achillean

9 ms·

31.
by achillean 4y ago
I disagree on why people are into crypto, at least based on my own experience as a vendor ( https://blog.shodan.io/accepting-crypto-a-vendor-perspective... ) and every time there's a survey about why they're in cryp
32.
by achillean 4y ago
Then you're comparing server-side apps to client-side ones. And imo the attack surface of managing a SSR webapp is fairly minimal - especially when you're already responsible for providing an API to the public. My point was more t
33.
by achillean 4y ago
Why are those things mutually exclusive? You can have an API and then have a different app that uses that API with server-side rendering. I.e. instead of a client SPA you have a server app using the API.
34.
by achillean 4y ago
If the bot is running from a cloud instance then you can fairly easily block it using something like Zeek. For example: https://help.shodan.io/zeek-integration/4-blocking You could also check if the remote IP has any o
35.
by achillean 4y ago
The following can be done for free without an API key or Shodan account: 1. Grab the list of IPs that you've already identified and feed them through nrich ( https://gitlab.com/shodan-public/nrich ): "nrich bad
36.
by achillean 4y ago
There are at least a few hundred Gopher services running on the Internet: https://www.shodan.io/search/report?query=port%3A70+gopher
37.
by achillean 4y ago
It looks like port 5060 is becoming less common on their networks: https://trends.shodan.io/search?query=port%3A5060+org%3Achar...
38.
by achillean 4y ago
We store a few PB of data in Cassandra, have used it for nearly 10 years and in my opinion it's not that hard. Operationally it's way easier to manage than Elastic and most other databases (ex. PostgreSQL, MongoDB) plus there&#x27
39.
by achillean 4y ago
There's also Gravwell ( https://www.gravwell.io ) that competes head-on with Splunk and doesn't punish you for storing/ indexing more data. I'm on their board and knew the founders before I joined so I'm a
40.
by achillean 4y ago
If you're using Elastic then it's inefficient and discouraged to allow accessing random pages (ex. requesting page 100 before having visited pages 1-99). I.e. this could be a technical limitation and there aren't use-cases th
41.
by achillean 4y ago
The protocols are seeing a decline in deployments but they're still very popular. See the below for a trend of the protocol over the past 5 years: https://imgur.com/a/uIAiM9B
42.
Accepting Crypto: A Vendor Perspective(blog.shodan.io)
10 points by achillean 4y ago|0 comments
43.
by achillean 4y ago
Love this guide. It's what got me started with network programming.
44.
by achillean 4y ago
In terms of which cloud is running most services the breakdown is more like: https://www.shodan.io/search/facet?query=net%3A0%2F0&facet=c... - AWS - Digital Ocean - Microsoft - Tencent Cloud - Alibaba Cloud - Linod
45.
by achillean 4y ago
It can do a lot more and I didn't say it was impressive. What I am saying is that Python won't be the bottleneck for the vast majority of websites and that it will scale. And the raw performance of the underlying language is rarel
46.
by achillean 4y ago
Web development in Python is a lot of fun nowadays and has scaled just fine (we serve a few billion requests/ month). FastAPI makes writing APIs easy as well (it powers https://internetdb.shodan.io ) and for deployment check
47.
by achillean 4y ago
I'll second that :) SphereServer for me but it's also what got me into programming and I have very fond memories of using Dragon, InsideUO etc. to create a new world. I'm guessing kids today would do something similar with Mi
48.
by achillean 4y ago
For a more specific check, you could query internetdb.shodan.io and see if the client IP has port 22 open, has the "vpn" tag or is any other services that you wouldn't expect to see from a visitor. We have a bunch of enterpri
49.
by achillean 4y ago
The number of publicly-accessible SIP services has decreased significantly over the past few years: https://imgur.com/a/tqXclNi
50.
by achillean 4y ago
These are some public Gopher servers but not sure which ones are notable/ interesting: https://www.shodan.io/search?query=gopher+port%3A70
51.
by achillean 4y ago
I'll second the lack of information about playbooks/ running a middle-class company. It's a bit frustrating that everybody assumes you want to follow the VC model. Probably the most common question I get is when I'm goin
52.
by achillean 4y ago
https://internetdb.shodan.io is powered by a SQLite database and gets millions of requests a month. It does require a different workflow and custom synchronization scripts but otherwise it's performed well.
53.
by achillean 4y ago
Use of Lets Encrypt has grown steadily over the years: https://trends.shodan.io/search?query=ssl%3A%22Let+s+Encrypt... Its use is also growing in mail servers so it's not limited to HTTPS: https://trends.sho
54.
by achillean 5y ago
If anybody is looking for an alternative I recommend checking out Gravwell. They use a similar syntax but use an architecture that makes scaling horizontally easier. They also have a free tier that lets you index around 14GB/ day: htt
55.
by achillean 5y ago
> I never had the "hands off" hosting experience that cloud providers advertise in the first place. We've had exactly the same experience. From a business perspective it does mean that you can shift the blame if something
56.
by achillean 5y ago
There are still nearly 800 OpenTibia game servers available: https://www.shodan.io/search/report?query=product%3A%22OpenT...
57.
by achillean 5y ago
Sure, here you go: https://imgur.com/a/iTuuc94 Btw Shodan Trends ( https://trends.shodan.io ) is available to members as well. Membership costs a one-time payment of $49 for a lifetime account upgrade ( https
58.
by achillean 5y ago
It does look like it's growing but not at a crazy rate while MySQL has been declining: https://imgur.com/gallery/XJ3mDzz
59.
by achillean 5y ago
Yes, they do. For example: https://threatpost.com/plaintext-supermicro-ipmi-credentials... Here's a search for some of them (requires a Shodan account): https://www.shodan.io/search?query=ssl%3Aipmi
60.
by achillean 5y ago
Gopher use is slowly increasing over time :) https://imgur.com/gallery/mKvUyJL

More ›