Banner Analysis Report


Overview

This report summarizes Shodan banner data collected on 2026-03-13, highlighting key attributes of exposed services, protocols, and device configurations. The insights support trend analysis and risk assessment, noting that some banner details may be optional or vary by device.

Summary & Key Insights
File Summary
  • File: /app/data/2026-03-13.json.zst
  • Size: 214.55 GB
  • Uncompressed Size: 1,801.85 GB
Key Insights
  • Total scan coverage: 252,663,008 banners collected across all services
  • Service diversity: 16,536 unique ports observed in the dataset
  • Port span: services range from 1 - 65535
  • Most active port: 80 with 20,997,892 banners ( 8.31% of total)
  • Leading protocol: tcp appears most frequently in scanned banners
  • Common platform: nginx was the most observed product
  • Most exposed CVE: CVE-2023-44487 seen 2,078,968 times (CVSS 7.5, EPSS 0.94399)
  • Top origin country: United States with 100,998,380 banners detected
  • Leading organization: Incapsula Inc accounted for 60,068,668 banners
Total Banners
252,663,008
Unique Ports
16,536
Port Range
1 - 65535
Service Exposure Overview
Top 20 Ports

Number of banners observed per port.View detailed port analysis

Top 20 Organizations / ISPs

Based on hosting information extracted from banners.

Technology and Service Overview

A quick glance at the most common products and protocols detected in the dataset.

Top 2 Protocols

Most frequently observed protocols by banner volume.

Top 20 Products

Detected technologies based on product metadata.

Exposure by Geography
Country Distribution

Based on location data in service banners.

Vulnerability Exposure Overview

Across these 100 CVEs, 120,058,626 banners were affected. 18 vulnerabilities are critical.

