Property

_shodan

The _shodan property contains information about how the banner was generated. It doesn't store any data about the port/ service itself.

Property Name Type Description Required
crawler string Unique ID of the crawler Yes
id string Unique ID of the banner; used in the "_shodan.options.referrer" to indicate when the current banner was generated as a result of another banner Yes
module string The initial protocol that the crawler used when talking to the service Yes
options _ShodanOptions Yes
ptr boolean Whether or not the crawler has a PTR entry

_ShodanOptions

Property Name Type Description Required
hostname string Hostname that was used to talk to the service (ex. for HTTP it would set the "Host:" header to this hostname)
referrer string Banner ID that triggered the creation of the current banner
scan string Unique scan ID that identifies the request that launched the scan


↑ TopSearch Queries
SearchFind results that were collected by the "smtp" module
shodan.module:smtp

↑ TopExample
{
    "crawler": "65683fa99d390e0163b89adb344e9233c7422efb",
    "id": "2581f30d-6df7-4111-af8b-a429c46f1d69",
    "module": "smtp",
    "options": {
        "hostname": "testserver.com",
        "referrer": "2581ab0d-6ce7-4111-af8b-a429c46a248c"
    }
}