Hostname
hostname:example.com
hostname:subdomain.example.com
hostname:example.com -hostname:subdomain.example.com
hostname:example.com,example.org

Organization
org:microsoft
org:"United States Department"

SSL/TLS Certificates
Self signed certificates
ssl.cert.issuer.cn:example.com ssl.cert.subject.cn:example.com

Expired certificates
ssl.cert.expired:true

ssl.cert.subject.cn:example.com

Autonomous System Number (ASN)
asn:ASxxxx

Network
net:x.x.x.x/x

Device Type
device:firewall
device:router
device:wap
device:webcam
device:media
device:"broadband router"
device:pbx
device:printer
device:switch
device:storage
device:specialized
device:phone
device:"voip phone"
device:"voip adaptor"
device:"load balancer"
device:"print server"
device:terminal
device:remote
device:telecom
device:power
device:proxy
device:pda
device:bridge

Operating System
os:"windows xp"
os:"windows 7"
os:"windows vista"
os:"windows 8"

os:"windows 2000"
os:"windows server 2003"
os:"windows server 2008"
os:"windows server 2012"
os:"windows server 2016"
os:"windows server 2019"

os:"linux 2.4"
os:"linux 2.6"
os:"linux 3.x"

Product
product:apache
product:microsoft
product:"microsoft iis"
product:nginx
product:android
product:chromecast

Customer Premises Equipment (CPE)
cpe:apple
cpe:microsoft
cpe:oracle
cpe:nginx
cpe:cisco

Server
server: nginx
server: apache
server: microsoft
server: cisco-ios
server: ubuntu
server: android

Ports
port:21
port:22
port:23
port:25
port:53
port:3389

Version

HTTP

Link
link:vpn

SSL/TLS Version
ssl.version:sslv3
ssl.version:tlsv1
ssl.version:tlsv1.1
ssl.version:tlsv1.2
ssl.version:tlsv1.3

Location
country:us
country:ru country:de city:chicago

Vulnerabilities

References

https://help.shodan.io/the-basics/search-query-fundamentals
https://beta.shodan.io/search/examples
https://beta.shodan.io/search/filters
https://developer.shodan.io/api/banner-specification
https://nmap.org/book/osdetect-device-types.html
https://en.wikipedia.org/wiki/List_of_Microsoft_Windows_versions