Reports / shodan.io
shodan.io
We found 331 subdomains of shodan.io in certificate transparency logs, passive DNS and DNS brute force; 80 resolve right now, including api.shodan.io, account.shodan.io and developer.shodan.io. shodan.io is registered with Gandi SAS since 2012-08-22 and expires 2027-08-22. Its SSL certificate from Google Trust Services expires in 39 days. For email it has an SPF record, DMARC in monitor-only mode and no DKIM key on the common selectors we check.
- Registration
- Gandi SASSince 2012-08-22 · expires 2027-08-22
- SSL certificate
- 39 days leftGoogle Trust Services
- Subdomains
- 80 live331 discovered in total
- Email authentication
- SPF + DMARC onlyDMARC policy: none
DNS records
6 of 7 types| A2 |
|
| AAAA2 |
|
| MX3 |
|
| TXT5 |
|
| NS2 |
|
| CAA | No CAA records |
| SOA1 |
|
Live lookup, cached up to 5 min.
WHOIS / RDAP
via fallback:https://rdap.identitydigital.services/rdap/- Registrar
- Gandi SAS
- Registered
- 2012-08-22
- Expires
- 2027-08-22
- Last updated
- 2026-08-12
- Nameservers
- lady.ns.cloudflare.comed.ns.cloudflare.com
- Status
- active
RDAP with port-43 WHOIS fallback, cached up to 1 h.
SSL certificate
Valid, 39 days left- Issuer
- Google Trust ServicesCN=WE1,O=Google Trust Services,C=US
- Subject
- shodan.io
- Valid from
- 2026-08-18 09:49 UTC
- Valid until
- 2026-11-16 10:49 UTC
- Serial number
- 215365403037792923545669999761043487282
- Names covered (2)
- shodan.io*.shodan.io
Live TLS handshake on port 443, cached up to 6 h.
Subdomains
80 live · 331 discovered- 2000.shodan.io104.18.12.238
- account.shodan.io104.18.12.238
- api.shodan.io104.18.12.238
- atlantic.census.shodan.io188.138.9.50
- atlantic.dns.shodan.io209.126.110.38
- beta.shodan.io104.18.12.238
- blog.shodan.io104.18.12.238
- book.shodan.io104.18.12.238
- census12.shodan.io71.6.165.200
- census5.shodan.io93.120.27.62
- census6.shodan.io66.240.236.119
- census8.shodan.io66.240.192.138
- census9.shodan.io71.6.167.142
- chrono.shodan.io104.18.12.238
- classifier.dev.shodan.io174.138.61.239
- cli.shodan.io104.18.12.238
- ctl.shodan.io104.18.12.238
- cvedb.dev.shodan.io192.241.160.191
- cvedb.shodan.io104.18.12.238
- data-status.shodan.io104.18.12.238
- data.shodan.io104.18.12.238
- datapedia.shodan.io104.18.12.238
- developer.shodan.io104.18.12.238
- enterprise.shodan.io104.18.12.238
- entitydb.shodan.io104.18.12.238
- exploits.shodan.io104.18.12.238
- exposure.shodan.io104.18.12.238
- faviconmap.shodan.io104.18.12.238
- geonet.shodan.io104.18.12.238
- gravy.scanf.shodan.io137.184.13.100
- hashbrown.scanf.shodan.io147.182.247.10
- heimdal.metrics.shodan.io45.63.21.128
- heimdal.monitor.shodan.io137.184.3.119
- heimdal.scan4.shodan.io165.227.58.155
- heimdal.scan6.shodan.io137.184.9.17
- heimdal.scan6x.shodan.io137.184.9.17
- heimdal.scanf.shodan.io64.227.99.112
- heimdal.scani.shodan.io198.211.117.142
- heimdal.ug.scan.shodan.io164.90.157.212
- help.shodan.io104.18.12.238
- honeyscore.shodan.io104.18.12.238
- images.shodan.io104.18.12.238
- imap.shodan.io217.70.178.4
