#FULLDISCLOSURE By @ntisec #SCADA
Search with www.shodanHQ.com and GOOGLE using :|slot:/ as my search word resulted in finding that dutch open #SCADA sytem.
http://webwereld.nl/nieuws/109228/sporthal-gehackt-via-wijd-open-scada-systeem.html
Below you wil find some more vulnerable systems.
Since its too many, I am gooing full disclosure.
Hoping people will notify owners of the flawed systems.
Be careful, these control infrastructure and might be very dangerous controls
Also tried cooperating with the DUTCH @NCSC_NL But they are not open enough, and wont tell me what they did with my info and who got the credits.
Also in situations like this keeping threats a secret does not help. Awarenes needs to be poited out in the open. Ifeel threatened and pointed at
as if I am an terrorist eventhough I am trying to sound the alarmbells.
Most scada systems dont have the need to be webfaced.
So lets get thta airgap back in place.
I gave @BRENNO journalist 1 of the #threats in this list situated in the NETHERlands
The rest of this list has not been investigated. Because I am scared that will make me a terrorist.
Behave, and have fun.
_..._ _____ _____
.-'_..._''. / / _______ / / .' .' '. / / ___ `'. / / /| /| / .' / / ' |--. / / ___//__//__ . ' / / | | ' / / '--//--//---' | | / / __ | | | ' / / __ ___//__//__ _ | | / / | | | | | | / / | | '--//--//---'.' | . ' / ' | | | | ' .'/ ' | | |/ |/ . | / '. . / '----| |---. | |___.' /'/ '----| |---. .'.'| |// '. `._____.-'// | | |/_______.'// | | | .'.'.-' / `-.______ / '----------| |---'_______|/ '----------| |---' .' _.' ` | | | |
/____ /____
204.14.161.214
Added on 15.01.2012
United States Clovis
Details
HTTP/1.0 302 Moved Temporarily
location: http://204.14.161.214/ord?station:|slot:/Drivers/LonNetwork/Home
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
165.154.50.20
Added on 12.01.2012
Canada Barrie
Details
web.gildasclubbarrie.org
HTTP/1.0 302 Moved Temporarily
location: http://165.154.50.20/ord?station:|slot:/HOME
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
70.167.25.88
Added on 06.01.2012
United States Oklahoma City
Details
wsip-70-167-25-88.ok.ok.cox.net
HTTP/1.0 302 Moved Temporarily
location: http://70.167.25.88/ord?station:|slot:/Home
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
93.108.133.5
Added on 01.01.2012
Portugal Algés
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://93.108.133.5/ord?station:|slot:/Home
content-length: 120
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/3.5.34
216.48.255.202
Added on 31.12.2011
United States Lubbock
Details
HTTP/1.0 302 Moved Temporarily
location: http://216.48.255.202/ord?station:|slot:/Drivers/Home
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
173.181.202.83
Added on 28.12.2011
Canada Burnaby
Details
HTTP/1.0 302 Moved Temporarily
location: http://173.181.202.83/ord?station:|slot:/HOME
content-type: text/html; charset=UTF-8
content-length: 116
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
209.191.41.18
Added on 27.12.2011
United States Lodi
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://209.191.41.18/ord?station:|slot:/Home$20Page/College
content-length: 121
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
74.3.82.116
Added on 10.12.2011
United States Brooklyn
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://74.3.82.116/ord?station:|slot:/Home
content-length: 120
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/3.5.25.3
12.171.121.34
Windows 2000
Added on 05.12.2011
United States Richmond
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://12.171.121.34/ord?station:|slot:/Drivers/DemoNetwork/Graphics/Home
content-length: 120
server: Niagara Web Server/3.6.31
64.132.95.120
Added on 26.07.2011
United States Dayton
Details
64-132-95-120.heapy.com
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://64.132.95.120/ord?station:|slot:/Graphics/Home
content-length: 121
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
198.108.97.6
NetCache 5.3.1
Added on 05.07.2011
United States Ann Arbor
Details
HTTP/1.0 302 Moved Temporarily
location: http://198.108.97.6/ord?station:|slot:/Drivers/ComfortPointNetwork/Home
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
69.58.47.21
Added on 12.04.2011
United States Sturgis
Details
69-58-47-21.kresanet.org
HTTP/1.0 302 Moved Temporarily
location: http://69.58.47.21/ord?station:|slot:/Drivers/LonNetwork/Home_Page
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
84.246.48.11
Added on 06.04.2011
Netherlands Kaatsheuvel
Details
084-246-048-011.PN.NL
HTTP/1.0 302 Moved Temporarily
