Banner Analysis Report


Overview

This report summarizes Shodan banner data collected on 2026-01-24, highlighting key attributes of exposed services, protocols, and device configurations. The insights support trend analysis and risk assessment, noting that some banner details may be optional or vary by device.

Summary & Key Insights
File Summary
  • File: /app/data/2026-01-24.json.zst
  • Size: 176.34 GB
  • Uncompressed Size: 1,503.59 GB
Key Insights
  • Total scan coverage: 229,857,977 banners collected across all services
  • Service diversity: 17,763 unique ports observed in the dataset
  • Port span: services range from 1 - 65535
  • Most active port: 443 with 8,579,508 banners ( 3.73% of total)
  • Leading protocol: tcp appears most frequently in scanned banners
  • Common platform: nginx was the most observed product
  • Most exposed CVE: CVE-2023-51767 seen 1,291,907 times (CVSS 7.0, EPSS 9e-05)
  • Top origin country: United States with 91,840,759 banners detected
  • Leading organization: Google LLC accounted for 51,054,252 banners
Total Banners
229,857,977
Unique Ports
17,763
Port Range
1 - 65535
Service Exposure Overview
Top 20 Ports

Number of banners observed per port.View detailed port analysis

Top 20 Organizations / ISPs

Based on hosting information extracted from banners.

Technology and Service Overview

A quick glance at the most common products and protocols detected in the dataset.

Top 2 Protocols

Most frequently observed protocols by banner volume.

Top 20 Products

Detected technologies based on product metadata.

Exposure by Geography
Country Distribution

Based on location data in service banners.

Vulnerability Exposure Overview

Across these 100 CVEs, 82,122,392 banners were affected. 18 vulnerabilities are critical.

