Hostname
hostname:example.com
hostname:subdomain.example.com
hostname:example.com -hostname:subdomain.example.com
hostname:example.com,example.org
Organization
org:microsoft
org:"United States Department"
SSL/TLS Certificates
Self signed certificates
ssl.cert.issuer.cn:example.com ssl.cert.subject.cn:example.com
Expired certificates
ssl.cert.expired:true
ssl.cert.subject.cn:example.com
Autonomous System Number (ASN)
asn:ASxxxx
Network
net:x.x.x.x/x
Device Type
device:firewall
device:router
device:wap
device:webcam
device:media
device:"broadband router"
device:pbx
device:printer
device:switch
device:storage
device:specialized
device:phone
device:"voip phone"
device:"voip adaptor"
device:"load balancer"
device:"print server"
device:terminal
device:remote
device:telecom
device:power
device:proxy
device:pda
device:bridge
Operating System
os:"windows xp"
os:"windows 7"
os:"windows vista"
os:"windows 8"
os:"windows 2000"
os:"windows server 2003"
os:"windows server 2008"
os:"windows server 2012"
os:"windows server 2016"
os:"windows server 2019"
os:"linux 2.4"
os:"linux 2.6"
os:"linux 3.x"
Product
product:apache
product:microsoft
product:"microsoft iis"
product:nginx
product:android
product:chromecast
Customer Premises Equipment (CPE)
cpe:apple
cpe:microsoft
cpe:oracle
cpe:nginx
cpe:cisco
Server
server: nginx
server: apache
server: microsoft
server: cisco-ios
server: ubuntu
server: android
Ports
port:21
port:22
port:23
port:25
port:53
port:3389
Version
HTTP
Link
link:vpn
SSL/TLS Version
ssl.version:sslv3
ssl.version:tlsv1
ssl.version:tlsv1.1
ssl.version:tlsv1.2
ssl.version:tlsv1.3
Location
country:us
country:ru
country:de
city:chicago
Vulnerabilities
References
https://help.shodan.io/the-basics/search-query-fundamentals
https://beta.shodan.io/search/examples
https://beta.shodan.io/search/filters
https://developer.shodan.io/api/banner-specification
https://nmap.org/book/osdetect-device-types.html
https://en.wikipedia.org/wiki/List_of_Microsoft_Windows_versions