Top 100 Vulnerabilities
CVE ID Count EPSS CVSS
CVE-2023-44487 2,078,968 0.94399 7.5
CVE-2013-0941 2,003,967 0.00039 2.1
CVE-2013-4365 2,003,957 0.06656 7.5
CVE-2013-2765 2,003,957 0.05375 5.0
CVE-2013-0942 2,003,957 0.00496 4.3
CVE-2012-4001 2,003,957 0.00227 5.0
CVE-2012-4360 2,003,957 0.00361 4.3
CVE-2012-3526 2,003,957 0.01928 5.0
CVE-2011-2688 2,003,957 0.02343 7.5
CVE-2011-1176 2,003,957 0.0096 4.3
CVE-2009-2299 2,003,957 0.00879 5.0
CVE-2009-0796 2,003,957 0.60732 2.6
CVE-2007-4723 2,003,957 0.00181 7.5
CVE-2025-23419 2,000,325 0.00632 4.3
CVE-2025-58098 1,841,894 0.00027 8.3
CVE-2025-49812 1,777,391 0.00118 7.4
CVE-2025-59775 1,629,421 0.00056 7.5
CVE-2025-65082 1,629,421 0.00156 6.5
CVE-2024-40898 1,576,083 0.00472 7.5
CVE-2024-43394 1,564,918 0.0005 7.5
CVE-2024-47252 1,564,918 0.0015 7.5
CVE-2024-42516 1,564,918 0.00321 7.5
CVE-2024-43204 1,564,918 0.00231 7.5
CVE-2023-38709 1,538,115 0.03342 7.3
CVE-2025-66200 1,463,207 0.00055 5.4
CVE-2024-38477 1,354,579 0.0118 7.5
CVE-2024-39573 1,354,579 0.0316 7.5
CVE-2024-38472 1,354,579 0.90493 7.5
CVE-2024-38473 1,354,579 0.87861 8.1
CVE-2024-38474 1,354,579 0.00744 9.8
CVE-2024-38475 1,354,579 0.9337 9.1
CVE-2024-38476 1,354,579 0.03452 9.8
CVE-2023-31122 1,342,781 0.0043 7.5
CVE-2024-24795 1,325,642 0.01123 6.3
CVE-2025-53020 1,321,575 0.00627 7.5
CVE-2006-20001 1,292,305 0.00473 7.5
CVE-2022-37436 1,292,305 0.00542 5.3
CVE-2022-28330 1,218,814 0.00555 5.3
CVE-2022-28614 1,218,814 0.00593 5.3
CVE-2022-28615 1,218,814 0.01111 9.1
CVE-2022-29404 1,218,814 0.0232 7.5
CVE-2022-30556 1,218,814 0.00506 7.5
CVE-2022-31813 1,218,814 0.00047 9.8
CVE-2021-3618 1,213,743 0.00615 7.4
CVE-2022-22719 1,206,746 0.29312 7.5
CVE-2022-22720 1,206,746 0.27458 9.8
CVE-2022-22721 1,206,746 0.13159 9.1
CVE-2025-49630 1,195,782 0.00721 7.5
CVE-2025-55753 1,175,082 0.00072 7.5
CVE-2025-23048 1,103,493 0.00032 9.1
CVE-2023-25690 1,084,046 0.68183 9.8
CVE-2024-27316 1,082,299 0.89409 7.5
CVE-2022-36760 1,079,832 0.00314 9.0
CVE-2021-23017 1,071,074 0.73166 7.7
CVE-2021-44790 1,006,925 0.87092 9.8
CVE-2022-26377 1,006,341 0.3988 7.5
CVE-2022-23943 994,273 0.5943 9.8
CVE-2021-34798 990,489 0.13354 7.5
CVE-2021-39275 990,489 0.44191 9.8
CVE-2021-40438 990,489 0.94432 9.0
CVE-2023-51767 986,578 8e-05 7.0
CVE-2008-3844 986,578 0.02746 9.3
CVE-2007-2768 986,578 0.00119 4.3
CVE-2021-32791 963,493 0.00348 5.9
CVE-2021-32792 963,493 0.00172 3.1
CVE-2021-32785 963,493 0.00262 5.3
CVE-2021-32786 963,493 0.00098 4.7
CVE-2025-26465 903,191 0.5867 6.8
CVE-2023-48795 901,025 0.57856 5.9
CVE-2025-32728 896,257 0.00274 4.3
CVE-2023-51385 891,753 0.16522 6.5
CVE-2023-38408 888,804 0.68749 9.8
CVE-2023-45802 886,965 0.01741 5.9
CVE-2021-36368 876,760 0.00395 3.7
CVE-2016-20012 873,471 0.14603 5.3
CVE-2024-3566 856,829 0.0709 9.8
CVE-2013-2220 856,829 0.02798 7.5
CVE-2007-3205 856,829 0.00998 5.0
CVE-2021-41617 815,151 0.00274 7.0
CVE-2020-35452 769,006 0.10294 7.3
CVE-2021-26690 769,006 0.70379 7.5
CVE-2021-26691 769,006 0.40357 9.8
CVE-2020-13938 769,005 0.00071 5.5
CVE-2019-17567 765,380 0.12438 5.3
CVE-2020-15778 761,509 0.61479 7.4
CVE-2020-1927 745,025 0.11302 6.1
CVE-2020-1934 745,025 0.41871 5.3
CVE-2009-3765 724,114 0.00586 6.8
CVE-2009-3766 724,114 0.00517 6.8
CVE-2009-3767 724,114 0.01768 4.3
CVE-2009-1390 724,114 0.00435 6.8
CVE-2020-14145 722,361 0.01254 5.9
CVE-2022-4900 669,799 0.00083 6.2
CVE-2018-1301 666,812 0.07499 5.9
CVE-2018-1302 666,812 0.12125 5.9
CVE-2018-1303 666,812 0.40137 7.5
CVE-2024-25117 664,959 0.00126 6.8
CVE-2023-27522 629,707 0.00619 7.5
CVE-2021-44224 628,238 0.1096 8.2
CVE-2019-6109 620,007 0.07414 6.8
Exposure Risk Summary (EPSS > 0.5)
CVE ID Count EPSS CVSS
CVE-2024-27198 43 0.9458 9.8
CVE-2017-1000353 39 0.9451 9.8
CVE-2018-7600 329 0.9449 9.8
CVE-2024-27199 43 0.9449 7.3
CVE-2024-23897 36,831 0.9447 9.8
CVE-2018-1000861 35,336 0.9447 9.8
CVE-2016-10033 3,584 0.9447 9.8
CVE-2020-1938 5,228 0.9447 9.8
CVE-2023-35078 9 0.9447 10.0
CVE-2014-0160 17,852 0.9446 7.5
CVE-2019-11510 205 0.9446 9.9
CVE-2021-44228 1 0.9446 10.0
CVE-2019-0708 2,108 0.9444 9.8
CVE-2019-0604 621 0.9444 9.8
CVE-2019-6340 23 0.9444 8.1
CVE-2023-32315 95 0.9444 8.6
CVE-2022-24112 99 0.9444 9.8
CVE-2023-46604 5 0.9444 10.0
CVE-2021-43798 282 0.9444 7.5
CVE-2019-19781 9 0.9444 9.8
CVE-2021-40438 990,489 0.9443 9.0
CVE-2022-22965 11 0.9443 9.8
CVE-2022-36804 12 0.9443 8.8
CVE-2020-0796 31,897 0.9442 10.0
CVE-2018-2628 7 0.9442 9.8
CVE-2020-11651 9 0.9442 9.8
CVE-2017-7269 16,822 0.9441 9.8
CVE-2021-42013 611 0.9441 9.8
CVE-2023-44487 2,078,968 0.944 7.5
CVE-2020-0688 76 0.944 8.8
CVE-2022-0543 19 0.944 10.0
CVE-2023-35082 7 0.944 10.0
CVE-2012-1823 88,775 0.9439 9.8
CVE-2022-24706 9,582 0.9439 9.8
CVE-2021-41773 508 0.9439 9.8
CVE-2023-33246 167 0.9439 9.8
CVE-2019-1653 42 0.9439 7.5
CVE-2018-7602 208 0.9438 9.8
CVE-2020-1472 27 0.9438 5.5
CVE-2021-39144 1 0.9438 8.5
CVE-2024-4577 48,411 0.9437 9.8
CVE-2014-3704 31 0.9437 7.5
CVE-2021-41277 659 0.9435 10.0
CVE-2021-39226 1,439 0.9435 9.8
CVE-2013-2251 14 0.9433 9.8
CVE-2021-40444 103 0.9433 8.8
CVE-2017-5753 352 0.9433 5.6
MS17-010 2,636 0.9432 8.8
CVE-2024-1709 15 0.9432 10.0
CVE-2015-1635 9,568 0.9431 9.8
CVE-2021-1675 103 0.9431 7.8
MS15-034 9,567 0.943 9.8
CVE-2016-3088 4 0.9429 9.8
CVE-2018-12613 2 0.9429 8.8
CVE-2018-2894 7 0.9429 9.8
CVE-2021-26855 155 0.9428 9.1
CVE-2021-27065 155 0.9428 7.8
CVE-2018-2893 7 0.9428 9.8
CVE-2021-34527 103 0.9427 8.8
CVE-2021-34473 253 0.9426 9.1
CVE-2023-27350 96 0.9426 9.8
CVE-2020-11652 9 0.9426 6.5
CVE-2023-34362 3 0.9425 9.8
CVE-2025-24813 15 0.9423 9.8
CVE-2023-23333 1,016 0.9422 9.8
CVE-2021-21311 15 0.9421 7.2
CVE-2016-5195 8 0.9418 7.0
CVE-2020-17496 2 0.9418 9.8
CVE-2017-15944 173 0.9414 9.8
CVE-2017-12635 1,886 0.941 9.8
CVE-2014-6332 14 0.9409 8.8
CVE-2023-4863 1 0.9408 8.8
CVE-2020-7247 7 0.9408 9.8
CVE-2012-2122 445 0.9406 5.1
CVE-2019-11043 75,380 0.9405 8.7
CVE-2024-9264 213 0.9405 9.9
CVE-2021-25646 41 0.9405 8.8
CVE-2024-21683 2 0.9405 8.8
CVE-2020-11710 70 0.9403 9.8
CVE-2017-15715 454,339 0.9402 8.1
CVE-2014-3566 48,448 0.9402 3.4
CVE-2023-20198 547 0.9401 10.0
CVE-2021-34523 253 0.94 9.0
CVE-2015-3306 4,031 0.9399 10.0
CVE-2023-37582 203 0.9399 9.8
CVE-2019-10149 23,626 0.9398 9.0
CVE-2019-20933 6 0.9397 9.8
CVE-2018-19518 107,799 0.9396 7.5
CVE-2015-4000 93,303 0.939 3.7
CVE-2019-8943 5,705 0.9389 6.5
CVE-2019-18394 238 0.9388 9.8
CVE-2021-25281 1 0.9385 9.8
CVE-2017-9798 585,626 0.9384 7.5
CVE-2021-31207 253 0.9384 6.6
CVE-2021-36749 41 0.9384 6.5
CVE-2024-37032 165 0.9382 8.8
CVE-2021-21972 3 0.9382 9.8
CVE-2020-17518 347 0.9379 7.5
CVE-2021-34429 598 0.9378 5.3
CVE-2017-12636 1,886 0.9369 7.2
Daily Metrics — JSON Download

