244.0M
Total Banners
65,535
Unique Ports
1 - 65535
Port Range
100
Top CVEs Analyzed
240
Regions
10,357,254
Hostname Scans
Leading protocol: tcp
Top product: nginx
Top CVE: CVE-2023-44487 (CVSS 7.5)
Top org: Incapsula Inc
Top country: United States
Service diversity: 65,535 unique ports
Risk Signals(based on top 100 CVEs)
18
Critical CVEs
CVSS ≥ 9.0 in top 100
100
High EPSS
EPSS ≥ 0.5 in top 100
18
Insecure Services
No TLS detected
20.21%
Port Concentration
Top 10 ports
Top exploitable CVEs from the 100 most prevalent
- CVE-2018-7600216 banners
- CVE-2018-100086121,166 banners
- CVE-2017-1000353135 banners
- CVE-2024-2389722,945 banners
- CVE-2020-193820,249 banners
- CVE-2016-100334,444 banners
- CVE-2014-016012,758 banners
- CVE-2019-11510206 banners
- CVE-2021-43798273 banners
- CVE-2019-07081,692 banners
- CVE-2019-06041,786 banners
- CVE-2023-3231580 banners
- CVE-2023-3507819 banners
- CVE-2022-2411275 banners
- CVE-2019-634011 banners
- CVE-2023-466045 banners
- CVE-2021-40438707,842 banners
- CVE-2017-72699,105 banners
- CVE-2022-2296510 banners
- CVE-2018-262837 banners
- CVE-2020-079642,528 banners
- CVE-2021-42013460 banners
- CVE-2023-444871,673,351 banners
- CVE-2022-3680421 banners
- CVE-2022-054316 banners
- CVE-2023-3508218 banners
- CVE-2020-068851 banners
- CVE-2024-457743,334 banners
- CVE-2021-41773389 banners
- CVE-2023-33246145 banners
- CVE-2018-7602134 banners
- CVE-2019-165366 banners
- CVE-2020-147229 banners
- CVE-2019-115801 banner
- CVE-2022-247066,745 banners
- CVE-2012-182362,019 banners
- CVE-2021-41277642 banners
- CVE-2021-392261,192 banners
- CVE-2021-26855163 banners
- CVE-2017-5753315 banners
- CVE-2021-4044482 banners
- CVE-2024-170910,961 banners
- MS17-0101,528 banners
- CVE-2015-16356,001 banners
- CVE-2021-27065163 banners
- CVE-2021-167582 banners
- MS15-0346,040 banners
- CVE-2018-289437 banners
- CVE-2018-289337 banners
- CVE-2018-126131 banner
- CVE-2023-2735088 banners
- CVE-2023-343623 banners
- CVE-2021-3452782 banners
- CVE-2020-1165112 banners
- CVE-2016-30881 banner
- CVE-2023-23333396 banners
- CVE-2025-2481344 banners
- CVE-2021-34473251 banners
- CVE-2021-2131114 banners
- CVE-2016-51958 banners
- CVE-2020-174961 banner
- CVE-2017-15715327,534 banners
- CVE-2017-126351,453 banners
- CVE-2021-34523251 banners
- CVE-2023-48634 banners
- CVE-2020-724711 banners
- CVE-2014-356634,384 banners
- CVE-2019-1104352,912 banners
- CVE-2024-216832 banners
- CVE-2017-15944223 banners
- CVE-2023-37582186 banners
