Shodan 2000

https://2000.shodan.io/

by A_No_Name_Mouse • 5 years ago

166 56 5 years ago

2000.shodan.io

account-5• 5 years ago

Classic music, I like it.

ahartmetz• 5 years ago

The music is fantastic!

log4shelled• 5 years ago

Found an IP that got ransomwared: https://beta.shodan.io/host/40.112.148.234

V41frQo1SccpfHI• 5 years ago

what a strange name, "KINDERLULU" in german could be translated to "children's pee"

AndyJames• 5 years ago

If that's any indication of what could be on that system I say it's good it got ransomware

svdr• 5 years ago

Another one: https://beta.shodan.io/host/88.102.110.5

Ransomware has become really massive.

Hard_Space• 5 years ago

Wow, there's a lot of it about [1]. Happened to me about three years ago, so pretty chilling.

[1] https://beta.shodan.io/search?query=%22Your+files+are+encryp...

bognition• 5 years ago

For anyone trying to understand your foot print of internet attached devices Shodan is an invaluable resource.

It’s a great product and I’m continually amazed what the small team is able to accomplish.

stephen_g• 5 years ago

It seems pretty amazing just seeing some of the random results come up!

What I wonder, being unfamiliar how it actually works (since I don't have an account) - is the fact that my public IP comes up with 'No information available' just that no paid user has scanned it, or does it mean that my firewall is set up correctly? (I do allow ICMP but that's all for non established/related packets).

achillean3• 5 years ago

Typically it means you've configured your firewall correctly. Shodan continuously crawls the Internet so it's not based on user requesting scans. The IPv4 space is fairly small so Shodan just checks every IP (3+ billion) to find the services that run on it. Your activity/ use of Shodan doesn't affect how Shodan crawls the Internet - unless you request a scan using the API/ CLI. For more information: https://help.shodan.io/the-basics/what-is-shodan

igetspam3• 5 years ago

This is ridiculous fun

jamespwilliams• 5 years ago

It's a nice touch that the logo is done with pure HTML and CSS (well, other than the triangle, which is an SVG, albeit a simple one), so you can copy the text

anentropic• 5 years ago

what is it?

thinkharderdev2• 5 years ago

Shodan îs a search engine for internet-connected devices. There are a very surprising number of devices (security cameras, IoT thingamajigs, etc) connected directly to the internet.

boppo12• 5 years ago

What am I looking at here?

wizzwizz4• 5 years ago

This is… the internet.

igetspam3• 5 years ago

I think you meant:

THE INTERNET...NET...NET...Net...net...!!!

(I feel like that's a good representation for a booming echo effect.)

Varyag• 5 years ago

Is an semi-real-time readout of New(how new? Not sure) devices/addresses accessible from the internet, including unlisted stuff like power plants, fridges, Botswanan cable companies, etc.

mysterydip2• 5 years ago

the webcam datestamps have ranged from today to a couple weeks ago, so probably a mix

_joel• 5 years ago

Shodan is basically a port scan of the entire internet

acdha3• 5 years ago

Shodan port scans most of the internet and records the response, TLS certificates, etc. They have a search engine and tools like monitoring so you can run queries like “find anything where the certificate has this key (or organization name)” or “notify me any time a new port opens on my organization’s network.

This is the same data but a UI theme for nostalgic 90s internet users.

ArtWomb• 5 years ago

Does "compromised" actually mean pwn'd or just "i ping'd and it responded"?

Also, what should I be looking for in my own logs to see who is scanning me and using what? 99% its stuff I'm not running (wordpress, mysql).

Sosh101• 5 years ago

The (retro) future is now!

I love it.

lalalandland• 5 years ago

It's a little more informative to go to https://www.shodan.io

praptak• 5 years ago

Hmmm. What are the implications from the responsible disclosure point of view?

Some of these results look exploitable.

xwdv• 5 years ago

My advice, don’t worry about it.

jeroenhd• 5 years ago

Many of them already look exploited. You can try informing the owners, but many of the pwned devices are in consumer ISP subnets so I don't think you'll get far. Some of them might be honeypot as well.

It's just a visual thing for Shodan hosts, after all. I don't think the service is finding any new devices, it's just showing random interesting devices from the Shodan database.

marcosdumay• 5 years ago

Compared to just go scanning devices at random?

I'd guess scanning them yourself would be easier and faster, so if you want to invade some system, it's not adding anything for you.

throwaway984393• 5 years ago

I love it! It's anachronistic but I guess the vaporwave-art deco-retro motif always was. They should stream this on a wall at Defcon instead of the Wall of Sheep

mysterydip2• 5 years ago

The number of webcams, databases, and industrial automation (temp/hvac/motors/etc) controllers openly accessible is frightening.

somehowadev• 5 years ago

Whenever I need to make an argument against IoT, I just point to Shodan and the vast amount of broken/open but still connected devices.

Really doesn't take long to find some industrial automation there.

failrate• 5 years ago

Show your bosses that their equipment is showing up on shodan if you want to freak them out :)

29athrowaway• 5 years ago

And according to a some talks in YouTube, also power plants, traffic lights, etc.

jrwr• 5 years ago

Oh.. Its Static. All the "hacked" targets are pre-coded into the javascript

achillean3• 5 years ago

No, it's not static. The information is pulled from a file that gets updated by a separate script.

exhaze• 5 years ago

I love this. The 3D planar background + synthpop tune just make it. If I had to give this a name, I'd call it "retro marketing". I hope more companies do this kind of stuff.

TacticalCoder• 5 years ago

I love it and it's called "synthwave": neon / wireframe landscape / "metallic" letters with gradients in them and sometimes fake used VHS tape playback fx and of course synth music with lots of arpeggios, italo-disco style.

Makes me all nostalgic even though that genre wasn't identical back in the mid to late 80s/early 90s.

Vids are often featuring old sportcars from that era.

https://en.wikipedia.org/wiki/Synthwave

lloeki• 5 years ago

Here I was almost expecting the song to be a live-rendered actual .mod/.xm file (it's mp3), which also would have allow it to be continuously loopable.

... probably biased because I was introducing a younger friend previously oblivious to the modscene† a couple of hours ago through 4-mat's phantasmagoria.ntii (which has loop hints) and jester's elysium and stardust memories, the latter of which the Dolby Headphones rendering is quite enjoyable††.

† https://modarchive.org/index.php?request=view_chart&query=to...

†† https://www.youtube.com/watch?v=W1bgMX4UCjw

CaciaraAsAServi• 5 years ago

#shodansafari

maeln• 5 years ago

It showed an IP cam in Vietnam of what looked like an hospital room ... with a patient in the bed ... Scary

butz• 5 years ago

What's up with over a thousand of webcams in Switzerland, most marked with "honeypot" tag?

xz18r• 5 years ago

At Awingu, we did a study concerning open endpoints (specifically RDP as that's relevant for our product) and the numbers were staggering: 360k open RDP endpoints (many of which unpatched and ready for easy exploits) facing the public internet in only 6 European countries. https://www.awingu.com/study-security-threats-360k-companies...

yabones• 5 years ago

To the surprise of nobody, it's mostly Mongodb and Elasticsearch. Those wildly popular services with dangerous defaults.

ChrisArchitect• 5 years ago

Anything new here from 3 years ago (other than the live list of IPs obv)

badrabbit• 5 years ago

The theme is actually 80's and music sounds very 90s to me. This is what the 80s would feel like in 2000, is it the whole "the 80s were 20years ago" syndrome I wonder.

Shodan 2000

Related Stories