Reports / shodan.io

shodan.io

Generated 2026-10-03 07:00 UTC Refresh data

We found 154 subdomains of shodan.io in certificate transparency logs, passive DNS and DNS brute force, including api.shodan.io, app.shodan.io and accounts.shodan.io. shodan.io is registered with Gandi SAS since 2012-08-22 and expires 2027-08-22. Its SSL certificate from Google Trust Services expires in 44 days. For email it has an SPF record, DMARC in monitor-only mode and no DKIM key on the common selectors we check.

Registration: Gandi SASSince 2012-08-22 · expires 2027-08-22
SSL certificate: 44 days leftGoogle Trust Services
Subdomains: 154 foundChecking which are live…
Email authentication: SPF + DMARC onlyDMARC policy: none

DNS records

6 of 7 types

GET/domain/shodan.io/dns

A2	104.18.13.238 104.18.12.238
AAAA2	2606:4700::6812:cee 2606:4700::6812:dee
MX3	1 aspmx.l.google.com. 5 alt1.aspmx.l.google.com. 5 alt2.aspmx.l.google.com.
TXT5	"google-site-verification=FZDvThk3fhaZTnxohWox3OG5lW9dpsPUc9rDNV0al18" "v=spf1 ip4:216.117.2.180 ip4:69.72.37.146 include:_spf.google.com -all" "MS=87251D03D1B817A70CC370D9FF17FFB7325A0110" "anthropic-domain-verification-cyb4ft=VdpzeWyM37LWIDAxqDIT4vAV0" "google-site-verification=BzXlMuKdXSAiX3v-VUo-M_ZZ1VPW3cwptvaIOWWGQ7c"
NS2	ed.ns.cloudflare.com. lady.ns.cloudflare.com.
CAA	No CAA records
SOA1	ed.ns.cloudflare.com. dns.cloudflare.com. 2416279259 10000 2400 604800 1800

Live lookup, cached up to 5 min.

WHOIS / RDAP

via fallback:https://rdap.identitydigital.services/rdap/

GET/domain/shodan.io/whois

Registrar: Gandi SAS
Registered: 2012-08-22
Expires: 2027-08-22
Last updated: 2026-08-12
Nameservers: lady.ns.cloudflare.comed.ns.cloudflare.com
Status: active

RDAP with port-43 WHOIS fallback, cached up to 1 h.

SSL certificate

Valid, 44 days left

GET/domain/shodan.io/ssl

Issuer: Google Trust ServicesCN=WE1,O=Google Trust Services,C=US
Subject: shodan.io
Valid from: 2026-08-18 09:49 UTC
Valid until: 2026-11-16 10:49 UTC
Serial number: 215365403037792923545669999761043487282
Names covered (2): shodan.io*.shodan.io

Live TLS handshake on port 443, cached up to 6 h.

Subdomains

154 found

GET/domain/shodan.io/subdomains

Slow sources are still finishing. This list updates by itself.

