security

We’ve recently decided to stop accepting cryptocurrency payments (again) and I wanted to share some of the issues we encountered.

Background

Shodan is a website aimed at technical users and organizations. We have nearly 5 million registered users which makes Shodan one of the larger security-related websites. Around 8 years

Shodan is turning 13 years old later this year and throughout that time we’ve kept an archive of all information we’ve ever seen. The regular search engine only shows recent information but we provide various methods for accessing Shodan’s historical data:

• IP information page
• Command-line interface
• API
• Shodan Trends

The

You have a long list of IPs and you quickly want to get a basic idea of what they’re running for the purpose of:

• Make sure they’re not exposing any unexpected services
• Filter out VPN IPs from a list of IOCs
• Prioritize IPs that have possible vulnerabilities

Introducing nrich, a

It’s now possible for enterprise customers to subscribe to a data feed of search results. Instead of running a search query every day to ask for new results you can stay connected to a new API endpoint and Shodan will send you any banners that meet the search criteria. Read

For more than a decade, Shodan has been singularly focused on understanding network services and devices available to the Internet. To that end, we’ve developed a lot of custom protocol parsers and tooling to get insights about exposed services. You can get a sense for the type of information that’s

The Internet looks different depending on where you live. The Chinese firewall is the classic example but there are lots of other instances as well. Many websites block traffic from countries in which they will never have customers. Data privacy concerns can require organizations to serve user requests from nearby

This year we rolled out the new main Shodan website and alongside it updated the look of all websites. There were a few specific goals that we had for the new look and feel:

• Reduce page sizes. The web is becoming increasingly bloated. Lets try to keep things lean.
• Remove

You want to learn more about Elastic clusters exposed to the Internet. You know that the Elastic service runs on port 9200 so you go ahead and search on Shodan for that port and you get nearly a million results. A quick glance shows that these results include:

• CDNs
• Honeypots

Shodan was originally designed as a tool to understand how technology use is changing on the Internet. The information collected from the Shodan crawlers would be able to provide users with a data-driven view of what the Internet looks like; i.e. not based on surveys or sampling of popular

Shodan has seen tremendous growth the past year both in terms of additional data collection as well as number of users. Due to that increased demand we started seeing cracks in the search engine performance. All of our websites are built on-top of the same public API that our customers