Shodan 物联网搜索引擎

网络与网站, 开源情报, 搜索

自由的
无需下载/安装
无需注册

https://www.shodan.io/

搜索互联网上除网页以外的所有内容，例如在其他端口上搜索。物联网摄像头和其他连接的设备： Shodan is a specialized search engine that indexes metadata from Internet-connected devices, including servers, routers, industrial control systems, and Internet of Things (IoT) hardware. By scanning the global IP space and parsing service banners, the platform identifies active ports, software versions, and geographic locations without relying on traditional web crawling. It provides technical professionals with granular data on device configurations and potential vulnerabilities, offering tools for external attack surface management and a programmatic API for automated threat intelligence integration.

提示： 一个必须 for own network security checks; replaces or aggregates many command line tools.

在IT领域，专业人员利用Shodan来审核工业控制系统（ICS）和监控与数据采集（SCADA）网络的风险敞口，确保关键基础设施与公共互联网隔离。质量保证团队利用该平台检测分布式生产设施中配置错误的固件或未经授权的硬件部署，同时创新研究人员应用其历史数据集来跟踪新兴技术的全球采用情况。沟通 protocols. By identifying open administrative interfaces and unencrypted services, these experts maintain operational integrity and benchmark the security posture of complex technological ecosystems against industry standards.

学科： 网络安全、网络工程、开源情报、物联网、工业自动化。

Censys、ZoomEye、Fofa 的免费替代方案。

Shodan IoT Search Engine compared with Censys, ZoomEye and Fofa
初段	Censys	ZoomEye	Fofa
Data scope: It indexes Internet-connected devices beyond websites, and states it crawls the entire Internet every week.	Data scope: Its map of the Internet covers IPs, ports and services, certificates, web properties and DNS.	Data scope: It is described as a search engine of Internet-connected devices, used for asset discovery, OSINT and threat intelligence.	Data scope: It is described as a cyberspace search engine that matches network assets, with industrial control security among its topics.
Access and cost: A free account is available. Membership is a one time payment listed for a lifetime upgrade, with 100 monthly query credits, 100 monthly scan credits and 16 monitored IPs.	Access and cost: Legacy Search is no longer available to Free users, who are directed to the Censys Platform. An account is needed for API credentials.	Access and cost: A free account can be created. Paid access is offered, and the free tier limits are not published on the home page.	Access and cost: A login is required. Plans are listed on a pricing page.
API： The Developer API exposes crawling, IP lookups, searching and data streaming.	API： API credentials come from the account page, with API documentation and a getting started guide.		API： The site links to API documentation and API tools.
Exposure monitoring: Shodan Monitor tracks devices in your network range that are reachable from the Internet and sends notifications when something unexpected appears.	Exposure monitoring: Its attack surface management product monitors the external attack surface continuously.		Exposure monitoring: The vendor says it supports attack surface management.

涵盖的主题： Shodan、物联网、联网设备、元数据、工业控制系统、服务横幅、活动端口、软件版本、地理位置、外部攻击面管理、API、威胁情报、工业控制系统 (ICS)、监控与数据采集 (SCADA)、运行完整性、安全态势、通信协议、ISO/IEC 27001、NIST SP 800-53、IEC 62443、ISO 31000 和 ISO/IEC 27032。

隐私我们没有关于该工具和作者潜在问题的反馈。但与许多在线服务一样，您在这里向他们提供的是您自己的数据。您有责任评估作者的声誉和可能的滥用情况，并检查和接受他们的条款和条件，这取决于您的数据是否具有批判性。