John Matherly (@achillean) header
John Matherly (@achillean) profile picture

John Matherly

@achillean

Founder of Shodan (@shodanhq), Internet Cartographer, @gravwell_io board member

 Seattle, WA
shodan.io
Joined October 2007
  • Tweets7K
  • Following458
  • Followers23.3K
171Media
Photo by John Matherly (@achillean)Photo by John Matherly (@achillean)Photo by John Matherly (@achillean)Photo by John Matherly (@achillean)Photo by John Matherly (@achillean)Photo by John Matherly (@achillean)Photo by John Matherly (@achillean)Photo by John Matherly (@achillean)
A quick look at SMB exposure on the Internet post-WannaCry: blog.shodan.io/analyzing-pos…
Analyzing Post-WannaCry SMB Exposure

Analyzing Post-WannaCry SMB Exposure

It's been a month since the WannaCry ransomware attack wrecked havoc across Windows networks via SMB and I'd like to take a moment to review where we're at today. Here are some numbers to kick things...

blog.shodan.io
11
76
6
139
The chart was generated by running the command "trend php" in terminal.shodan.io
Shodan (@shodanhq) profile pictureShodan@shodanhqOct 23
Chart showing the number of Internet-facing PHP services over time: trends.shodan.io/search?quer…
Image from Shodan (@shodanhq)
1
7
834
John Matherly retweeted
Shodan (@shodanhq) profile picture
Shodan@shodanhqOct 22
There have been a variety of vuln discoveries in the news recently. Reminder that you can add " asset:all" to any Shodan search query to see if any of your monitored assets are impacted. Or you can run the search from within Shodan Monitor (monitor.shodan.io)
Image from Shodan (@shodanhq)
1
9
60
5,986
John Matherly retweeted
Random Robbie (@Random_Robbie) profile picture
Random Robbie@Random_RobbieOct 20
Every smart building seems to announce itself. KNXnet/IP gateways answering on UDP 3671 — banner cards straight from Shodan: device type, KNX address, supported services. 11,000+ exposed. port:3671 tag:ics -tag:honeypot #shodansafari
Image from Random Robbie (@Random_Robbie)
1
1
419
John Matherly retweeted
Shodan (@shodanhq) profile picture
Shodan@shodanhqOct 15
See how the exposure of Danfoss refrigerators has changed over time: trends.shodan.io/search?quer…
Image from Shodan (@shodanhq)
2
3
1
20
4,376
John Matherly retweeted
Shodan (@shodanhq) profile picture
Shodan@shodanhqJun 10
Our vulnerability lookup API now also supports EUVD! We've updated cvedb.shodan.io to allow lookups by EUVD-ID and return EUVD information for CVEs when available
Image from Shodan (@shodanhq)
20
78
6,186
John Matherly retweeted
Shodan (@shodanhq) profile picture
Shodan@shodanhqJun 5
New release of Shodan Terminal (0.12.0): adds the ability to view screenshots in the search results and IP information page: terminal.shodan.io
Image from Shodan (@shodanhq)
3
29
3
156
18,682
John Matherly retweeted
Shodan (@shodanhq) profile picture
Shodan@shodanhqMay 18
For convenience, we offer an API around the CT Logs: ctl.shodan.io/ It has an API endpoint that returns the subdomains for a domain based on the CT Logs. Ex: ctl.shodan.io/api/v1/domain/… To learn more: book.shodan.io/developer-api…
1
17
86
11,691
You can now also follow Shodan on @[email protected]: mastodon.shodan.io/@shodan
Shodan (@shodan@mastodon.shodan.io)

Shodan (@[email protected])

243 Posts, 0 Following, 5.07K Followers · We offer external network monitoring, fast IP enrichment and various data feeds - all wrapped in a developer-friendly platform with an API-first approach.

mastodon.shodan.io
13
79
21,894
Accepting Crypto: A Vendor Perspective - blog.shodan.io/accepting-cry…

Accepting Crypto: A Vendor Perspective

We've recently decided to stop accepting cryptocurrency payments (again) and I wanted to share some of the issues we encountered. Background Shodan is a website aimed at technical users and organiz...

blog.shodan.io
1
10
I'll be on @cybeatstech podcast in a few minutes. Join us: youtube.com/watch?v=yoUVJa_m…
4
John Matherly retweeted
Shodan (@shodanhq) profile picture
Shodan@shodanhq5 May 2022
Facet Analysis lets you get a breakdown of the top values for a property across search results. For example, here's a breakdown of the supported SSL/TLS versions for services on port 443: shodan.io/search/facet?query…
Image from Shodan (@shodanhq)
9
23
John Matherly retweeted
Shodan (@shodanhq) profile picture
Shodan@shodanhq9 May 2022
Start your Internet safari using the new Explore page: shodan.io/explore
Image from Shodan (@shodanhq)
12
42
John Matherly retweeted
Cheatography (@Cheatography) profile picture
Cheatography@Cheatography2 May 2022
The wait is over! Shodan Cheat Sheet by sir_slammington cheatography.com/sir-slammin… #cheatsheet #recon #osint #shodan
2
44
3
93
John Matherly retweeted
Shodan (@shodanhq) profile picture
Shodan@shodanhq2 May 2022
Shodan Monitor gives you a real-time data feed of all information that it sees about your monitored networks. Learn how to consume that data feed and store the data in a local Splunk or Gravwell cluster: help.shodan.io/shodan-monito…
Image from Shodan (@shodanhq)
13
52
John Matherly retweeted
Shodan (@shodanhq) profile picture
Shodan@shodanhq14 Mar 2022
Introducing the InternetDB API: blog.shodan.io/introducing-t…
Image from Shodan (@shodanhq)
4
33
1
109
John Matherly retweeted
Shodan (@shodanhq) profile picture
Shodan@shodanhq15 Mar 2022
Introducing Data Feeds for Search Results: blog.shodan.io/introducing-d…
Image from Shodan (@shodanhq)
Image from Shodan (@shodanhq)
7
25
Last week we posted gift codes on our Shodan social media accounts on Twitter, Linkedin and Facebook without any context - just a list of random 32-character strings. Twitter users seemingly understood immediately and all codes were gone within 15 minutes.
1
2
21
It took Facebook users 3 hours to grab all their codes. Our followers on LinkedIn hadn't grabbed them by the end of the day so I told them what the codes were and then they were quickly gone.
9
John Matherly retweeted
Corey Thuen (@CoreyThuen) profile picture
Corey Thuen@CoreyThuen15 Feb 2022
You should watch the video because it's awesome, but the tl;dr is Gravwell CE is now free for personal *and* commercial use at 1/10th of an Astronomical Unit in Bytes per day (~14gb). Embark on a Quest for Omniscience! Collect logs, create dashboards, reduce attacker dwell time.
Gravwell (@gravwell_io) profile pictureGravwell@gravwell_io15 Feb 2022
An exciting update from Gravwell! Watch and read more at: hubs.la/Q014b41J0 #SecOps #DevOps #ITOps #DevSecOps #Gravwell #CommunityEdition #CE
1
1
2
John Matherly retweeted
Gravwell (@gravwell_io) profile picture
Gravwell@gravwell_io15 Feb 2022
An exciting update from Gravwell! Watch and read more at: hubs.la/Q014b41J0 #SecOps #DevOps #ITOps #DevSecOps #Gravwell #CommunityEdition #CE
4
1
5
Load more