{
  "id": 4102180,
  "title": "Finding Exposed Services (and Fixing Them) with ScanSearch",
  "url": "https://urgent.news/2026/08/29/finding-exposed-services-and-fixing-them-with-scansearch",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-08-29T04:00:14.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/devyjones/finding-exposed-services-and-fixing-them-with-scansearch-c2"
  },
  "original_language": "en",
  "account": "Misconfigured services and exposed ports can inadvertently leave your infrastructure vulnerable to attacks. Tools like ScanSearch help identify these hidden dangers by querying the internet for specific services, banners, and vulnerabilities.\n\nRedis instances often become targets when they're left bound to 0.0.0.0 without authentication. To prevent this, bind Redis to localhost, enable authentication, and restrict access with firewall rules.\n\nSSH ports are commonly targeted, so if you've changed the default port (22), use ScanSearch to check if it's exposed on your specified IP range. Strengthen SSH security by disabling password authentication, enforcing strong passwords, restricting access via firewalls, and implementing multi-factor authentication.\n\nScanSearch can also reveal devices running services with known vulnerabilities. Regularly update all software, especially internet-facing services, and remove any unnecessary services. Implement routine security audits to maintain a robust defense against potential threats.",
  "summary": "Ever wondered what parts of your infrastructure are accidentally visible to the entire internet? It's a common blind spot. We spend a lot of time securing applications and servers, but sometimes a misconfigured port or an old, forgotten service can leave a gaping hole for attackers to walk right through. This article will walk you through how to use ScanSearch, an internet-wide search engine for…",
  "key_points": [
    "ScanSearch identifies exposed services and vulnerabilities on the internet.",
    "Misconfigured Redis instances, bound to 0.0.0.0, need authentication and firewall restrictions."
  ],
  "editors_take": "Using tools like ScanSearch to identify and fix misconfigured services and exposed ports can significantly strengthen infrastructure security and prevent potential attacks.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}