Who is ShadowServer.org and why are they on my list?

Michael James

Getting the hang of it
Dec 20, 2016
274
41
All, under Blue Iris 5 I am seeing shadowserver.org on my connections. Who or what is this?

1708440763456.png
 

Attachments

  • Screenshot 2024-02-20 095052.png
    Screenshot 2024-02-20 095052.png
    399.8 KB · Views: 3
A google search indicates they are an internet security company that scans the internet to see what is out there and potentially vulnerable to threats.

1708440963894.png

You can reduce the incidence of such events in your log by using a much less common port number (such as something between 10000 and 65535) or you can eliminate them entirely by not forwarding a port to Blue Iris and instead using a vpn.
 
They are a group searching for vulnerabilities.

You must be using port forward.

 
You need to secure your server so that a malicious actor doesn't get in.

This one is harmless but blocking them doesn't stop others from getting thru.
 
  • Like
Reactions: cyberwolf_uk
A google search indicates they are an internet security company that scans the internet to see what is out there and potentially vulnerable to threats.

View attachment 186999

You can reduce the incidence of such events in your log by using a much less common port number (such as something between 10000 and 65535) or you can eliminate them entirely by not forwarding a port to Blue Iris and instead using a vpn.
Just read this..
 
  • Like
Reactions: bp2008
Many routers have OpenVPN built in.


 
Many routers have OpenVPN built in.



So this is confusing. I have a Reolink Video Doorbell, purchased last year. In the Reolink camera software on the PC, its configured for a static IP address 192.168.50.151. In the Android software, same thing, shows IP address 151. In the Blue Iris camera software, it shows and configures for 151. When I look in the GT-AX6000 menu under clients, it says Static IP but shows 150 not 151?
 
Last edited: