Banner Analysis Report


Overview

This report summarizes Shodan banner data collected on 2025-08-27, highlighting key attributes of exposed services, protocols, and device configurations. The insights support trend analysis and risk assessment, noting that some banner details may be optional or vary by device.

Summary & Key Insights
File Summary
  • File: /app/data/2025-08-27.json.zst
  • Size: 129.44 GB
  • Uncompressed Size: 996.96 GB
Key Insights
  • Total scan coverage: 130,649,571 banners collected across all services
  • Service diversity: 33,004 unique ports observed in the dataset
  • Port span: services range from 1 - 65535
  • Most active port: 80 with 8,470,781 banners ( 6.48% of total)
  • Leading protocol: tcp appears most frequently in scanned banners
  • Common platform: nginx was the most observed product
  • Most exposed CVE: CVE-2023-51767 seen 1,031,269 times (CVSS 7.0, EPSS 0.00012)
  • Top origin country: United States with 67,140,281 banners detected
  • Leading organization: Google LLC accounted for 44,455,409 banners
Total Banners
130,649,571
Unique Ports
33,004
Port Range
1 - 65535
Service Exposure Overview
Top 20 Ports

Number of banners observed per port.View detailed port analysis

Top 20 Organizations / ISPs

Based on hosting information extracted from banners.

Technology and Service Overview

A quick glance at the most common products and protocols detected in the dataset.

Top 2 Protocols

Most frequently observed protocols by banner volume.

Top 20 Products

Detected technologies based on product metadata.

Exposure by Geography
Country Distribution

Based on location data in service banners.

Vulnerability Exposure Overview

Across these 100 CVEs, 67,743,694 banners were affected. 18 vulnerabilities are critical.