138census8.shodan.io
142census9.shodan.io
2000.shodan.io
200census12.shodan.io
2fmonitor.shodan.io
accont.shodan.io
accounts.shodan.io
api.shodan.io
app.shodan.io
assets.shodan.io
atlantic.dns.shodan.io
below.shodan.io
bone.scan6.shodan.io
book.shodan.io
btea.shodan.io
casa.shodan.io
cens.shodan.io
censis.shodan.io
censis12.shodan.io
census11.shodan.io
census2.shodan.io
census27.shodan.io
census29.shodan.io
census999.shodan.io
cent.shodan.io
cesus7.shodan.io
cia-vault7.shodan.io
cloud39-145-20-160.shodan.io
community.shodan.io
ctl.shodan.io
cvedb.dev.shodan.io
data-status.shodan.io
data.shodan.io
data1.shodan.io
devehper.shodan.io
developers.shodan.io
device.shodan.io
direct.shodan.io
dlink-rep.shodan.io
docs.shodan.io
dojo.census.shodan.io
eagle.census.shodan.io
entitydb.shodan.io
explore.shodan.io
exposure.shodan.io
faviconmap.shodan.io
fitness.scan6.shodan.io
flower.census.shodan.io
golfish.census.shodan.io
granada.shodan.io
heimdal.scan4.shodan.io
heimdal.scani.shodan.io
help.shodan.io
httpmalware-hunter.census.shodan.io
httpslavww.shodan.io
httpswww.shodan.io
hunter.census.shodan.io
ics-apac-2017.shodan.io
ics-radar.shodan.io
icsradar.shodan.io
imap.mail.pop3.smtp.ftp.shodan.io
imap.shodan.io
imap4.pop3.smtp.ftp.shodan.io
imap4.www.pop3.smtp.ftp.shodan.io
isus.shodan.io
lgstream.shodan.io
lgstream2.shodan.io
llm.shodan.io
m247.ro.shodan.io
mail.pop3.smtp.ftp.shodan.io
malware-hunter.cemsus.shodan.io
malware-hunter.cencus.shodan.io
malwarehunter.shodan.io
mason.censys.shodan.io
monitor.shodan.io
mx.ftp.shodan.io
mx.pop3.smtp.ftp.shodan.io
mx.www.pop3.smtp.ftp.shodan.io
naccount.shodan.io
ncensus6.shodan.io
ncensus8.shodan.io
no-realvwnna.shodan.io
no-reolvwma.shodan.io
node11.tracemap.shodan.io
node12.tracemap.shodan.io
ns-01-nyc1.dns.shodan.io
ns-03-nyc1.dns.shodan.io
ns1.shodan.io
ns2.shodan.io
nt.shodan.io
nternetdb.shodan.io
oracle.dns.shodan.io
pdf.shodan.io
pirate.census.shodan.io
poll.threatnet.shodan.io
private-eu.shodan.io
pypi.shodan.io
red2.census.shodan.io
robot.shodan.io
rock.scan6.shodan.io
scadanet1.shodan.io
scan4.shodan.io
scanme.shodan.io
scanner.shodan.io
sea.support.internal.shodan.io
search.shodan.io
security.census.shodan.io
sky.cencus.shodan.io
smtp.mail.pop3.smtp.ftp.shodan.io
snippets.shodan.io
static-dev.shodan.io
status.shodan.io
steps.scan6.shodan.io
stream-dev.shodan.io
t.shodan.io
tab.census.shodan.io
tensor100012031.shodan.io
terminal.shodan.io
tesla.census.shodan.io
test.shodan.io
tracemap1.shodan.io
tracemap11.shodan.io
tracemap12.shodan.io
tracemap13.shodan.io
tracemap14.shodan.io
tracemap15.shodan.io
tracemap16.shodan.io
tracemap17.shodan.io
tracemap18.shodan.io
tracemap19.shodan.io
tracemap2.shodan.io
tracemap20.shodan.io
tracemap22.shodan.io
tracemap24.shodan.io
tracemap25.shodan.io
tracemap26.shodan.io
tracemap27.shodan.io
tracemap28.shodan.io
tracemap3.shodan.io
tracemap4.shodan.io
tracemap5.shodan.io
tracemap6.shodan.io
tracemap8.shodan.io
tracemap9.shodan.io
trends.shodan.io
turtle.census.shodan.io
u002fbeta.shodan.io
u003ecensus12.shodan.io
ukwww.shodan.io
webcambrowser.shodan.io
wiki.shodan.io
wildcard.shodan.io
world-reachable.shodan.io
www.shodan.io

Sources: rapiddns 84

From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.

Email security

GET/domain/shodan.io/email-security

SPF Present

v=spf1 ip4:216.117.2.180 ip4:69.72.37.146 include:_spf.google.com -all

DMARC Present

p=none

v=DMARC1; p=none; rua=mailto:devops@shodan.io; aspf=r;

DKIM None found

No key on the common selectors.

DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.

Get this report as JSON

One call returns everything on this page. Each section is also its own endpoint.

curl "https://domain-intelligence-api.p.rapidapi.com/lookup/shodan.io" \
  -H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
  -H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"

import requests

r = requests.get(
    "https://domain-intelligence-api.p.rapidapi.com/lookup/shodan.io",
    headers={
        "X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
        "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
    },
    timeout=30,
)
print(r.json())

// Node 18+ (built-in fetch)
const res = await fetch(
  "https://domain-intelligence-api.p.rapidapi.com/lookup/shodan.io",
  { headers: {
      "X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
      "X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
  } }
);
console.log(await res.json());

<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/shodan.io");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
    "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
    "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
print_r($data);

1,000 requests a month free, no card Paid plans up to 5M a month ?wait=1 waits for every subdomain source to finish

Get free API key See pricing

More reports

auth0.com bitwarden.com intigriti.com bugcrowd.com virustotal.com censys.io greynoise.io abuseipdb.com All reports →