Top 100 Vulnerabilities
CVE ID Count EPSS CVSS
CVE-2023-51767 1,291,907 9e-05 7.0
CVE-2008-3844 1,291,907 0.02746 9.3
CVE-2007-2768 1,291,907 0.00119 4.3
CVE-2023-44487 1,260,661 0.94466 7.5
CVE-2013-0941 1,192,899 0.00039 2.1
CVE-2013-4365 1,192,895 0.06656 7.5
CVE-2013-2765 1,192,895 0.05375 5.0
CVE-2013-0942 1,192,895 0.00496 4.3
CVE-2012-4001 1,192,895 0.00308 5.0
CVE-2012-4360 1,192,895 0.0049 4.3
CVE-2012-3526 1,192,895 0.02596 5.0
CVE-2011-2688 1,192,895 0.02343 7.5
CVE-2011-1176 1,192,895 0.01299 4.3
CVE-2009-2299 1,192,895 0.00879 5.0
CVE-2009-0796 1,192,895 0.32732 2.6
CVE-2007-4723 1,192,895 0.00167 7.5
CVE-2025-26465 1,182,881 0.64393 6.8
CVE-2025-23419 1,179,176 0.00632 4.3
CVE-2025-32728 1,171,257 0.00095 4.3
CVE-2025-58098 1,149,398 0.00035 8.3
CVE-2023-48795 1,131,869 0.5901 5.9
CVE-2023-51385 1,116,392 0.16522 6.5
CVE-2023-38408 1,113,858 0.69186 9.8
CVE-2021-36368 1,097,488 0.00395 3.7
CVE-2016-20012 1,092,140 0.14603 5.3
CVE-2025-49812 1,080,492 0.00088 7.4
CVE-2021-41617 1,011,301 0.00208 7.0
CVE-2025-59775 979,368 0.00123 7.5
CVE-2025-65082 979,368 0.00243 6.5
CVE-2020-15778 951,875 0.61479 7.4
CVE-2024-40898 951,416 0.00472 7.5
CVE-2023-38709 930,637 0.03255 7.3
CVE-2024-43394 910,462 0.0005 7.5
CVE-2024-47252 910,462 0.00116 7.5
CVE-2024-42516 910,462 0.0024 7.5
CVE-2024-43204 910,462 0.00243 7.5
CVE-2020-14145 895,378 0.01254 5.9
CVE-2025-66200 871,957 0.00078 5.4
CVE-2023-31122 821,572 0.0043 7.5
CVE-2006-20001 790,560 0.00648 7.5
CVE-2022-37436 790,560 0.00504 5.3
CVE-2024-38477 775,271 0.0118 7.5
CVE-2024-39573 775,271 0.02523 7.5
CVE-2024-38472 775,271 0.90493 7.5
CVE-2024-38473 775,271 0.88261 8.1
CVE-2024-38474 775,271 0.00606 9.8
CVE-2024-38475 775,271 0.93858 9.1
CVE-2024-38476 775,271 0.03545 9.8
CVE-2022-28330 769,897 0.00337 5.3
CVE-2022-28614 769,897 0.00506 5.3
CVE-2022-28615 769,897 0.00949 9.1
CVE-2022-29404 769,897 0.01986 7.5
CVE-2022-30556 769,897 0.00345 7.5
CVE-2022-31813 769,897 0.0004 9.8
CVE-2022-22719 760,785 0.32203 7.5
CVE-2022-22720 760,785 0.33927 9.8
CVE-2022-22721 760,785 0.18952 9.1
CVE-2024-24795 760,607 0.01219 6.3
CVE-2025-53020 744,310 0.00358 7.5
CVE-2021-3618 734,854 0.00492 7.4
CVE-2019-6109 708,549 0.09738 6.8
CVE-2019-6111 708,549 0.53929 5.9
CVE-2018-20685 708,547 0.03377 5.3
CVE-2019-6110 708,546 0.51287 6.8
CVE-2025-55753 690,798 0.00113 7.5
CVE-2018-15473 684,169 0.89957 5.3
CVE-2017-15906 678,361 0.02659 5.3
CVE-2025-49630 666,051 0.00452 7.5
CVE-2021-44790 650,578 0.87092 9.8
CVE-2021-34798 640,668 0.11963 7.5
CVE-2021-39275 640,668 0.47556 9.8
CVE-2021-40438 640,668 0.94465 9.0
CVE-2021-23017 638,567 0.73166 7.7
CVE-2023-25690 622,930 0.67037 9.8
CVE-2021-32791 621,457 0.00348 5.9
CVE-2021-32792 621,457 0.00172 3.1
CVE-2021-32785 621,457 0.00302 5.3
CVE-2021-32786 621,457 0.00118 4.7
CVE-2022-36760 620,530 0.00271 9.0
CVE-2025-23048 615,611 0.00027 9.1
CVE-2018-15919 610,928 0.02073 5.3
CVE-2022-26377 599,867 0.39296 7.5
CVE-2024-27316 594,455 0.89118 7.5
CVE-2022-23943 590,755 0.67604 9.8
CVE-2024-3566 573,215 0.05349 9.8
CVE-2013-2220 573,215 0.02798 7.5
CVE-2007-3205 573,215 0.01973 5.0
CVE-2023-45802 485,390 0.02165 5.9
CVE-2020-13938 465,115 0.00077 5.5
CVE-2020-35452 465,115 0.13393 7.3
CVE-2021-26690 465,115 0.68609 7.5
CVE-2021-26691 465,115 0.36266 9.8
CVE-2019-17567 461,475 0.12438 5.3
CVE-2018-1301 458,600 0.06762 5.9
CVE-2018-1302 458,600 0.11001 5.9
CVE-2018-1303 458,600 0.37731 7.5
CVE-2020-1927 448,647 0.11302 6.1
CVE-2020-1934 448,647 0.41871 5.3
CVE-2022-4900 434,921 0.0009 6.2
CVE-2024-25117 431,462 0.00175 6.8
Exposure Risk Summary (EPSS > 0.5)
CVE ID Count EPSS CVSS
CVE-2024-27198 38 0.9458 9.8
CVE-2017-1000353 33 0.9451 9.8
CVE-2018-7600 231 0.9449 9.8
CVE-2024-27199 38 0.9449 7.3
CVE-2018-1000861 18,640 0.9448 9.8
CVE-2019-11510 140 0.9448 9.9
CVE-2023-35078 5 0.9448 10.0
CVE-2023-44487 1,260,661 0.9447 7.5
CVE-2020-1938 9,348 0.9447 9.8
CVE-2024-23897 20,394 0.9447 9.8
CVE-2021-40438 640,668 0.9446 9.0
CVE-2016-10033 2,016 0.9446 9.8
CVE-2014-0160 13,930 0.9446 7.5
CVE-2019-0708 1,748 0.9444 9.8
CVE-2019-0604 434 0.9444 9.8
CVE-2021-43798 286 0.9444 7.5
CVE-2023-46604 4 0.9444 10.0
CVE-2019-6340 17 0.9444 8.1
CVE-2022-24112 57 0.9444 9.8
CVE-2023-32315 99 0.9444 8.6
CVE-2019-19781 5 0.9444 9.8
CVE-2017-7269 8,312 0.9443 9.8
CVE-2022-36804 7 0.9443 8.8
CVE-2022-22965 15 0.9443 9.8
CVE-2024-23917 37 0.9442 9.8
CVE-2018-2628 18 0.9442 9.8
CVE-2020-11651 11 0.9442 9.8
CVE-2023-35082 4 0.9442 10.0
CVE-2020-0796 36,780 0.9441 10.0
CVE-2021-41277 481 0.9441 10.0
CVE-2021-42013 486 0.9441 9.8
CVE-2020-0688 64 0.944 8.8
CVE-2022-0543 7 0.944 10.0
CVE-2012-1823 54,792 0.9439 9.8
CVE-2024-4577 32,484 0.9439 9.8
CVE-2022-24706 6,082 0.9439 9.8
CVE-2023-33246 275 0.9439 9.8
CVE-2019-11580 1 0.9439 9.8
CVE-2021-41773 440 0.9438 7.5
CVE-2020-1472 14 0.9438 5.5
CVE-2019-1653 46 0.9438 7.5
CVE-2014-3704 26 0.9437 7.5
CVE-2021-39226 1,375 0.9435 9.8
CVE-2018-7602 158 0.9434 9.8
CVE-2017-5753 418 0.9433 5.6
CVE-2021-26855 183 0.9433 9.1
CVE-2013-2251 16 0.9433 9.8
CVE-2021-40444 214 0.9433 8.8
MS17-010 2,525 0.9432 8.8
CVE-2024-1709 14 0.9432 10.0
CVE-2015-1635 5,958 0.9431 9.8
CVE-2021-1675 214 0.9431 7.8
MS15-034 5,957 0.943 9.8
CVE-2018-2894 18 0.9429 9.8
CVE-2018-12613 2 0.9429 8.8
CVE-2016-3088 3 0.9429 9.8
CVE-2021-27065 183 0.9428 7.8
CVE-2018-2893 18 0.9428 9.8
CVE-2021-34527 214 0.9427 8.8
CVE-2023-27350 219 0.9426 9.8
CVE-2020-11652 11 0.9426 6.5
CVE-2023-34362 2 0.9425 9.8
CVE-2021-34473 249 0.9423 9.1
CVE-2023-23333 367 0.9422 9.8
CVE-2020-17496 1 0.9422 9.8
CVE-2017-12635 1,766 0.9419 9.8
CVE-2017-15944 212 0.9418 9.8
CVE-2016-5195 19 0.9418 7.0
CVE-2025-24813 36 0.9418 9.8
CVE-2023-4863 1 0.9412 8.8
CVE-2019-11043 54,933 0.9411 8.7
CVE-2014-6332 13 0.9409 8.8
CVE-2020-7247 4 0.9408 9.8
CVE-2023-20198 1,351 0.9407 10.0
CVE-2012-2122 371 0.9406 5.1
CVE-2021-25646 42 0.9405 8.8
CVE-2024-21683 2 0.9405 8.8
CVE-2008-4250 199 0.9404 10.0
CVE-2020-11710 50 0.9403 9.8
CVE-2017-15715 288,570 0.9402 8.1
CVE-2024-9264 221 0.9399 9.9
CVE-2023-37582 322 0.9399 9.8
CVE-2019-10149 44,240 0.9398 9.0
CVE-2016-8735 35 0.9397 9.8
CVE-2019-20933 5 0.9397 9.8
CVE-2018-19518 76,295 0.9396 7.5
CVE-2021-34523 249 0.9395 9.0
CVE-2015-3306 4,596 0.9393 10.0
CVE-2021-31207 249 0.9391 6.6
CVE-2015-4000 61,315 0.939 3.7
CVE-2019-8943 3,250 0.939 6.5
CVE-2019-18394 215 0.9388 9.8
CVE-2021-21311 13 0.9387 7.2
CVE-2024-38475 775,271 0.9386 9.1
CVE-2017-9798 417,766 0.9384 7.5
CVE-2021-36749 42 0.9384 6.5
CVE-2014-3566 30,750 0.9382 3.4
CVE-2020-17518 246 0.9379 7.5
CVE-2010-1871 2 0.9379 8.8
CVE-2021-34429 592 0.9378 5.3
Daily Metrics — JSON Download