- internetdb.shodan.io104.18.12.238
- lgstream.shodan.io161.35.139.50
- lgstream2.shodan.io104.248.4.164
- llm.shodan.io104.18.12.238
- maintenance.shodan.io104.236.236.240
- malware-hunter.shodan.io104.18.12.238
- maps.shodan.io104.18.12.238
- maptiles.shodan.io104.18.12.238
- mastodon.shodan.io146.190.113.125
- milk.scanf.shodan.io159.89.124.112
- monitor.shodan.io104.18.12.238
- ns1.shodan.io162.243.164.140
- ns2.shodan.io138.68.199.36
- pop.shodan.io217.70.178.4
- rancher.dev.shodan.io159.89.178.191
- scan.data.shodan.io198.211.117.142
- scanme.scanf.shodan.io137.184.94.133
- sea.support.internal.shodan.io142.93.28.101
- shipfeed.data.shodan.io8.8.8.8
- ships.data.shodan.io143.198.50.234
- shiptracker.shodan.io45.55.163.215
- shodan.io104.18.12.238
- smtp.shodan.io217.70.178.3
- snippets.shodan.io104.18.12.238
- static-dev.shodan.io104.18.12.238
- static.shodan.io104.18.12.238
- status.shodan.io142.132.149.97
- stream-dev.shodan.io134.209.140.219
- stream.shodan.io104.18.12.238
- terminal.shodan.io104.18.12.238
- trends.shodan.io104.18.12.238
- updates-static.shodan.io104.18.12.238
- webhook.monitor.shodan.io138.68.227.220
- wire.shodan.io104.18.12.238
- www.shodan.io104.18.12.238
- xserver.fra.internal.shodan.io10.135.15.13
- xserver.sfo.internal.shodan.io10.138.72.1
No subdomains found.
251 more seen in CT logs and passive DNS that don't resolve now
- 138census8.shodan.io
- 142census9.shodan.io
- 165.shodan.io
- 182static.shodan.io
- 182www.shodan.io
- 200census12.shodan.io
- 2015-1census9.shodan.io
- 242maptiles.shodan.io
- 242monitor.shodan.io
- 2fdeveloper.shodan.io
- 2fimages.shodan.io
- 2fmonitor.shodan.io
- 2fwvvw.shodan.io
- 5.shodan.io
- accont.shodan.io
- accounts.shodan.io
- aje.census.shodan.io
- analog.data.shodan.io
- app.shodan.io
- assets.shodan.io
- atlantic2.census.shodan.io
- banana.scan6.shodan.io
- bass.scan6.shodan.io
- beastmaster.scan6.shodan.io
- below.shodan.io
- benning-150-226-87-174.shodan.io
- biscuit.scanf.shodan.io
- bone.scan6.shodan.io
- btea.shodan.io
- burger.scan6.shodan.io
- butter.scanf.shodan.io
- careers.shodan.io
- casa.shodan.io
- cens.shodan.io
- censis.shodan.io
- censis12.shodan.io
- census.shodan.io
- census1.shodan.io
- census10.shodan.io
- census11.shodan.io
- census2.shodan.io
- census27.shodan.io
- census28.shodan.io
- census29.shodan.io
- census3.shodan.io
- census4.shodan.io
- census7.shodan.io
- census999.shodan.io
- censys8.shodan.io
- cent.shodan.io
- cereal.scanf.shodan.io
- cesus7.shodan.io
- cf3.shodan.io
- cia-vault7.shodan.io
- cloud39-145-20-160.shodan.io
- community.shodan.io
- croissant.scanf.shodan.io
- cve.shodan.io
- data1.shodan.io
- devehper.shodan.io
- developers.shodan.io
- device.shodan.io
- direct.shodan.io
- dlink-rep.shodan.io
- dlink-report.shodan.io
- dns.shodan.io
- dnsr1.scan6.shodan.io
- docs.shodan.io
- donut.scanf.shodan.io
- eggs.scanf.shodan.io
- explore.shodan.io
- fitness.scan6.shodan.io
- gateway.scan6.shodan.io
- generic-unmanaged-httpsaccount.shodan.io
