Skip to content

Shodan Update: May 2026

New

  • Certificate Transparency Log API docs. A new guide to ctl.shodan.io, which searches CT logs by domain or certificate hash and lists a domain’s hostnames.

Improved

  • More hostnames on banners. Hostnames from Shodan’s own hostname-based scans now appear in the top-level hostnames field.
  • Monitor alerts for domains with no active IPs. Domains that currently have no active IPs keep their alerts working.
  • Better detection accuracy. Noisy detections (LM Studio and AstrBot) were turned off until they could be made more accurate, and PostgreSQL version fingerprints were updated.

Data & Coverage

  • Null MX records in the DNS database. Records that mark a domain as not accepting email (RFC 7505) are now stored.
  • EU Vulnerability Database (EUVD). Data from ENISA’s EUVD is now in the vulnerability database, mapped to CVEs.