Azure Compliance ControlsAzure Virtual Network
Public IP addresses should not be listed in Shodan
Azure Public IP addresses are detected as indexed by Shodan. This indicates Internet-visible services with open `ports` and service banner metadata. Prowler check `network_public_ip_shodan` flags these addresses.
What this control checks
Checks that public IP addresses are not listed in Shodan
Framework mappings
The clauses this control is mapped to in each framework.
- CC6.1 The entity implements logical access security software, infrastructure, and architectures over protected information assets to protect them from security events to meet the entity's objectives
- A.8.20 Network security
- A.8.21 Security of network services
- 2 Risk management policy
- 6 Security in network and information systems acquisition, development and maintenance
- 11 Access control
- 7.7 Ensure that Public IP addresses are Evaluated on a Periodic Basis
Related controls
- Virtual networks should have Azure DDoS Protection Standard enabled
- Storage accounts should have public network access disabled
- Kubernetes cluster nodes should prohibit public access
- Network security groups should limit inbound TCP port 25 access from the internet
- MySQL servers should have public network access disabled
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
azure_network_public_ip_shodan - Prowler Check:
network_public_ip_shodan
Last reviewed: 2026-10-11