- granada.shodan.io
- gravwell.test.shodan.io
- grimace.data.shodan.io
- haccount.shodan.io
- hounds.data.shodan.io
- httpslavww.shodan.io
- httpswww.shodan.io
- icn50.shodan.io
- ics-apac-2017.shodan.io
- ics-radar.shodan.io
- icsmap.shodan.io
- icsradar.shodan.io
- image.shodan.io
- imap.mail.pop3.smtp.ftp.shodan.io
- imap4.pop3.smtp.ftp.shodan.io
- imap4.www.pop3.smtp.ftp.shodan.io
- iocensus12.shodan.io
- isus.shodan.io
- itracker.data.shodan.io
- juice.scanf.shodan.io
- kermit.nyhub.stream.shodan.io
- m247.ro.shodan.io
- mail.pop3.smtp.ftp.shodan.io
- maltego.shodan.io
- malware-hunter.cemsus.shodan.io
- malware-hunter.cencus.shodan.io
- malwarehunter.shodan.io
- mango.threatnet.shodan.io
- mason.censys.shodan.io
- mcp.shodan.io
- me.shodan.io
- mod.ug.scan.shodan.io
- mqttmon.shodan.io
- mx.ftp.shodan.io
- mx.pop3.smtp.ftp.shodan.io
- mx.www.pop3.smtp.ftp.shodan.io
- naccount.shodan.io
- ncensus6.shodan.io
- ncensus8.shodan.io
- no-realvwnna.shodan.io
- no-reolvwma.shodan.io
- no-replvanna.shodan.io
- node1.tracemap.shodan.io
- node10.tracemap.shodan.io
- node11.tracemap.shodan.io
- node12.tracemap.shodan.io
- node13.tracemap.shodan.io
- node14.tracemap.shodan.io
- node15.tracemap.shodan.io
- node16.tracemap.shodan.io
- node17.tracemap.shodan.io
- node18.tracemap.shodan.io
- node19.tracemap.shodan.io
- node2.tracemap.shodan.io
- node20.tracemap.shodan.io
- node21.tracemap.shodan.io
- node22.tracemap.shodan.io
- node23.tracemap.shodan.io
- node24.tracemap.shodan.io
- node25.tracemap.shodan.io
- node3.tracemap.shodan.io
- node4.tracemap.shodan.io
- node5.tracemap.shodan.io
- node6.tracemap.shodan.io
- node7.tracemap.shodan.io
- node8.tracemap.shodan.io
- node9.tracemap.shodan.io
- notifier.alerts.shodan.io
- ns-01-nyc1.dns.shodan.io
- ns-01-sfo1.dns.shodan.io
- ns-02-nyc1.dns.shodan.io
- ns-02-sfo1.dns.shodan.io
- ns-03-nyc1.dns.shodan.io
- ns-03-sfo1.dns.shodan.io
- ns-04-nyc1.dns.shodan.io
- ns-04-sfo1.dns.shodan.io
- ns-05-nyc1.dns.shodan.io
- ns-05-sfo1.dns.shodan.io
- nt.shodan.io
- nternetdb.shodan.io
- ny.private.shodan.io
- nyhub.stream.shodan.io
- onitor.shodan.io
- oracle.dns.shodan.io
- pancake.scanf.shodan.io
- pdf.shodan.io
- poll.threatnet.shodan.io
- pretzel.scanf.shodan.io
- private-eu.shodan.io
- private.shodan.io
- prodc.shodan.io
- pypi.shodan.io
- r36-disa-baha-v724.shodan.io
- r43-disa-colv-v250.shodan.io
- r50-disa-daaa-v485.shodan.io
- radar.shodan.io
- rancher.packet.dev.shodan.io
- ro.shodan.io
- robot.shodan.io
- rock.scan6.shodan.io
- salsa.scanf.shodan.io
- scadanet1.shodan.io
- scan4.shodan.io
- scan6.shodan.io
- scanhub.shodan.io
- scanme.shodan.io
- scanner.shodan.io
- search.shodan.io
- simple.shodan.io
- sky.cencus.shodan.io
- smtp.mail.pop3.smtp.ftp.shodan.io
- sp.tn.shodan.io
- steps.scan6.shodan.io
- t.shodan.io
- tensor100012031.shodan.io
- test.scan.shodan.io
- test.shodan.io
- thor.data.shodan.io
- thor.scan6.shodan.io
- threatnet.shodan.io
- tn.shodan.io
- toast.scanf.shodan.io
- tpe50.shodan.io
- tracemap.shodan.io