- CVE-2019-2093311 banners
- CVE-2021-256468 banners
- CVE-2021-31207251 banners
- CVE-2020-1751893 banners
- CVE-2019-1014922,754 banners
- CVE-2012-2122298 banners
- CVE-2023-20198649 banners
- CVE-2019-89437,349 banners
- CVE-2016-34275 banners
- CVE-2019-18394203 banners
- CVE-2020-1165212 banners
- CVE-2018-1951875,342 banners
- CVE-2014-370414 banners
- CVE-2017-9798428,382 banners
- CVE-2021-367498 banners
- CVE-2021-219721 banner
- CVE-2024-9264248 banners
- CVE-2016-873540 banners
- CVE-2024-38475968,995 banners
- CVE-2021-34429705 banners
- CVE-2017-126361,453 banners
- CVE-2020-11710106 banners
- CVE-2015-400066,881 banners
- CVE-2015-33063,671 banners
- CVE-2015-16412,088 banners
- CVE-2024-3703278 banners
- CVE-2008-425040 banners
- CVE-2022-3389123 banners
- CVE-2021-28164248 banners
Service Categories
65,535
Unique Ports
Hostname Scans
4.24%
of total banners
Protocol Distribution
Top 10 Organizations
Top 5 organizations account for 54.9% of all banners (134,078,684)
Top 15 Countries
- 1United States100,795,754
- 2Singapore54,244,920
- 3China13,609,428
- 4Israel10,639,413
- 5Germany6,329,645
- 6Japan6,084,919
- 7United Kingdom5,064,126
- 8France4,510,267
- 9Canada4,042,471
- 10Hong Kong3,695,531
- 11Korea, Republic of3,310,270
- 12Netherlands2,697,663
- 13Italy2,325,870
- 14India2,321,109
- 15Brazil1,883,903
Domain Data OverviewUpdated at 2026-04-02
337M
Total Domains
2.8B
Subdomains
1.2B
IP References
18K
Unique CVEs
Email Security Adoption
Top Technologies
1Nginx61.3M
2Cloudflare44.5M
3Http Server25.5M
4Pure Ftpd15.2M
5Exim 4.99.112.2M
6Ubuntu Linux12.1M
7Elastic Load Balancing11.1M
8Openresty10.6M
9React9.3M
10Openresty 1.27.1.19.3M
Top Tags
1cloud290M
2cdn235M
3starttls47M
4eol-product32M
5self-signed30M
6database25M
7vpn1M
8open-dir1M
9eol-os634K
10videogame432K
11proxy256K
12devops220K
13iot204K
14honeypot62K
15ai59K
16compromised35K
17cryptocurrency16K
18ics8K
19tor6K
20scanner5K
Top 10 Products
Vulnerability Spotlight
#1 Most Prevalent CVE (of top 100)
7.5
1,673,351
affected banner(s)
EPSS 0.94 (94.40% exploit probability)
18
Critical (top 100)
100
High EPSS (top 100)
100
Analyzed
Critical CVEs (CVSS ≥ 9.0, from top 100)
| CVE ID | Count | EPSS | CVSS |
|---|---|---|---|
| CVE-2008-3844 | 1,248,485 | 0.03 | 9.3 |
| CVE-2023-38408 | 1,149,710 | 0.64 | 9.8 |
| CVE-2024-38474 | 968,995 | 0.0099 | 9.8 |
| CVE-2024-38475 | 968,995 | 0.94 | 9.1 |
| CVE-2024-38476 | 968,995 | 0.05 | 9.8 |
| CVE-2022-28615 | 867,463 | 0.01 | 9.1 |