Top 100 Vulnerabilities
CVE ID Count EPSS CVSS
CVE-2023-51767 1,031,269 0.00012 7.0
CVE-2008-3844 1,031,269 0.02091 9.3
CVE-2007-2768 1,031,269 0.00665 4.3
CVE-2023-48795 972,965 0.74635 5.9
CVE-2023-51385 964,810 0.09522 6.5
CVE-2023-38408 963,197 0.73008 9.8
CVE-2021-36368 953,974 0.00283 3.7
CVE-2013-0941 951,559 0.00073 2.1
CVE-2013-4365 951,536 0.08245 7.5
CVE-2013-2765 951,536 0.04332 5.0
CVE-2013-0942 951,536 0.00285 4.3
CVE-2012-4001 951,536 0.00245 5.0
CVE-2012-4360 951,536 0.00389 4.3
CVE-2012-3526 951,536 0.01348 5.0
CVE-2011-2688 951,536 0.0197 7.5
CVE-2011-1176 951,536 0.00859 4.3
CVE-2009-2299 951,536 0.00806 5.0
CVE-2009-0796 951,536 0.27111 2.6
CVE-2007-4723 951,536 0.00186 7.5
CVE-2016-20012 950,683 0.25266 5.3
CVE-2025-26465 949,385 0.52936 6.8
CVE-2025-49812 945,839 0.001 7.4
CVE-2025-32728 942,516 0.00033 4.3
CVE-2021-41617 885,025 0.01864 7.0
CVE-2020-15778 878,076 0.67525 7.4
CVE-2024-43394 835,670 0.00111 7.5
CVE-2024-47252 835,670 0.001 7.5
CVE-2024-42516 835,670 0.00432 7.5
CVE-2024-43204 835,670 0.00277 7.5
CVE-2020-14145 833,498 0.02064 5.9
CVE-2024-40898 814,384 0.00355 7.5
CVE-2023-38709 791,711 0.05161 7.3
CVE-2023-44487 783,160 0.94414 7.5
CVE-2021-3618 734,018 0.00384 7.4
CVE-2023-31122 719,702 0.00219 7.5
CVE-2019-6109 712,146 0.06895 6.8
CVE-2019-6111 712,146 0.66827 5.9
CVE-2019-6110 712,144 0.5311 6.8
CVE-2018-20685 712,144 0.03249 5.3
CVE-2024-38477 700,065 0.00435 7.5
CVE-2024-39573 700,065 0.01225 7.5
CVE-2024-38472 700,065 0.89465 7.5
CVE-2024-38473 700,065 0.85806 8.1
CVE-2024-38474 700,065 0.00498 9.8
CVE-2024-38475 700,065 0.93787 9.1
CVE-2024-38476 700,065 0.01917 9.8
CVE-2018-15473 686,526 0.92648 5.3
CVE-2006-20001 686,074 0.00696 7.5
CVE-2022-37436 686,074 0.00492 5.3
CVE-2025-53020 685,416 0.00546 7.5
CVE-2017-15906 683,639 0.03039 5.3
CVE-2024-24795 681,542 0.01914 6.3
CVE-2022-28330 672,010 0.00243 5.3
CVE-2022-28614 672,010 0.00264 5.3
CVE-2022-28615 672,010 0.00542 9.1
CVE-2022-29404 672,010 0.01103 7.5
CVE-2022-30556 672,010 0.00216 7.5
CVE-2022-31813 672,010 0.0007 9.8
CVE-2022-22719 664,655 0.27791 7.5
CVE-2022-22720 664,655 0.29926 9.8
CVE-2022-22721 664,655 0.24863 9.1
CVE-2021-23017 646,873 0.79436 7.7
CVE-2025-49630 637,306 0.00416 7.5
CVE-2018-15919 625,547 0.00718 5.3
CVE-2025-23048 581,585 0.00084 9.1
CVE-2023-25690 578,229 0.69023 9.8
CVE-2022-36760 575,905 0.00245 9.0
CVE-2022-26377 561,841 0.31086 7.5
CVE-2022-23943 554,486 0.64631 9.8
CVE-2021-44790 545,384 0.87391 9.8
CVE-2021-34798 537,959 0.10967 7.5
CVE-2021-39275 537,959 0.44803 9.8
CVE-2021-40438 537,959 0.94443 9.0
CVE-2021-32791 532,928 0.0026 5.9
CVE-2021-32792 532,928 0.00164 3.1
CVE-2021-32785 532,928 0.00181 5.3
CVE-2021-32786 532,928 0.00117 4.7
CVE-2024-27316 531,288 0.87414 7.5
CVE-2023-45802 459,279 0.02131 5.9
CVE-2024-3566 424,421 0.0303 9.8
CVE-2013-2220 424,421 0.02028 7.5
CVE-2007-3205 424,421 0.02081 5.0
CVE-2020-35452 422,283 0.11715 7.3
CVE-2021-26690 422,283 0.76357 7.5
CVE-2021-26691 422,283 0.49123 9.8
CVE-2020-13938 422,282 0.00511 5.5
CVE-2019-17567 419,962 0.05655 5.3
CVE-2020-1927 409,308 0.12344 6.1
CVE-2020-1934 409,308 0.39961 5.3
CVE-2018-1301 359,652 0.05204 5.9
CVE-2018-1302 359,652 0.12063 5.9
CVE-2018-1303 359,652 0.18546 7.5
CVE-2019-10092 328,978 0.84912 6.1
CVE-2019-10098 328,970 0.85804 6.1
CVE-2021-44224 328,968 0.06248 8.2
CVE-2023-27522 328,746 0.0072 7.5
CVE-2022-4900 322,278 0.00099 6.2
CVE-2019-0220 320,668 0.19268 5.3
CVE-2019-0217 320,668 0.32738 7.5
CVE-2024-25117 318,962 0.00254 6.8
Exposure Risk Summary (EPSS > 0.5)
CVE ID Count EPSS CVSS
CVE-2024-27198 22 0.9458 9.8
CVE-2023-42793 20 0.9458 9.8
CVE-2024-27199 22 0.9448 7.3
CVE-2018-1000861 2,909 0.9447 9.8
CVE-2018-7600 219 0.9447 9.8
CVE-2022-22965 3 0.9446 9.8
CVE-2020-1472 64 0.9445 5.5
CVE-2021-40438 537,959 0.9444 9.0
CVE-2024-23897 4,260 0.9444 9.8
CVE-2023-46604 3 0.9444 10.0
CVE-2023-32315 147 0.9443 8.6
CVE-2021-42013 430 0.9443 9.8
CVE-2017-1000353 29 0.9442 9.8
CVE-2019-6340 23 0.9442 8.1
CVE-2023-44487 783,160 0.9441 7.5
CVE-2018-2628 21 0.9441 9.8
CVE-2021-39144 1 0.9441 8.5
CVE-2022-24706 1,550 0.9439 9.8
CVE-2020-11651 8 0.9439 9.8
CVE-2024-4577 32,793 0.9438 9.8
CVE-2022-0543 59 0.9438 10.0
CVE-2017-7269 8,791 0.9437 9.8
CVE-2021-41773 352 0.9437 7.5
CVE-2021-44228 3 0.9436 10.0
CVE-2016-10033 1,592 0.9435 9.8
CVE-2021-1675 92 0.9435 7.8
CVE-2020-0688 48 0.9435 8.8
CVE-2021-39226 1,305 0.9434 9.8
CVE-2022-24112 70 0.9434 9.8
CVE-2021-45046 2 0.9434 9.0
CVE-2016-3088 3 0.9434 9.8
CVE-2018-2894 21 0.9431 9.8
CVE-2023-34362 1 0.9431 9.8
CVE-2017-5753 507 0.943 5.6
CVE-2024-23917 21 0.943 9.8
CVE-2012-1823 30,959 0.9429 9.8
CVE-2021-40444 92 0.9429 8.8
CVE-2014-3704 25 0.9427 7.5
CVE-2021-34527 92 0.9426 8.8
CVE-2013-2251 15 0.9423 9.8
CVE-2020-11652 8 0.942 6.5
CVE-2018-7602 135 0.9419 9.8
CVE-2017-12635 818 0.9418 9.8
CVE-2016-5195 7 0.9418 7.0
CVE-2017-15715 249,483 0.9415 8.1
CVE-2008-4250 133 0.9413 10.0
CVE-2019-18394 229 0.9411 9.8
CVE-2023-20198 471 0.9409 10.0
CVE-2012-2122 395 0.9407 5.1
CVE-2014-6332 16 0.9407 8.8
CVE-2019-11043 19,802 0.9406 8.7
CVE-2025-24813 95 0.9406 9.8
CVE-2024-21683 1 0.9405 8.8
CVE-2020-7247 6 0.9404 9.8
CVE-2021-25646 7 0.9403 8.8
CVE-2021-25281 1 0.9401 9.8
CVE-2016-8735 93 0.94 9.8
CVE-2018-2893 21 0.9399 9.8
CVE-2023-4863 2 0.9399 8.8
CVE-2014-3566 23,442 0.9397 3.4
CVE-2020-11710 45 0.9396 9.8
CVE-2015-3306 1,427 0.9394 10.0
CVE-2018-19518 30,754 0.9391 7.5
CVE-2015-4000 30,952 0.9391 3.7
CVE-2019-8943 3,020 0.9389 6.5
CVE-2017-9798 310,950 0.9388 7.5
CVE-2019-10149 18,572 0.9387 9.0
CVE-2010-1871 1 0.9385 8.8
CVE-2021-34429 434 0.938 5.3
CVE-2024-38475 700,065 0.9379 9.1
CVE-2022-40127 207 0.9375 8.8
CVE-2020-26258 1 0.9368 6.3
CVE-2016-3427 11 0.9363 9.8
CVE-2017-15944 75 0.9361 9.8
CVE-2013-4547 4,499 0.936 7.5
CVE-2020-26217 3 0.9357 8.0
CVE-2021-21389 1 0.9354 8.1
CVE-2016-10045 1,592 0.9351 9.8
CVE-2018-14847 1,430 0.9351 9.1
CVE-2021-28164 103 0.9348 5.3
CVE-2023-29552 1,069 0.9345 7.5
CVE-2023-27372 6 0.9343 9.8
CVE-2014-6321 16 0.934 10.0
CVE-2017-12636 818 0.9336 7.2
CVE-2022-30190 92 0.9332 7.8
CVE-2018-1999002 40 0.9326 7.5
CVE-2020-9484 58 0.9325 7.0
CVE-2021-36749 7 0.9321 6.5
CVE-2020-17518 40 0.9318 7.5
CVE-2015-0313 1 0.9317 9.8
CVE-2019-20933 4 0.9311 9.8
CVE-2022-33891 22 0.931 8.8
CVE-2021-22204 1 0.931 6.8
CVE-2023-45878 4 0.9308 9.8
CVE-2022-23134 1 0.9308 3.7
CVE-2010-2568 131 0.9305 7.8
CVE-2015-1427 12 0.9302 9.8
CVE-2011-3192 53,172 0.9299 7.8
CVE-2007-4559 17,755 0.9299 9.8
CVE-2012-1889 132 0.9293 8.8
Daily Metrics — JSON Download

