Why don't I show up in shodan?
from bigdickdonkey@lemmy.ca to selfhosted@lemmy.world on 22 Nov 19:09
https://lemmy.ca/post/33501546

I noticed nothing I have setup shows up in shodan by ip or domain. I’m not complaining, I’d rather not have it show up but I’m curious why. Could it be because of hosting behind a reverse proxy?

#selfhosted

threaded - newest

Cyberkillen@infosec.pub on 22 Nov 19:34 next collapse

Shodan has web crawlers to grab hosts, not everything has been crawled so there is a chance it will appear eventually.

EmbarrassedDrum@lemmy.dbzer0.com on 22 Nov 20:09 next collapse

if you’ll have more connections or mentions on other IPs or websites, that’ll grow the chances of them scanning your IP too.

You should read about how their crawler decide what to crawl and when*. After all, there’s 4 Billion IPv4 addresses, and much more IPv6 (tho I don’t know how much of them are used), and they don’t just randomly spin up numbers to scan.

  • I once read an article explaining how they did this, can’t find it now. I’ll send it if I do find it.
moonpiedumplings@programming.dev on 22 Nov 20:27 collapse

www.zoomeye.hk

Similar site as shodan, but different company. I’d recommend checking there as well.

bigdickdonkey@lemmy.ca on 22 Nov 21:00 collapse

Interesting my ip shows up with a plex logo and a port that I’ve never opened. I have never used any plex services

moonpiedumplings@programming.dev on 22 Nov 22:07 next collapse

It could be an old service on that same ip. Zoomeye/shodan don’t rescan on the spot, they keep records of old scans.

Auli@lemmy.ca on 24 Nov 00:03 collapse

Dynamic ip mine changes about at least once a month.