Effortlessly access the latest data files in JSON format. These files deliver daily banner metrics and quality indicators — ideal for automation, trend analysis, or pre-download validation.

Files
Date Download Link
2026-03-13 JSON Data
2026-03-12 JSON Data
2026-03-11 JSON Data
2026-03-10 JSON Data
2026-03-09 JSON Data
2026-03-08 JSON Data
2026-03-07 JSON Data
2026-03-06 JSON Data
2026-03-05 JSON Data
2026-03-04 JSON Data
Sample data 
{
  "delta_vs_yesterday": {},
  "quality_metrics": {
    "attribute_completeness": {
      "geo": 99.99,
      "org": 99.99,
      "product": 22.97
    },
    "completeness_ratio": 1.0,
    "file_size": 132167925638,
    "malformed_lines": 0,
    "malformed_ratio": 0.0,
    "protocol_distribution": {
      "tcp": 95.82,
      "udp": 4.18
    },
    "unique_countries": 237,
    "unique_cves": 16479,
    "unique_organizations": 454059,
    "unique_port_count": 27357,
    "unique_products": 16882,
    "unique_protocols": 2
  },
  "sha1_checksum": "fabe17bd8ddd1d3814d2ab1dbdc7036e65186200",
  "top_countries": [],
  "top_cves": [],
  "top_ports": [],
  "top_products": [],
  "total_banners": 141050945
}

For programmatic access, use a GET request to:

curl -X GET https://data-status.shodan.io/report/banners-daily/YYYY/YYYY-MM-DD.json

Replace YYYY and YYYY-MM-DD with your desired year and date (e.g., 2026 and 2026-03-13).

Example:

curl -X GET https://data-status.shodan.io/report/banners-daily/2026/2026-03-13.json



Products
Pricing
Contact Us

Shodan ® - All rights reserved