On Mar 14, 2017, at 12:29, Jon Foreman <Jon@ksgn.com> wrote:
> Interesting countries of origin...
The Shodan search engine has 'Net crawlers all around the world. I'm sure there are many more than the few you found hitting your site.
The distributed architecture helps it do its job even if some IP addresses get blocked, and it's more efficient to poll devices when you're geographically close to them.
Technically, the Shodan site is extremely useful and quite interesting in its conceptual theory of operation. It obviously can be used for nefarious purposes, but it has perfectly good uses, too; it's just a tool. The major benefit of it is that it takes in all the distributed searches and aggregates them together for an easy-to-use single-site search engine, just like Google does.
And before anybody gets all up in a tizzy about "This sort of search engine should be restricted and not available to the public!!" ideas, recognize that this stuff is child's play for a hacker. Shodan just makes it easier and faster, and it anonymizes the actual scans (or does the dirty work behind the scenes) so that a hacker doesn't have to scan a remote target from his own IP address.