Banner Analysis Report


Overview

This report summarizes Shodan banner data collected on 2025-11-30, highlighting key attributes of exposed services, protocols, and device configurations. The insights support trend analysis and risk assessment, noting that some banner details may be optional or vary by device.

Summary & Key Insights
File Summary
  • File: /app/data/2025-11-30.json.zst
  • Size: 207.53 GB
  • Uncompressed Size: 1,665.23 GB
Key Insights
  • Total scan coverage: 191,790,553 banners collected across all services
  • Service diversity: 15,671 unique ports observed in the dataset
  • Port span: services range from 1 - 65535
  • Most active port: 443 with 10,350,448 banners ( 5.4% of total)
  • Leading protocol: tcp appears most frequently in scanned banners
  • Common platform: nginx was the most observed product
  • Most exposed CVE: CVE-2023-51767 seen 1,407,320 times (CVSS 7.0, EPSS 0.0001)
  • Top origin country: United States with 95,511,162 banners detected
  • Leading organization: Google LLC accounted for 53,678,862 banners
Total Banners
191,790,553
Unique Ports
15,671
Port Range
1 - 65535
Service Exposure Overview
Top 20 Ports

Number of banners observed per port.View detailed port analysis

Top 20 Organizations / ISPs

Based on hosting information extracted from banners.

Technology and Service Overview

A quick glance at the most common products and protocols detected in the dataset.

Top 2 Protocols

Most frequently observed protocols by banner volume.

Top 20 Products

Detected technologies based on product metadata.

Exposure by Geography
Country Distribution

Based on location data in service banners.

Vulnerability Exposure Overview

Across these 100 CVEs, 80,304,056 banners were affected. 21 vulnerabilities are critical.

