Understanding Shodan Dorks: A Comprehensive Guide


Shodan is a powerful search engine that allows users to find specific types of computers, devices, and information on the internet. By using specialized search queries, known as “dorks,” users can narrow down their search results to find exactly what they are looking for. In this article, we’ll explore some common Shodan dorks, explaining what they do and providing examples.

1. “port:”

The “port:” dork allows users to search for devices based on the port they are running services on. For example:
port:22

This query will return all devices running SSH on port 22.

2. “hostname:”

The “hostname:” dork allows users to search for devices based on their hostname. For example:

hostname:example.com

This query will return all devices with the hostname “example.com.”

3. “net:”

The “net:” dork allows users to search for devices within a specific IP range or subnet. For example:

net:203.0.113.0/24

This query will return all devices within the IP range 203.0.113.0/24.

4. “city:”

The “city:” dork allows users to search for devices based on their geographical location (city). For example:

city:"New York"

This query will return all devices located in New York City.

5. “os:”

The “os:” dork allows users to search for devices based on their operating system. For example:

os:"Windows"

This query will return all devices running a Windows operating system.

6. “country:”

The “country:” dork allows users to search for devices based on their country. For example:

country:"United States"

This query will return all devices located in the United States.

Connecting to blog.lzomedia.com... Connected... Page load complete