Effortlessly access the latest data files in JSON format. These files deliver daily banner metrics and quality indicators — ideal for automation, trend analysis, or pre-download validation.

Files
Date Download Link
2026-01-24 JSON Data
2026-01-23 JSON Data
2026-01-22 JSON Data
2026-01-21 JSON Data
2026-01-20 JSON Data
2026-01-19 JSON Data
2026-01-18 JSON Data
2026-01-17 JSON Data
2026-01-16 JSON Data
2026-01-15 JSON Data
Sample data 
{
  "delta_vs_yesterday": {},
  "quality_metrics": {
    "attribute_completeness": {
      "geo": 99.99,
      "org": 99.99,
      "product": 22.97
    },
    "completeness_ratio": 1.0,
    "file_size": 132167925638,
    "malformed_lines": 0,
    "malformed_ratio": 0.0,
    "protocol_distribution": {
      "tcp": 95.82,
      "udp": 4.18
    },
    "unique_countries": 237,
    "unique_cves": 16479,
    "unique_organizations": 454059,
    "unique_port_count": 27357,
    "unique_products": 16882,
    "unique_protocols": 2
  },
  "sha1_checksum": "fabe17bd8ddd1d3814d2ab1dbdc7036e65186200",
  "top_countries": [],
  "top_cves": [],
  "top_ports": [],
  "top_products": [],
  "total_banners": 141050945
}

For programmatic access, use a GET request to:

curl -X GET https://data-status.shodan.io/report/banners-daily/YYYY/YYYY-MM-DD.json

Replace YYYY and YYYY-MM-DD with your desired year and date (e.g., 2026 and 2026-01-24).

Example:

curl -X GET https://data-status.shodan.io/report/banners-daily/2026/2026-01-24.json



Products
Pricing
Contact Us

Shodan ® - All rights reserved