Top 100 Vulnerabilities
CVE ID Count EPSS CVSS
CVE-2023-51767 1,407,320 0.0001 7.0
CVE-2008-3844 1,407,320 0.02269 9.3
CVE-2007-2768 1,407,320 0.00247 4.3
CVE-2023-44487 1,383,464 0.94499 7.5
CVE-2025-23419 1,325,770 0.00594 4.3
CVE-2025-26465 1,283,518 0.63393 6.8
CVE-2025-32728 1,266,041 0.00048 4.3
CVE-2023-48795 1,252,506 0.65295 5.9
CVE-2023-51385 1,244,034 0.14152 6.5
CVE-2023-38408 1,241,088 0.64157 9.8
CVE-2021-36368 1,224,688 0.00411 3.7
CVE-2016-20012 1,218,190 0.1668 5.3
CVE-2021-41617 1,123,522 0.00382 7.0
CVE-2020-15778 1,074,954 0.60971 7.4
CVE-2013-0941 1,037,948 0.00039 2.1
CVE-2013-4365 1,037,944 0.06656 7.5
CVE-2013-2765 1,037,944 0.05375 5.0
CVE-2013-0942 1,037,944 0.00496 4.3
CVE-2012-4001 1,037,944 0.00308 5.0
CVE-2012-4360 1,037,944 0.0049 4.3
CVE-2012-3526 1,037,944 0.02596 5.0
CVE-2011-2688 1,037,944 0.02343 7.5
CVE-2011-1176 1,037,944 0.01299 4.3
CVE-2009-2299 1,037,944 0.00879 5.0
CVE-2009-0796 1,037,944 0.26877 2.6
CVE-2007-4723 1,037,944 0.00162 7.5
CVE-2025-49812 1,034,817 0.00196 7.4
CVE-2020-14145 1,005,682 0.01254 5.9
CVE-2024-40898 927,040 0.00347 7.5
CVE-2023-38709 904,137 0.04471 7.3
CVE-2024-43394 871,145 0.00215 7.5
CVE-2024-47252 871,145 0.00188 7.5
CVE-2024-42516 871,145 0.00535 7.5
CVE-2024-43204 871,145 0.00407 7.5
CVE-2021-3618 861,559 0.00492 7.4
CVE-2019-6109 838,490 0.10039 6.8
CVE-2019-6111 838,490 0.60044 5.9
CVE-2018-20685 838,480 0.03377 5.3
CVE-2019-6110 838,479 0.51287 6.8
CVE-2023-31122 814,052 0.0043 7.5
CVE-2018-15473 807,681 0.89879 5.3
CVE-2017-15906 801,693 0.03058 5.3
CVE-2006-20001 780,300 0.00704 7.5
CVE-2022-37436 780,300 0.00525 5.3
CVE-2022-28330 763,673 0.00367 5.3
CVE-2022-28614 763,673 0.00405 5.3
CVE-2022-28615 763,673 0.0103 9.1
CVE-2022-29404 763,673 0.02153 7.5
CVE-2022-30556 763,673 0.00276 7.5
CVE-2022-31813 763,673 0.0004 9.8
CVE-2024-38477 757,210 0.00898 7.5
CVE-2024-39573 757,210 0.02523 7.5
CVE-2024-38472 757,210 0.90236 7.5
CVE-2024-38473 757,210 0.88261 8.1
CVE-2024-38474 757,210 0.0081 9.8
CVE-2024-38475 757,210 0.93858 9.1
CVE-2024-38476 757,210 0.03452 9.8
CVE-2022-22719 753,919 0.36153 7.5
CVE-2022-22720 753,919 0.33369 9.8
CVE-2022-22721 753,919 0.21928 9.1
CVE-2021-23017 745,039 0.73166 7.7
CVE-2024-24795 740,465 0.01219 6.3
CVE-2018-15919 721,055 0.01227 5.3
CVE-2025-53020 699,533 0.00606 7.5
CVE-2025-49630 648,980 0.00567 7.5
CVE-2021-44790 632,889 0.87234 9.8
CVE-2021-34798 621,283 0.11686 7.5
CVE-2021-39275 621,283 0.46965 9.8
CVE-2021-40438 621,283 0.94432 9.0
CVE-2023-25690 619,077 0.67037 9.8
CVE-2022-36760 616,628 0.00295 9.0
CVE-2021-32791 602,044 0.00513 5.9
CVE-2021-32792 602,044 0.00359 3.1
CVE-2021-32785 602,044 0.00445 5.3
CVE-2021-32786 602,044 0.00162 4.7
CVE-2022-26377 600,001 0.3988 7.5
CVE-2025-23048 594,325 0.00145 9.1
CVE-2022-23943 590,247 0.68553 9.8
CVE-2024-27316 568,853 0.89118 7.5
CVE-2024-3566 555,784 0.05987 9.8
CVE-2013-2220 555,784 0.02798 7.5
CVE-2007-3205 555,784 0.01973 5.0
CVE-2025-62168 509,997 0.00097 10.0
CVE-2025-59362 509,997 0.00086 4.0
CVE-2024-45802 484,345 0.02072 7.5
CVE-2024-37894 484,345 0.01307 6.3
CVE-2023-50269 481,411 0.01035 8.6
CVE-2024-25617 481,401 0.0101 5.3
CVE-2023-49285 481,401 0.08442 8.6
CVE-2023-49286 481,401 0.01928 8.6
CVE-2025-54574 481,398 0.00668 9.3
CVE-2023-5824 481,398 0.01599 7.5
CVE-2023-46846 481,398 0.09854 9.3
CVE-2023-46728 481,241 0.0195 7.5
CVE-2023-45802 478,768 0.01741 5.9
CVE-2020-13938 451,462 0.00278 5.5
CVE-2020-35452 451,462 0.1497 7.3
CVE-2021-26690 451,462 0.71587 7.5
CVE-2021-26691 451,462 0.38426 9.8
CVE-2019-17567 448,126 0.09555 5.3
Exposure Risk Summary (EPSS > 0.5)
CVE ID Count EPSS CVSS
CVE-2024-27198 45 0.9458 9.8
CVE-2017-1000353 34 0.9451 9.8
CVE-2023-44487 1,383,464 0.945 7.5
CVE-2018-7600 327 0.9449 9.8
CVE-2024-27199 45 0.9449 7.3
CVE-2018-1000861 23,271 0.9448 9.8
CVE-2023-35078 3 0.9448 10.0
CVE-2020-1938 4,340 0.9447 9.8
CVE-2014-0160 16,012 0.9446 7.5
CVE-2024-23897 26,487 0.9446 9.8
CVE-2016-10033 2,436 0.9445 9.8
CVE-2020-0796 24,628 0.9444 10.0
CVE-2019-0708 1,828 0.9444 9.8
CVE-2021-43798 414 0.9444 7.5
CVE-2022-24112 82 0.9444 9.8
CVE-2023-32315 189 0.9444 8.6
CVE-2019-6340 54 0.9444 8.1
CVE-2023-46604 7 0.9444 10.0
CVE-2019-19781 9 0.9444 9.8
CVE-2022-22965 17 0.9444 9.8
CVE-2021-40438 621,283 0.9443 9.0
CVE-2017-7269 9,793 0.9443 9.8
CVE-2022-36804 16 0.9443 8.8
CVE-2022-0543 197 0.9442 10.0
CVE-2018-2628 43 0.9442 9.8
CVE-2020-11651 53 0.9442 9.8
CVE-2023-35082 5 0.9442 10.0
CVE-2021-41277 569 0.9441 10.0
CVE-2021-42013 470 0.9441 9.8
CVE-2019-11580 2 0.9441 9.8
CVE-2012-1823 56,498 0.9439 9.8
CVE-2022-24706 6,509 0.9439 9.8
CVE-2023-33246 182 0.9439 9.8
CVE-2021-41773 399 0.9438 7.5
CVE-2019-1653 63 0.9438 7.5
CVE-2019-11510 131 0.9438 9.9
CVE-2020-1472 246 0.9438 5.5
CVE-2024-23917 39 0.9438 9.8
CVE-2024-4577 35,107 0.9437 9.8
CVE-2014-3704 118 0.9437 7.5
CVE-2021-26855 173 0.9436 9.1
CVE-2021-39226 1,745 0.9435 9.8
CVE-2020-0688 79 0.9435 8.8
CVE-2016-3088 5 0.9434 9.8
CVE-2021-40444 113 0.9433 8.8
CVE-2017-5753 430 0.9433 5.6
CVE-2013-2251 9 0.9433 9.8
CVE-2018-7602 249 0.9432 9.8
MS17-010 1,473 0.9432 8.8
CVE-2015-1635 6,838 0.9431 9.8
CVE-2021-1675 113 0.9431 7.8
CVE-2021-27065 173 0.9431 7.8
CVE-2018-2894 43 0.9431 9.8
MS15-034 6,837 0.943 9.8
CVE-2018-2893 43 0.9429 9.8
CVE-2021-34527 113 0.9427 8.8
CVE-2023-27350 200 0.9426 9.8
CVE-2020-11652 53 0.9426 6.5
CVE-2023-34362 3 0.9425 9.8
CVE-2021-34473 242 0.9423 9.1
CVE-2023-23333 285 0.9422 9.8
CVE-2025-24813 44 0.9418 9.8
CVE-2016-5195 9 0.9418 7.0
CVE-2020-7247 41 0.9413 9.8
CVE-2023-4863 2 0.9412 8.8
CVE-2019-11043 26,296 0.9411 8.7
CVE-2017-15715 269,794 0.941 8.1
CVE-2017-12635 1,404 0.941 9.8
CVE-2023-37582 233 0.9407 9.8
CVE-2014-6332 9 0.9407 8.8
CVE-2012-2122 873 0.9406 5.1
CVE-2024-21683 2 0.9405 8.8
CVE-2008-4250 84 0.9404 10.0
CVE-2015-4000 64,755 0.9403 3.7
CVE-2021-25646 11 0.9403 8.8
CVE-2014-3566 33,918 0.9402 3.4
CVE-2023-20198 1,062 0.9398 10.0
CVE-2019-20933 24 0.9397 9.8
CVE-2018-19518 45,254 0.9396 7.5
CVE-2021-34523 242 0.9395 9.0
CVE-2019-10149 39,579 0.9393 9.0
CVE-2015-3306 1,315 0.9393 10.0
CVE-2024-9264 339 0.9392 9.9
CVE-2020-11710 74 0.939 9.8
CVE-2019-18394 345 0.9388 9.8
CVE-2021-21311 22 0.9387 7.2
CVE-2016-8735 42 0.9387 9.8
CVE-2024-38475 757,210 0.9386 9.1
CVE-2017-15944 90 0.9386 9.8
CVE-2022-40127 252 0.9385 8.8
CVE-2019-8943 4,245 0.9385 6.5
CVE-2017-9798 388,571 0.9384 7.5
CVE-2021-31207 242 0.9384 6.6
CVE-2010-1871 2 0.9382 8.8
CVE-2021-21972 1 0.9379 9.8
CVE-2021-34429 975 0.9378 5.3
CVE-2016-3427 12 0.9375 9.8
CVE-2021-36749 11 0.9374 6.5
CVE-2016-10045 2,436 0.9366 9.8
CVE-2024-37032 19,618 0.9352 8.8
Daily Metrics — JSON Download

