How Easy Is It To Find a Target Based on Searching for MSP Tools Using Shodan? Are You Listed?

Amazon Affiliate Store
➡️ www.amazon.com/shop/lawrences...
Gear we used on Kit (affiliate Links)
➡️ kit.co/lawrencesystems
Try ITProTV free of charge and get 30% off!
➡️ go.itpro.tv/lts
Use OfferCode LTSERVICES to get 5% off your order at
➡️ lawrence.video/techsupplydirect
Tesla Referral Program Offer
🚘 www.tesla.com/referral/thomas...
Lawrence Systems Shirts and Swag
👕 teespring.com/stores/lawrence...
Digital Ocean Offer Code
➡️ m.do.co/c/85de8d181725
HostiFi UniFi Cloud Hosting Service
➡️ hostifi.net/?via=lawrencesystems
Protect you privacy with a VPN from Private Internet Access
➡️ www.privateinternetaccess.com...
Google Fi Service Referral Code
📱g.co/fi/r/TA02XR
More Of Our Affiliates that help us out and can get you discounts!
➡️ www.lawrencesystems.com/partn...
Twitter
🐦 / tomlawrencetech
Patreon
🔗 / lawrencesystems
Our Forums
🔗 forums.lawrencesystems.com/
GitHub
🔗 github.com/lawrencesystems/
Discord
🔗 / discord
Our Web Site
🔗 www.lawrencesystems.com/
Datto Webinar OnDemand Webinar Channel Security Experts Deep Dive: The Anatomy of an MSP Breach
www.datto.com/resources/ondem...

[@HyperDroids]

Just the video I was needing to watch, as an MSP owner. Thanks Lawrence!
Also, congratulations on 80K. Next stop: the 100K milestone.

[@FinderX]

One question, where you see the 80K, YT now change the template and the subs is hidden somewhere.

[@scream2194]

260k

[@GeorgeThaxton]

As a local MSP here in Las Vegas, it was unnerving to see your example here in the valley. Although, knowing some MSPs out here, I am also not surprised.

[@minibit0103]

Shodan is such a valuable tool and is essential for any external assessment or pentest. It’s always good to check your own environment with it. That guy John is a smart dude who runs that site.

[@walkerboh39]

Thank you Tom ! Enjoy all the topics and advice you provide.

[@cwarehime]

In my IT career there was a term for this called just enough administration. I see the same for MSP's they just do enough for there clients, and depend on there software to harden there client's. Like he said there pride didn't allow for education, learning what it takes to make software secure. There are a lot of solutions out there. Research hrs of reading is what makes a smarter IT admin, and swallow your pride asking for help goes a long way. I know! My pride got the better of me 👍

[@craig4]

It might be a good idea to reach out to some of these companies and give them a heads up. I know there's not enough time in a day to do them all, but it could bring in some business as well for those that don't know what they're doing and how to secure things. Just going through a few I've already seen a few that have 3389 open as well. From there you can usually see the internal domains that are registered as well. One of them I found their website within a few clicks.

[@user-kk6ee1rv2d]

How do these devices get exposed to the internet like the printers for example?

[@CoreyThompson73]

Search for Modbus (or tcp port 502), DNP3, Allen Bradley, and other automation (like factory, substations, waterworks) protocols and be really surprised with that is exposed!

[@erroljanusz6731]

Cracking a Single Sigh On, is the worst. You get into everything.

[@FinderX]

Normie question: what is a MSP?

[@LAWRENCESYSTEMS]

Managed Service Provider

[@SomeGuyInSandy]

Check out "greynoise"

[@LAWRENCESYSTEMS]

Yeah, their system is nice as well.