n \"dma_code\": null,\n },\n \"dns\": {\n \"resolver_hostname\": null,\n \"recursive\": true,\n \"resolver_id\": \"VIE\",\n \"software\": null,\n },\n \"ip\": 16843009,\n \"domains\": [\"one.one\"],\n \"ip_str\": \"1.1.1.1\",\n \"_id\": \"08d364c6-fb2a-4a88-9369-e831b53509d1\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"3901cdc9c9a3b8554f02333e2779a8659643ad15\",\n \"options\": {},\n \"id\": \"52fc8643-5a7d-45d8-9c2e-8b79bd9f6f27\",\n \"module\": \"dns-udp\",\n \"ptr\": true,\n \"alert\": {\n \"id\": \"TOZN4UUSGPMOYEAI\",\n \"name\": \"one one one one\",\n },\n },\n \"opts\": {\"raw\": \"34ef818500010000000000000776657273696f6e0462696e640000100003\"},\n}" } } } } } }, "/shodan/alert/{id}": { "get": { "operationId": "getNetworkAlertsByID", "tags": ["Network Alerts"], "summary": "Filtered by Alert ID", "description": "Subscribe to banners discovered on all IP ranges described in the network alerts. The network alerts are renewed periodically every 1 hour.", "parameters": [ { "name": "key", "required": true, "in": "query", "schema": { "type": "string" }, "description": "To use the API you need to have an API key, which you can get for free by creating a Shodan account.", "example": "YOUR_API_KEY" }, { "name": "id", "in": "path", "schema": { "type": "string" }, "required": true, "description": "The unique ID of the network alert; example \"OYPRB8IR9Z35AZPR\"", "example": "OYPRB8IR9Z35AZPR" }, { "name": "debug", "required": false, "in": "query", "schema": { "type": "int" }, "description": "Set to '1' to receive a new 'debug' event that shows how many banners have been discarded. Sample: {\"event\": \"debug\", \"discarded\": 41}\\n", "example": "1" } ], "responses": { "200": { "description": "OK", "headers": { "Content-Type": { "schema": { "type": "string", "example": "application/json" } } }, "content": { "text/plain": { "schema": { "type": "string" }, "example": "{\n \"hash\": 1592421393,\n \"timestamp\": \"2021-01-28T05:45:56.563794\",\n \"hostnames\": [\n \"one.one.one.one\"\n ],\n \"org\": \"Mountain View Communications\",\n \"data\": \"\\nRecursion: enabled\\nResolver ID: AMS\",\n \"port\": 53,\n \"transport\": \"udp\",\n \"isp\": \"Mountain View Communications\",\n \"asn\": \"AS13335\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": 143.2104,\n \"country_code\": \"AU\",\n \"latitude\": -33.494,\n \"country_name\": \"Australia\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"dns\": {\n \"resolver_hostname\": null,\n \"recursive\": true,\n \"resolver_id\": \"AMS\",\n \"software\": null\n },\n \"ip\": 16843009,\n \"domains\": [\n \"one.one\"\n ],\n \"ip_str\": \"1.1.1.1\",\n \"_id\": \"8e231550-6f50-440d-b5da-46cc49b2243a\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"78039f81a0245caa8ab71c98182f0eff0ce52aab\",\n \"options\": {},\n \"id\": \"58ad7d05-7afd-4769-aabb-3045c498f770\",\n \"module\": \"dns-udp\",\n \"ptr\": true,\n \"alert\": {\n \"id\": \"TOZN4UUSGPMOYEAI\",\n \"name\": \"one one one one\",\n },\n },\n \"opts\": {\n \"raw\": \"34ef818500010000000000000776657273696f6e0462696e640000100003\"\n }\n}\n{\n \"hash\": -553166942,\n \"timestamp\": \"2021-01-28T05:46:06.018756\",\n \"hostnames\": [\n \"dns.google\"\n ],\n \"org\": \"Google\",\n \"data\": \"\\nRecursion: enabled\",\n \"port\": 53,\n \"transport\": \"udp\",\n \"isp\": \"Google\",\n \"asn\": \"AS15169\",\n \"location\": {\n \"country_code3\": null,\n \"city\": null,\n \"region_code\": null,\n \"postal_code\": null,\n \"longitude\": -97.822,\n \"country_code\": \"US\",\n \"latitude\": 37.751,\n \"country_name\": \"United States\",\n \"area_code\": null,\n \"dma_code\": null\n },\n \"dns\": {\n \"resolver_hostname\": null,\n \"recursive\": true,\n \"resolver_id\": null,\n \"software\": null\n },\n \"ip\": 134744072,\n \"domains\": [\n \"dns.google\"\n ],\n \"ip_str\": \"8.8.8.8\",\n \"_id\": \"e26af2fa-dbcc-4a36-9631-33a46e505b91\",\n \"os\": null,\n \"_shodan\": {\n \"crawler\": \"44ad81631af4ebeda49a419b8565d5fcd7ac4d2e\",\n \"options\": {},\n \"id\": \"2db17089-b705-459e-9a44-f53ca3b42df1\",\n \"module\": \"dns-udp\",\n \"ptr\": true,\n \"alert\": {\n \"id\": \"NKXOVKN5W4SPTOF2\",\n \"name\": \"scan 8.8.8.8\",\n },\n },\n \"opts\": {\n \"raw\": \"34ef818200010000000000000776657273696f6e0462696e640000100003\"\n }\n}" } } } } } } } } ``` ---