Effortlessly access the latest data files in JSON format. These files deliver daily banner metrics and quality indicators — ideal for automation, trend analysis, or pre-download validation.

Files
Date Download Link
2025-08-27 JSON Data
2025-08-26 JSON Data
2025-08-25 JSON Data
2025-08-24 JSON Data
2025-08-23 JSON Data
2025-08-22 JSON Data
2025-08-21 JSON Data
2025-08-20 JSON Data
2025-08-19 JSON Data
2025-08-18 JSON Data
Sample data 
{
  "delta_vs_yesterday": {},
  "quality_metrics": {
    "attribute_completeness": {
      "geo": 99.99,
      "org": 99.99,
      "product": 22.97
    },
    "completeness_ratio": 1.0,
    "file_size": 132167925638,
    "malformed_lines": 0,
    "malformed_ratio": 0.0,
    "protocol_distribution": {
      "tcp": 95.82,
      "udp": 4.18
    },
    "unique_countries": 237,
    "unique_cves": 16479,
    "unique_organizations": 454059,
    "unique_port_count": 27357,
    "unique_products": 16882,
    "unique_protocols": 2
  },
  "sha1_checksum": "fabe17bd8ddd1d3814d2ab1dbdc7036e65186200",
  "top_countries": [],
  "top_cves": [],
  "top_ports": [],
  "top_products": [],
  "total_banners": 141050945
}

For programmatic access, use a GET request to:

curl -X GET https://data-status.shodan.io/report/banners-daily/YYYY/YYYY-MM-DD.json

Replace YYYY and YYYY-MM-DD with your desired year and date (e.g., 2025 and 2025-08-27).

Example:

curl -X GET https://data-status.shodan.io/report/banners-daily/2025/2025-08-27.json



Products
Pricing
Contact Us

Shodan ® - All rights reserved