achillean

6 ms·

1.
by achillean 2mo ago
The numbers are a bit lower if you exclude honeypots (~2k hosts): https://www.shodan.io/search/report?query=rockwell+port%3A44... And the problem has actually gotten better over the years: https://trends.sho
2.
by achillean 3mo ago
We are writing https://terminal.shodan.io using iced and the development aspect has been great. Biggest issues are around distributing on Windows.
3.
by achillean 7mo ago
There will be some honeypots in this data but this is a start: https://www.shodan.io/search/report?query=product%3Atelnetd+...
4.
by achillean 7mo ago
FYI: it might be better to search by port:23 https://www.shodan.io/search?query=port%3A23 Or to filter by product:telnetd https://www.shodan.io/search?query=product%3Atelnetd A query of "telnet" s
5.
by achillean 7mo ago
Port 23 has decreased significantly over the past decade: https://i.imgur.com/tZoTWu6.png Still seeing a sizable number of open ports but it's on the decline.
6.
by achillean 8mo ago
FYI we released a tool to calculate a bunch of these types of hashes: https://book.shodan.io/command-line-tools/shodan-hash/ More info about the favicon hashing technique: https://blog.shodan.io/de
7.
by achillean 8mo ago
Already seeing some of the new Moltbot deployments exposed to the Internet: https://www.shodan.io/search/report?query=http.favicon.hash%...
8.
by achillean 8mo ago
I had a similar experience where a competitor released an academic paper rife with mistakes and misunderstandings of how my software worked. Instead of reaching out and trying to understand how their system was different than mine they used
9.
by achillean 9mo ago
Honeypots are advertising that header as well nowadays: https://www.shodan.io/search/report?query=x-clacks-overhead Most of the non-honeypot results are for the Gargoyle Router Management interface exposed by Korea Tel
10.
by achillean 9mo ago
Maybe it depends on the type of business/ customers that you have because I've had the opposite experience. For us as a security SaaS, B2B enterprise is incredibly stable and predictable. B2C has a lot more variability and payment
11.
by achillean 9mo ago
Searching for ALPR was also one of the popular early queries: https://github.com/jakejarvis/awesome-shodan-queries?tab=rea... The old PIPS ALPR devices aren't online anymore but they had horrible security as well.
12.
by achillean 1y ago
Shodan also has built-in detection for some of them. For example, you can search for "product:ollama" ( https://www.shodan.io/search?query=product%3Aollama ). Or if you have access to the tag filter then simply &quo
13.
by achillean 1y ago
Around 40,000 services on the Internet are currently including the header: https://www.shodan.io/search/report?query=x-clacks-overhead+... For some reason, a lot of honeypots are also using that header so I filtered th
14.
by achillean 1y ago
There are still more than 300,000 services on the Internet that support SSLv2: https://www.shodan.io/search/report?query=ssl.version%3Asslv... And a trend line of how it's changed: https://trends.shodan
15.
by achillean 1y ago
In absolute numbers probably not highly representative but the relative numbers are meaningful to measure adoption. And no, it requires the user to disable authentication in order to get the service details to differentiate between Redis an
16.
by achillean 1y ago
Based on Internet-accessible services the number of Valkey servers is low (~120): https://trends.shodan.io/search?query=valkey_version+port%3A... Here's a chart of all Redis-compatible services (~55,000): https:/
17.
by achillean 2y ago
It's not anymore! They actually changed their defaults and it helped tremendously to reduce the exposure of Redis instances on the Internet.
18.
by achillean 2y ago
We released a tool to calculate the favicon hash called "favscan": https://blog.shodan.io/deep-dive-http-favicon/ And here's a map of favicons that Shodan has seen across the Internet: https:/&#x2F
19.
by achillean 2y ago
We developed "geodns" for situations where you want to do DNS lookups from different regions around the world. For example, ycombinator.com returns different IPs depending on your location: $ geodns ycombinator.com 108.156.1
20.
by achillean 2y ago
Looks like there are at least a few hundred instances of OpenEMR exposed to the Internet: https://www.shodan.io/search/report?query=http.favicon.hash%...
21.
by achillean 2y ago
A few others: - Want to distribute data to users that don't want to manage a server? A lot of people don't want to manage a server and don't need the best possible performance. - Want to take data with you on a thumb drive an
22.
by achillean 3y ago
Note that all of them have been flagged as honeypots by Shodan (see the "Tags" section below the IP in the top left).
23.
by achillean 3y ago
Among the non-standard ports for SSH, 443 is in the top ports used: https://www.shodan.io/search/facet?query=ssh&facet=port https://www.shodan.io/search/facet.png?query=ssh&facet=port Port
24.
by achillean 3y ago
We do it for https://internetdb.shodan.io
25.
by achillean 3y ago
Looks like there are still quite a few? https://www.shodan.io/search/report?query=product%3A%22Outlo...
26.
by achillean 3y ago
Show a demo of the CLI without the end-user having to install anything. A recording gives a sense of the expected latency/ performance of the commands and is easier to digest for many than a wall of commands. Plus it uses minimal bandw
27.
by achillean 3y ago
Gravwell ( https://www.gravwell.io ) has a community edition that's free to use and runs locally.
28.
by achillean 3y ago
If you're looking for something that can handle unstructured data and has a similar query syntax to Splunk then Gravwell ( https://www.gravwell.io ) might be a fit.
29.
by achillean 3y ago
As a vendor that tried accepting crypto I can confirm that it's basically non-existent. And the few transactions that do take place have a lot more issues than regular payments: https://blog.shodan.io/accepting-crypto-a
30.
by achillean 3y ago
It's the 2nd most popular SSH daemon across the Internet: https://www.shodan.io/search/facet?query=port%3A22&facet=pro...

More ›