| CVE-2022-31813 | 867,463 | 0.0004 | 9.8 |
| CVE-2022-22720 | 857,637 | 0.27 | 9.8 |
| CVE-2022-22721 | 857,637 | 0.13 | 9.1 |
| CVE-2025-23048 | 786,651 | 0.0003 | 9.1 |
| CVE-2023-25690 | 764,919 | 0.68 | 9.8 |
| CVE-2022-36760 | 761,593 | 0.0029 | 9.0 |
| CVE-2021-44790 | 719,342 | 0.86 | 9.8 |
| CVE-2024-3566 | 711,605 | 0.07 | 9.8 |
| CVE-2021-39275 | 707,842 | 0.38 | 9.8 |
| CVE-2021-40438 | 707,842 | 0.94 | 9.0 |
| CVE-2022-23943 | 700,721 | 0.61 | 9.8 |
| CVE-2021-26691 | 543,170 | 0.40 | 9.8 |
High Exploit Risk (EPSS ≥ 0.5, from top 100)
| CVE ID | Count | EPSS | CVSS |
|---|---|---|---|
| CVE-2018-7600 | 216 | 0.94 | 9.8 |
| CVE-2018-1000861 | 21,166 | 0.94 | 9.8 |
| CVE-2017-1000353 | 135 | 0.94 | 9.8 |
| CVE-2024-23897 | 22,945 | 0.94 | 9.8 |
| CVE-2020-1938 | 20,249 | 0.94 | 9.8 |
| CVE-2016-10033 | 4,444 | 0.94 | 9.8 |
| CVE-2014-0160 | 12,758 | 0.94 | 7.5 |
| CVE-2019-11510 | 206 | 0.94 | 9.9 |
| CVE-2021-43798 | 273 | 0.94 | 7.5 |
| CVE-2019-0708 | 1,692 | 0.94 | 9.8 |
| CVE-2019-0604 | 1,786 | 0.94 | 9.8 |
| CVE-2023-32315 | 80 | 0.94 | 8.6 |
| CVE-2023-35078 | 19 | 0.94 | 10.0 |
| CVE-2022-24112 | 75 | 0.94 | 9.8 |
| CVE-2019-6340 | 11 | 0.94 | 8.1 |
| CVE-2023-46604 | 5 | 0.94 | 10.0 |
| CVE-2021-40438 | 707,842 | 0.94 | 9.0 |
| CVE-2017-7269 | 9,105 | 0.94 | 9.8 |
| CVE-2022-22965 | 10 | 0.94 | 9.8 |
| CVE-2018-2628 | 37 | 0.94 | 9.8 |
| CVE-2020-0796 | 42,528 | 0.94 | 10.0 |
| CVE-2021-42013 | 460 | 0.94 | 9.8 |
| CVE-2023-44487 | 1,673,351 | 0.94 | 7.5 |
| CVE-2022-36804 | 21 | 0.94 | 8.8 |
| CVE-2022-0543 | 16 | 0.94 | 10.0 |
| CVE-2023-35082 | 18 | 0.94 | 10.0 |
| CVE-2020-0688 | 51 | 0.94 | 8.8 |
| CVE-2024-4577 | 43,334 | 0.94 | 9.8 |
| CVE-2021-41773 | 389 | 0.94 | 9.8 |
| CVE-2023-33246 | 145 | 0.94 | 9.8 |
| CVE-2018-7602 | 134 | 0.94 | 9.8 |
| CVE-2019-1653 | 66 | 0.94 | 7.5 |
| CVE-2020-1472 | 29 | 0.94 | 5.5 |
| CVE-2019-11580 | 1 | 0.94 | 9.8 |
| CVE-2022-24706 | 6,745 | 0.94 | 9.8 |
| CVE-2012-1823 | 62,019 | 0.94 | 9.8 |
| CVE-2021-41277 | 642 | 0.94 | 10.0 |
| CVE-2021-39226 | 1,192 | 0.94 | 9.8 |
| CVE-2021-26855 | 163 | 0.94 | 9.1 |
| CVE-2017-5753 | 315 | 0.94 | 5.6 |
| CVE-2021-40444 | 82 | 0.94 | 8.8 |
| CVE-2024-1709 | 10,961 | 0.94 | 10.0 |
| MS17-010 | 1,528 | 0.94 | 8.8 |
| CVE-2015-1635 | 6,001 | 0.94 | 9.8 |
| CVE-2021-27065 | 163 | 0.94 | 7.8 |
| CVE-2021-1675 | 82 | 0.94 | 7.8 |
| MS15-034 | 6,040 | 0.94 | 9.8 |
| CVE-2018-2894 | 37 | 0.94 | 9.8 |
| CVE-2018-2893 | 37 | 0.94 | 9.8 |
| CVE-2018-12613 | 1 | 0.94 | 8.8 |
