Re:Shodan 2000
by thinkharderdev on Friday January 14, 2022 @08:29AM
(#29934189)
It's not looking for compromised devices, just anything with an open port. Conceptually they are just running an nmap scan of the entire public IP range and aggregating the results in a searchable index.
[ Parent
| on HN ]
How up-to-date is it?
They scan pretty regularly and with a membership you can submit scans on demand. Picking a /16 I work with, the oldest full scan is 12/15 and the newest is 1/14 — and I say “full scan” because the oldest hosts show far more recent updates (1/13) for things like the web server ports which had previously been found open.