Shodan Queries


Shodan is a search engine designed for discovering devices and services connected to the internet. Shodan indexes information from networked devices such as servers, routers, webcams, industrial control systems, a.o.

The tables below contain queries that can be used or serve as examples when performing queries using Shodan.

Exchange

EXCHANGE PROTOCOL FILTER SEARCH LINK
ANY ANY Microsoft Exchange: Search
ANY OWA X-OWA-Version -http.status:302 Search
2007 OWA “X-OWA-Version” “X-UA-Compatible: IE=EmulateIE7” -http.status:302 Search
2010 OWA http.favicon.hash:442749392 -http.status:302 Search
2013 OWA “X-OWA-Version:15.0.” -http.status:302 Search
2016 OWA “X-OWA-Version:15.1.” -http.status:302 Search
2019 OWA “X-OWA-Version:15.2.” -“X-OWA-Version:15.2.2562” -http.status:302 Search
SE OWA “X-OWA-Version:15.2.2562” Search
ANY IMAP4 product:exchange port:143,993 Search
ANY POP3 product:exchange port:110,995 Search
ANY Autodiscover hostname:autodiscover X-OWA-Version: Search
ANY HTTP + TLSv1.3 Microsoft Exchange: ssl.version:tlsv1.3 HTTP Search
ANY SMTP Product:Exchange port:25,465,587 Search
2003 ANY “Exchange 2003” Search
2000 ANY “Exchange 2000” Search
5.5 ANY “Exchange 5.5” Search

Misc

Service FILTER SEARCH LINK
Lync / Skype for Business “X-MS-Server-Fqdn” Search
Zimbra Webmail “Set-Cookie: ZM_LOGIN_CSRF” Search
Zarafa Webmail “Set-Cookie: ZARAFA_WEBACCESS” Search