cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted
Community Champion

How to protect yourselves against Shodan scans?

Hi All

 

How do you protect yourselves from Shodan scans?

 

https://www.comparitech.com/blog/vpn-privacy/remove-device-shodan/

 

Blocking known Shodan scanners is a quick fix in situations where you can’t use a VPN and your devices need to be public-facing.

 

Regards

 

Caute_cautim

2 Replies
Highlighted
Contributor I

Re: How to protect yourselves against Shodan scans?

"Ask yourself whether your devices really need to be connected."

Every time I hear this recommended, I'm reminded of how much our industry needs to mature (along with IoT manufacturers, not just placing the blame on us). The future is almost everything in the house being "Smart". I'd rather us focus on the defense in depth model instead of being afraid of purchasing IoT devices.

"How do you protect yourselves from Shodan scans"

By conducting vulnerability scans ourselves and mitigating when possible. More time and attention should be spent on mitigating vulnerabilities on those open ports/services, not necessarily preventing the port scan to begin with. Who says the threat actors are just using Shodan? I personally use NMAP myself.
Highlighted
Contributor I

Re: How to protect yourselves against Shodan scans?

I'm with you.  If your devices are on Shodan and you don't know every port they are showing, it is a failure on your part.  Blocking scanners is, possibly, a never-ending game, as they can just change addresses and keep going.  You can use the tool to check yourself, or hopefully, you have better tools at your disposal, and a level of automation to operate them efficiently.  Anyone who watches their Internet side traffic can see the scans that are nonstop, every day.  Whether it is Shodan, which at least shows them to you, or malicious actors looking for their next target, the information is easily collected.  Don't get angry at Shodan because they showed whether or not the emperor had clothes.