| CVE-2023-27350 | 88 | 0.94 | 9.8 |
| CVE-2023-34362 | 3 | 0.94 | 9.8 |
| CVE-2021-34527 | 82 | 0.94 | 8.8 |
| CVE-2020-11651 | 12 | 0.94 | 9.8 |
| CVE-2016-3088 | 1 | 0.94 | 9.8 |
| CVE-2023-23333 | 396 | 0.94 | 9.8 |
| CVE-2025-24813 | 44 | 0.94 | 9.8 |
| CVE-2021-34473 | 251 | 0.94 | 9.1 |
| CVE-2021-21311 | 14 | 0.94 | 7.2 |
| CVE-2016-5195 | 8 | 0.94 | 7.0 |
| CVE-2020-17496 | 1 | 0.94 | 9.8 |
| CVE-2017-15715 | 327,534 | 0.94 | 8.1 |
| CVE-2017-12635 | 1,453 | 0.94 | 9.8 |
| CVE-2021-34523 | 251 | 0.94 | 9.0 |
| CVE-2023-4863 | 4 | 0.94 | 8.8 |
| CVE-2020-7247 | 11 | 0.94 | 9.8 |
| CVE-2014-3566 | 34,384 | 0.94 | 3.4 |
| CVE-2019-11043 | 52,912 | 0.94 | 8.7 |
| CVE-2024-21683 | 2 | 0.94 | 8.8 |
| CVE-2017-15944 | 223 | 0.94 | 9.8 |
| CVE-2023-37582 | 186 | 0.94 | 9.8 |
| CVE-2019-20933 | 11 | 0.94 | 9.8 |
| CVE-2021-25646 | 8 | 0.94 | 8.8 |
| CVE-2021-31207 | 251 | 0.94 | 6.6 |
| CVE-2020-17518 | 93 | 0.94 | 7.5 |
| CVE-2019-10149 | 22,754 | 0.94 | 9.0 |
| CVE-2012-2122 | 298 | 0.94 | 5.1 |
| CVE-2023-20198 | 649 | 0.94 | 10.0 |
| CVE-2019-8943 | 7,349 | 0.94 | 6.5 |
| CVE-2016-3427 | 5 | 0.94 | 9.8 |
| CVE-2019-18394 | 203 | 0.94 | 9.8 |
| CVE-2020-11652 | 12 | 0.94 | 6.5 |
| CVE-2018-19518 | 75,342 | 0.94 | 7.5 |
| CVE-2014-3704 | 14 | 0.94 | 7.5 |
| CVE-2017-9798 | 428,382 | 0.94 | 7.5 |
| CVE-2021-36749 | 8 | 0.94 | 6.5 |
| CVE-2021-21972 | 1 | 0.94 | 9.8 |
| CVE-2024-9264 | 248 | 0.94 | 9.4 |
| CVE-2016-8735 | 40 | 0.94 | 9.8 |
| CVE-2024-38475 | 968,995 | 0.94 | 9.1 |
| CVE-2021-34429 | 705 | 0.94 | 5.3 |
| CVE-2017-12636 | 1,453 | 0.94 | 7.2 |
| CVE-2020-11710 | 106 | 0.94 | 9.8 |
| CVE-2015-4000 | 66,881 | 0.94 | 3.7 |
| CVE-2015-3306 | 3,671 | 0.94 | 10.0 |
| CVE-2015-1641 | 2,088 | 0.94 | 7.8 |
| CVE-2024-37032 | 78 | 0.94 | 8.8 |
| CVE-2008-4250 | 40 | 0.94 | 10.0 |
| CVE-2022-33891 | 23 | 0.94 | 8.8 |
| CVE-2021-28164 | 248 | 0.93 | 5.3 |
View all top 100 most prevalent CVEs
| CVE ID | Count | EPSS | CVSS |
|---|---|---|---|
| CVE-2023-44487 | 1,673,351 | 0.94 | 7.5 |
| CVE-2025-23419 | 1,631,910 | 0.03 | 5.3 |
| CVE-2013-4365 | 1,481,597 | 0.07 | 7.5 |
| CVE-2013-2765 | 1,481,597 | 0.05 | 5.0 |
| CVE-2013-0942 | 1,481,597 | 0.0050 | 4.3 |
| CVE-2013-0941 | 1,481,597 | 0.0004 | 2.1 |
| CVE-2012-4001 | 1,481,597 | 0.0023 | 5.0 |
| CVE-2012-4360 | 1,481,597 | 0.0036 | 4.3 |
| CVE-2012-3526 | 1,481,597 | 0.02 | 5.0 |
| CVE-2011-2688 | 1,481,597 | 0.07 | 7.5 |
| CVE-2011-1176 | 1,481,597 | 0.0071 | 4.3 |
| CVE-2009-2299 | 1,481,597 | 0.0088 | 5.0 |
