Shodan - Notes

Here are the basic search filters yous tin use:

    city: honour devices inward a detail city
    country: honour devices inward a detail country
    geo: yous tin overstep it coordinates
    hostname: honour values that agree the hostname
    net: search based on an IP or /x CIDR
    os: search based on operating system
    port: honour detail ports that are open
    before/after: honour results inside a timeframe


Search Examples

[ NOTE: You tin drib the quotes sometimes, on or thus queries, but yous oft ask them. I recommend yous simply purpose them all the time, because that e'er works. ]

Find Apache servers inward San Francisco:

apache city:"San Francisco"

Find Nginx servers inward Germany:

nginx country:"DE"

Find GWS (Google Web Server) servers:

"Server: gws" hostname:"google"

Find Cisco devices on a detail subnet:

cisco net:"216.219.143.0/24"

So yous basically convey or thus course of teaching of base of operations search term you’re looking for (shown inward orange) together with and thus yous narrow downwardly your search using the filters similar nosotros run into above.