SecurityInsight settings · Settings > Collection scope & limits
Scan server IPs only
| Key | SI_Shodan_ServerOnly |
|---|---|
| Where | Settings > Collection scope & limits |
| Type | On / off |
| Default | On: only servers' public IPs are checked. |
| Edition | Community |
What it does
Limits endpoint-derived public IPs to servers, because a workstation's public IP is usually a home or mobile network you do not own.
When enabled
only servers' public IPs are checked.
When disabled
Off adds workstation public IPs, which are mostly internet provider addresses: more lookups and results that do not describe your own exposure.
Risk and how to reverse it
Changes what is collected from the next run: narrowing it means some assets or data are not collected, so they look absent in profiles, CIs and reports (absence is never read as fixed). Reversible: change it back; the next run collects again.
Requires
Read by: publicip.
Recommended
Keep the default. Change it when: Almost never.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack