How to protect yourselves against Shodan scans?

[Caute_cautim]

Hi All

How do you protect yourselves from Shodan scans?

https://www.comparitech.com/blog/vpn-privacy/remove-device-shodan/

Blocking known Shodan scanners is a quick fix in situations where you can’t use a VPN and your devices need to be public-facing.

Regards

Caute_cautim

[tmekelburg1]

"Ask yourself whether your devices really need to be connected."

Every time I hear this recommended, I'm reminded of how much our industry needs to mature (along with IoT manufacturers, not just placing the blame on us). The future is almost everything in the house being "Smart". I'd rather us focus on the defense in depth model instead of being afraid of purchasing IoT devices.

"How do you protect yourselves from Shodan scans"

By conducting vulnerability scans ourselves and mitigating when possible. More time and attention should be spent on mitigating vulnerabilities on those open ports/services, not necessarily preventing the port scan to begin with. Who says the threat actors are just using Shodan? I personally use NMAP myself.

[mgorman]

I'm with you.  If your devices are on Shodan and you don't know every port they are showing, it is a failure on your part.  Blocking scanners is, possibly, a never-ending game, as they can just change addresses and keep going.  You can use the tool to check yourself, or hopefully, you have better tools at your disposal, and a level of automation to operate them efficiently.  Anyone who watches their Internet side traffic can see the scans that are nonstop, every day.  Whether it is Shodan, which at least shows them to you, or malicious actors looking for their next target, the information is easily collected.  Don't get angry at Shodan because they showed whether or not the emperor had clothes.