- tracemap1.shodan.io
- tracemap10.shodan.io
- tracemap11.shodan.io
- tracemap12.shodan.io
- tracemap13.shodan.io
- tracemap14.shodan.io
- tracemap15.shodan.io
- tracemap16.shodan.io
- tracemap17.shodan.io
- tracemap18.shodan.io
- tracemap19.shodan.io
- tracemap2.shodan.io
- tracemap20.shodan.io
- tracemap21.shodan.io
- tracemap22.shodan.io
- tracemap23.shodan.io
- tracemap24.shodan.io
- tracemap25.shodan.io
- tracemap26.shodan.io
- tracemap27.shodan.io
- tracemap28.shodan.io
- tracemap3.shodan.io
- tracemap4.shodan.io
- tracemap5.shodan.io
- tracemap6.shodan.io
- tracemap7.shodan.io
- tracemap8.shodan.io
- tracemap9.shodan.io
- u002fbeta.shodan.io
- u003ecensus12.shodan.io
- u003edirect.shodan.io
- ukwww.shodan.io
- unt.shodan.io
- v2113-mc-et-user-3-214-68.shodan.io
- valw.shodan.io
- vavw.shodan.io
- vnvw.shodan.io
- waffles.scanf.shodan.io
- webcambrowser.shodan.io
- weight.scan6.shodan.io
- welcome.scan6.shodan.io
- wiki.shodan.io
- wildcard.shodan.io
- world-reachable.shodan.io
- wvay.shodan.io
- www01.fra.stream.shodan.io
- www01.sfo.stream.shodan.io
- www02.fra.stream.shodan.io
- www02.sfo.stream.shodan.io
- www03.fra.stream.shodan.io
- www03.sfo.stream.shodan.io
- xserver.nyc3.internal.shodan.io
- xxxxxx.shodan.io
Shared infrastructure, collapsed:
61× *.census.shodan.io
Sources: certspotter 9 · subfinder 191 · rapiddns 82 · virustotal 198
From CT logs, passive DNS (25+ sources) and brute-force. Live means it resolves now.
Email security
SPF Present
v=spf1 ip4:216.117.2.180 ip4:69.72.37.146 include:_spf.google.com -all
DMARC Present
p=none
v=DMARC1; p=none; rua=mailto:devops@shodan.io; aspf=r;
DKIM None found
No key on the common selectors.
DKIM checked on 29 common selectors; custom ones can't be discovered. Cached up to 1 h.
Got an email from shodan.io asking you to change bank details? Check it before you pay
Get this report as JSON
One call returns everything on this page. Each section is also its own endpoint.
curl "https://domain-intelligence-api.p.rapidapi.com/lookup/shodan.io" \
-H "X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com" \
-H "X-RapidAPI-Key: YOUR_RAPIDAPI_KEY"
import requests
r = requests.get(
"https://domain-intelligence-api.p.rapidapi.com/lookup/shodan.io",
headers={
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
},
timeout=30,
)
print(r.json())
// Node 18+ (built-in fetch)
const res = await fetch(
"https://domain-intelligence-api.p.rapidapi.com/lookup/shodan.io",
{ headers: {
"X-RapidAPI-Host": "domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key": "YOUR_RAPIDAPI_KEY",
} }
);
console.log(await res.json());
<?php
$ch = curl_init("https://domain-intelligence-api.p.rapidapi.com/lookup/shodan.io");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, [
"X-RapidAPI-Host: domain-intelligence-api.p.rapidapi.com",
"X-RapidAPI-Key: YOUR_RAPIDAPI_KEY",
]);
$data = json_decode(curl_exec($ch), true);
print_r($data);
1,000 requests a month free, no card
Paid plans up to 5M a month
?wait=1 waits for every subdomain source to finish