| CVE-2009-0796 | 1,481,597 | 0.61 | 2.6 |
| CVE-2007-4723 | 1,481,597 | 0.0020 | 7.5 |
| CVE-2025-58098 | 1,317,509 | 0.0003 | 8.3 |
| CVE-2025-49812 | 1,276,577 | 0.0013 | 7.4 |
| CVE-2026-35414 | 1,248,485 | 0.0002 | 4.2 |
| CVE-2023-51767 | 1,248,485 | 0.000070 | 7.0 |
| CVE-2008-3844 | 1,248,485 | 0.03 | 9.3 |
| CVE-2007-2768 | 1,248,485 | 0.0019 | 4.3 |
| CVE-2023-48795 | 1,161,369 | 0.54 | 5.9 |
| CVE-2025-59775 | 1,160,593 | 0.0007 | 7.5 |
| CVE-2025-65082 | 1,160,593 | 0.0016 | 6.5 |
| CVE-2023-51385 | 1,151,808 | 0.17 | 6.5 |
| CVE-2023-38408 | 1,149,710 | 0.64 | 9.8 |
| CVE-2025-26465 | 1,138,954 | 0.74 | 6.8 |
| CVE-2021-36368 | 1,137,258 | 0.0043 | 3.7 |
| CVE-2024-40898 | 1,134,085 | 0.0055 | 7.5 |
| CVE-2016-20012 | 1,133,844 | 0.15 | 5.3 |
| CVE-2025-32728 | 1,130,968 | 0.0027 | 4.3 |
| CVE-2024-43394 | 1,119,661 | 0.0005 | 7.5 |
| CVE-2024-47252 | 1,119,661 | 0.0018 | 7.5 |
| CVE-2024-42516 | 1,119,661 | 0.0034 | 7.5 |
| CVE-2024-43204 | 1,119,661 | 0.0023 | 7.5 |
| CVE-2023-38709 | 1,102,617 | 0.04 | 7.3 |
| CVE-2021-41617 | 1,054,447 | 0.0027 | 7.0 |
| CVE-2025-66200 | 1,043,733 | 0.0007 | 5.4 |
| CVE-2020-15778 | 977,417 | 0.61 | 7.4 |
| CVE-2024-38477 | 968,995 | 0.02 | 7.5 |
| CVE-2024-39573 | 968,995 | 0.03 | 7.5 |
| CVE-2024-38472 | 968,995 | 0.90 | 7.5 |
| CVE-2024-38473 | 968,995 | 0.88 | 8.1 |
| CVE-2024-38474 | 968,995 | 0.0099 | 9.8 |
| CVE-2024-38475 | 968,995 | 0.94 | 9.1 |
| CVE-2024-38476 | 968,995 | 0.05 | 9.8 |
| CVE-2023-31122 | 955,970 | 0.0043 | 7.5 |
| CVE-2024-24795 | 945,701 | 0.01 | 6.3 |
| CVE-2021-3618 | 942,498 | 0.0062 | 7.4 |
| CVE-2025-53020 | 938,371 | 0.01 | 7.5 |
| CVE-2020-14145 | 923,913 | 0.02 | 5.9 |
| CVE-2006-20001 | 918,509 | 0.0044 | 7.5 |
| CVE-2022-37436 | 918,509 | 0.0054 | 5.3 |
| CVE-2022-28330 | 867,463 | 0.0056 | 5.3 |
| CVE-2022-28614 | 867,463 | 0.0059 | 5.3 |
| CVE-2022-28615 | 867,463 | 0.01 | 9.1 |
| CVE-2022-29404 | 867,463 | 0.02 | 7.5 |
| CVE-2022-30556 | 867,463 | 0.0051 | 7.5 |
| CVE-2022-31813 | 867,463 | 0.0004 | 9.8 |
| CVE-2022-22719 | 857,637 | 0.29 | 7.5 |
| CVE-2022-22720 | 857,637 | 0.27 | 9.8 |
| CVE-2022-22721 | 857,637 | 0.13 | 9.1 |
| CVE-2025-49630 | 850,745 | 0.01 | 7.5 |
| CVE-2025-55753 | 833,059 | 0.0010 | 7.5 |
| CVE-2019-6109 | 824,087 | 0.10 | 6.8 |
| CVE-2019-6111 | 824,087 | 0.55 | 5.9 |
| CVE-2018-20685 | 824,086 | 0.03 | 5.3 |
| CVE-2019-6110 | 824,085 | 0.58 | 6.8 |
| CVE-2021-23017 | 822,904 | 0.74 | 7.7 |
| CVE-2018-15473 | 791,520 | 0.90 | 5.3 |
