Shodan Monitor

Domain-based assets in Shodan Monitor use DNS information from the past 24 hours to determine which IPs to monitor in an asset group. Previously, we used the data collected within the most recent 48 hours to determine the IPs. We’ve continued to expand our infrastructure, including our ability to refresh DNS data faster, which has allowed us to shorten the timeframe to 24 hours. This will reduce false positives in scenarios where services are deployed to the cloud and have constantly-changing IPs.