security

For the past week, the massive „Internet of Things“ (IoT) botnet known as Kimwolf has been disrupting the The Invisible Internet Project (I2P), a decentralized, encrypted communications network designed to anonymize and secure online communications. I2P users started reporting disruptions in the network around the same time the Kimwolf botmasters began relying on it to evade takedown attempts against the botnet’s control servers.

A few notable usability improvements to the IP information page:

Web Technologies

Web technologies are now grouped by categories and we show version information (if available). The information was always grouped in the underlying JSON and we now also show it that way on the website. Learn more about the

Microsoft today released updates to fix more than 50 security holes in its Windows operating systems and other software, including patches for a whopping six „zero-day“ vulnerabilities that attackers are already exploiting in the wild.

As a quick recap, Shodan Trends is a website that lets you see how the Internet has changed over time. For example, you can use it to see how exposed industrial control systems have been over the years:

Up until now, the only option to download the information was to

A prolific data ransom gang that calls itself Scattered Lapsus ShinyHunters (SLSH) has a distinctive playbook when it seeks to extort payment from victim firms: Harassing, threatening and even swatting executives and their families, all while notifying journalists and regulators… Read More »

We’ve recently decided to stop accepting cryptocurrency payments (again) and I wanted to share some of the issues we encountered.

Background

Shodan is a website aimed at technical users and organizations. We have nearly 5 million registered users which makes Shodan one of the larger security-related websites. Around 8 years

Shodan is turning 13 years old later this year and throughout that time we’ve kept an archive of all information we’ve ever seen. The regular search engine only shows recent information but we provide various methods for accessing Shodan’s historical data:

IP information page
Command-line interface
API
Shodan Trends

The

You have a long list of IPs and you quickly want to get a basic idea of what they’re running for the purpose of:

Make sure they’re not exposing any unexpected services
Filter out VPN IPs from a list of IOCs
Prioritize IPs that have possible vulnerabilities

Introducing nrich, a

It’s now possible for enterprise customers to subscribe to a data feed of search results. Instead of running a search query every day to ask for new results you can stay connected to a new API endpoint and Shodan will send you any banners that meet the search criteria. Read

For more than a decade, Shodan has been singularly focused on understanding network services and devices available to the Internet. To that end, we’ve developed a lot of custom protocol parsers and tooling to get insights about exposed services. You can get a sense for the type of information that’s