| CVE-2017-15906 | 786,765 | 0.03 | 5.3 |
| CVE-2025-23048 | 786,651 | 0.0003 | 9.1 |
| CVE-2023-25690 | 764,919 | 0.68 | 9.8 |
| CVE-2024-27316 | 764,411 | 0.89 | 7.5 |
| CVE-2022-36760 | 761,593 | 0.0029 | 9.0 |
| CVE-2021-44790 | 719,342 | 0.86 | 9.8 |
| CVE-2018-15919 | 717,275 | 0.02 | 5.3 |
| CVE-2024-3566 | 711,605 | 0.07 | 9.8 |
| CVE-2013-2220 | 711,605 | 0.03 | 7.5 |
| CVE-2007-3205 | 711,605 | 0.0100 | 5.0 |
| CVE-2022-26377 | 710,547 | 0.39 | 7.5 |
| CVE-2021-34798 | 707,842 | 0.10 | 7.5 |
| CVE-2021-39275 | 707,842 | 0.38 | 9.8 |
| CVE-2021-40438 | 707,842 | 0.94 | 9.0 |
| CVE-2022-23943 | 700,721 | 0.61 | 9.8 |
| CVE-2021-32791 | 686,324 | 0.0034 | 5.9 |
| CVE-2021-32792 | 686,324 | 0.0017 | 3.1 |
| CVE-2021-32785 | 686,324 | 0.0026 | 5.3 |
| CVE-2021-32786 | 686,324 | 0.0009 | 4.7 |
| CVE-2023-45802 | 617,764 | 0.02 | 5.9 |
| CVE-2020-13938 | 543,170 | 0.0007 | 5.5 |
| CVE-2020-35452 | 543,170 | 0.11 | 7.3 |
| CVE-2021-26690 | 543,170 | 0.70 | 7.5 |
| CVE-2021-26691 | 543,170 | 0.40 | 9.8 |
| CVE-2019-17567 | 539,162 | 0.12 | 5.3 |
| CVE-2022-4900 | 527,072 | 0.0006 | 6.2 |
| CVE-2020-1927 | 526,519 | 0.11 | 6.1 |
| CVE-2020-1934 | 526,519 | 0.39 | 5.3 |
| CVE-2024-25117 | 523,301 | 0.0017 | 6.8 |
| CVE-2018-1301 | 484,450 | 0.07 | 5.9 |
| CVE-2018-1302 | 484,450 | 0.12 | 5.9 |
Programmatic Access — Daily Metrics API
Endpoint
GEThttps://data-status.shodan.io/report/banners-daily/{YYYY}/{YYYY-MM-DD}.json
Returns daily banner metrics, quality indicators, top ports, CVEs, countries, and delta vs. previous day.
curl -s https://data-status.shodan.io/report/banners-daily/2026/2026-04-27.json
import requests
data = requests.get("https://data-status.shodan.io/report/banners-daily/2026/2026-04-27.json").json()
print(f"Banners: {data['total_banners']:,}")
Response schema
{
"delta_vs_yesterday": {},
"quality_metrics": {
"attribute_completeness": {
"geo": 99.99,
"org": 99.99,
"product": 22.97
},
"completeness_ratio": 1.0,
"file_size": 132167925638,
"hostname_scan_count": 0,
"hostname_scan_ratio": 0.0,
"malformed_lines": 0,
"malformed_ratio": 0.0,
"protocol_distribution": {
"tcp": 95.82,
"udp": 4.18
},
"unique_countries": 237,
"unique_cves": 16479,
"unique_hostnames": 0,
"unique_organizations": 454059,
"unique_port_count": 27357,
"unique_products": 16882,
"unique_protocols": 2
},
"sha1_checksum": "fabe17bd8ddd1d3814d2ab1dbdc7036e65186200",
"top_countries": [],
"top_cves": [],
"top_ports": [],
"top_products": [],
"total_banners": 141050945
}