Shodan Reviews

Social recommendations and mentions

• Is it safe to have Nginx Proxy Manager point to my Octoprint docker instance - so I can reach it via https://octo.jdsmn21personaldomain.com (fake address) from outside my network?

  Your second method is not secure. Your domain might be obscure, but the IP address of the server is not, so it doesn't matter. Websites such as https://shodan.io exist, if you fancy finding some OctoPrint instances exposed to the internet. If people don't add extra security their webcams are exposed to the world without even OctoPrint's login, so just don't do it. - Source: Reddit / 1 day ago

• Am I safe?

  I back this recommendation. If for any reason you need to keep 443 open, I advise that you install an intrusion detection system such as Crowdsec in addition. Also, give a look at shodan.io for your ip and check for the detected vulnerabilities. - Source: Reddit / 15 days ago

• Chaotic good hacker

  I've heard of people going to shodan.io and sending warnings just like this. - Source: Reddit / about 1 month ago

• Is my Synology getting port-scanned?

  The easiest way of determining what you are exposing, short of an online portscan, is probably entering your IP address into shodan.io. - Source: Reddit / about 1 month ago

• someone on my server spammed the refresh button so fast i thought i was getting DDOSed before my eyes lmao

  Not sure how many ppl that would ddos would use the minecraft ping system for that XD but yeah honestly this is kinda normal I get this all the time; it only gets worse the more players you have. Or if your put into a list like ones on shodan.io. - Source: Reddit / about 1 month ago

• Port Sniffer made in Rust

  You can! Also detect if it's a public IP and use Shodan.io to display "offline" port-scans which is a cool idea. I played around with this for RustScan, something like "hey user, shodan.io scanned this server 2 days ago. Do you want to see what ports they reported were open without scanning?". - Source: Reddit / about 1 month ago

• Network mapping softwares

  Nmap, zenmap (gui), and angryIP are my GoTos for internal networks. If you want external networks - shodan.io is good. - Source: Reddit / about 2 months ago

• Anywhere I can advertise a bounty for my site?

  Everything the others have said + also use https://securityheaders.com/ & shodan.io if you haven't already to see if there is anything obvious. - Source: Reddit / 2 months ago

• tramsfems are based because who else just leaks the tsa no fly list for the funsies

  Meh, a bored ape could do the same with shodan.io or google if given enough time to comb through data. - Source: Reddit / 2 months ago

• I went from making $10 an hour to $155k a year in 4 years with no college. AMA

  Door Open: There's a website called shodan.io ... Go crazy. lol. You can look at security cams, etc. All because they didn't put controls in place. - Source: Reddit / 2 months ago

• Mum Sees Book About to Fall on Child in TV Reflection newsflare

  That said, if you check services like shodan.io (which scans the internet for accessible IoT devices, among other things) you'll notice that many of them are wide open to the public and you can often simply connect using VideoLAN and watch people doing shit in their living room -- you know, like staring lifelessly at a box of light, clipping their toe nails, staring at their phone or generally doing their best to... - Source: Reddit / 3 months ago

• Many random icmp6 requests in firewall log

  I remember shodan.io setting up honeypot NTP servers and adding them to the public NTP pool (pool.ntp.org). They would log all source IP addresses and feed them into their automated scanners, which would give them a decent list of recently active machines, as most OSes automatically reach out to NTP servers to sync their clocks. - Source: Reddit / 3 months ago

• Unknown open port on my Router

  Try looking it up on something like shodan.io , to see if the open port is actually exposed. - Source: Reddit / 3 months ago

• Can you safely expose ports on your home network?

  You'll eventually show up on shodan.io. - Source: Reddit / 3 months ago

• How come DDoS attack services are easily findable and ready for use?

  Or you can go to shodan.io and search vuln:CVE-2019-0708 and exploit the BlueKeep vulnerability and then you have your own botnet. You might have to do other things along the way, but it probably won't be too hard if you know what you are doing. - Source: Reddit / 4 months ago

• Can't block port 443/80 from WAN??

  Testing from WAN side I believe the ports are being blocked as I can't access anything. However shodan.io indicates port 80 and 443 are open. - Source: Reddit / 4 months ago

• Is now the time to focus more on IoT security?

  And my last question, how influential is shodan.io for IoT attacks? Thankyou :). - Source: Reddit / 5 months ago

• On Unsecured Webcams

  In some you can pan tilt and move the camera, which is neat. Also some people use shodan.io to find these too, although it is a bit complex for beginners. You can use https://www.exploit-db.com/ too. http://68.231.64.215:8080/frame.html?src=1&mode=0&width=320&height=240 this one is inside someones house, right now it is a middle aged watching tv. - Source: Reddit / 6 months ago

• How to Bypass Cloudflare: A Comprehensive Guide

  The actual "easiest" way (at least for me) to bypass Cloudflare is to find the actual IP of the web-server running behind it. Of course in a lot of cases it's not possible, for example when the web admin correctly limits the webserver to only respond to Cloudflare IP ranges, or if https://developers.cloudflare.com/ssl/origin-configuration/origin-ca/ is used. Most useful services for that are https://shodan.io/ and... - Source: Hacker News / 6 months ago

• Is having key only SSH enough security to open my ssh port?

  If you have a server with an exposed port and ssh running, look it up on shodan.io. - Source: Reddit / 6 months ago

• Someone left their Sonarr server unsecured on the internet — how do I get in contact with them?

  Lol you've not seen https://shodan.io. - Source: Reddit / 7 months ago