Effortlessly access the latest data files in JSON format. These files deliver daily banner metrics and quality indicators — ideal for automation, trend analysis, or pre-download validation.

Files
Date Download Link
2025-11-30 JSON Data
2025-11-29 JSON Data
2025-11-28 JSON Data
2025-11-27 JSON Data
2025-11-26 JSON Data
2025-11-25 JSON Data
2025-11-24 JSON Data
2025-11-23 JSON Data
2025-11-22 JSON Data
2025-11-21 JSON Data
Sample data 
{
  "delta_vs_yesterday": {},
  "quality_metrics": {
    "attribute_completeness": {
      "geo": 99.99,
      "org": 99.99,
      "product": 22.97
    },
    "completeness_ratio": 1.0,
    "file_size": 132167925638,
    "malformed_lines": 0,
    "malformed_ratio": 0.0,
    "protocol_distribution": {
      "tcp": 95.82,
      "udp": 4.18
    },
    "unique_countries": 237,
    "unique_cves": 16479,
    "unique_organizations": 454059,
    "unique_port_count": 27357,
    "unique_products": 16882,
    "unique_protocols": 2
  },
  "sha1_checksum": "fabe17bd8ddd1d3814d2ab1dbdc7036e65186200",
  "top_countries": [],
  "top_cves": [],
  "top_ports": [],
  "top_products": [],
  "total_banners": 141050945
}

For programmatic access, use a GET request to:

curl -X GET https://data-status.shodan.io/report/banners-daily/YYYY/YYYY-MM-DD.json

Replace YYYY and YYYY-MM-DD with your desired year and date (e.g., 2025 and 2025-11-30).

Example:

curl -X GET https://data-status.shodan.io/report/banners-daily/2025/2025-11-30.json



Products
Pricing
Contact Us

Shodan ® - All rights reserved