location: http://84.246.48.11/ord?station:|slot:/Graphics/Home
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
138.188.28.248
Added on 05.03.2011
Switzerland Berne
Details
HTTP/1.0 302 Moved Temporarily
location: http://138.188.28.248/ord?station:|slot:/|view:Home
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
124.178.246.152
Added on 04.03.2011
Australia Adelaide
Details
CPE-124-178-246-152.static.sa.bigpond.net.au
HTTP/1.0 302 Moved Temporarily
location: http://124.178.246.152/ord?station:|slot:/Home$20Page
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
216.49.115.9
Added on 21.02.2011
United States Saint Meinrad
Details
dbba263-psci.psci.net
HTTP/1.0 302 Moved Temporarily
location: http://216.49.115.9/ord?station:|slot:/HomeGraphic
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
165.138.51.31
Added on 10.02.2011
United States Frankton
Details
HTTP/1.0 302 Moved Temporarily
location: http://165.138.51.31/ord?station:|slot:/Drivers/LonNetwork/Home
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
89.181.124.47
Added on 06.02.2011
Portugal Odivelas
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://89.181.124.47/ord?station:|slot:/Home
content-length: 121
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
206.47.97.8
Added on 24.01.2011
Canada Collingwood
Details
HTTP/1.0 302 Moved Temporarily
location: http://206.47.97.8/ord?station:|slot:/HOME
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
208.80.99.243
Added on 20.01.2011
Canada Barrie
Details
HTTP/1.0 302 Moved Temporarily
location: http://208.80.99.243/ord?station:|slot:/HOME
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
206.47.196.26
Added on 20.01.2011
Canada New Liskeard
Details
NT206HS47-196-26.nt.net
HTTP/1.0 302 Moved Temporarily
location: http://206.47.196.26/ord?station:|slot:/HOME
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
99.192.183.81
Added on 18.01.2011
United States Farmington
Details
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://99.192.183.81/ord?station:|slot:/PxHome
content-length: 120
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/3.5.25.3
69.62.63.75
Added on 12.01.2011
United States Panhandle
Details
HTTP/1.0 302 Moved Temporarily
location: http://69.62.63.75/ord?station:|slot:/Drivers/LonNetwork/Home
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
81.146.65.215
Added on 10.01.2011
United Kingdom Ipswich
Details
host81-146-65-215.btremoteinternet-dsl.bt.net
HTTP/1.0 302 Moved Temporarily
content-type: text/html; charset=UTF-8
location: http://81.146.65.215/ord?station:|slot:/Graphics/Home
content-length: 120
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/3.5.34
207.74.210.25
Foundry,SonicWall BigIron,TZ
Added on 08.01.2011
United States Harper Woods
Details
HTTP/1.0 302 Moved Temporarily
location: http://207.74.210.25/ord?station:|slot:/Home
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
203.122.220.132
Added on 18.12.2010
Australia Adelaide
Details
ppp203-122-220-132.static.internode.on.net
HTTP/1.0 302 Moved Temporarily
location: http://203.122.220.132/ord?station:|slot:/HomePage
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
123.100.130.110
Added on 17.12.2010
Australia Eagle Farm
Details
cpe-123-100-130-110.pivit.net.au
HTTP/1.0 302 Moved Temporarily
location: http://123.100.130.110/ord?station:|slot:/Home$20Page
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
70.88.221.13
Foundry,SonicWall BigIron,TZ
Added on 23.11.2010
United States South Easton
Details
70-88-221-13-first-assembly-of-God-auburn-ne-ma.hfc.comcastbusiness.net
HTTP/1.0 302 Moved Temporarily
location: http://70.88.221.13/ord?station:|slot:/Home
content-type: text/html; charset=UTF-8
content-length: 117
server: Niagara Web Server/1.1
219.90.201.244
Added on 25.10.2010
Australia Adelaide
Details
219-90-201-244.static.adam.com.au
HTTP/1.0 302 Moved Temporarily
location: http://219.90.201.244/ord?station:|slot:/Drivers/HOME$20PAGE
content-type: text/html; charset=UTF-8
content-length: 117
set-cookie: niagara_audit=guest; path=/
server: Niagara Web Server/1.1
70.28.16.14
Added on 09.02.2010
Canada Newmarket
Details
HTTP/1.0 302 Moved Temporarily
Set-cookie: niagara_audit=guest; path=/
Content-length: 117
Content-type: text/html; charset=UTF-8
Location: http://70.28.16.14/ord?station:|slot:/HOME
Server: Niagara Web Server/1.1
207.135.163.6
NetBSD 1.6
Added on 23.01.2010
United States Chicago
Details
HTTP/1.0 302 Moved Temporarily
Content-length: 117
Content-type: text/html; charset=UTF-8
Location: http://207.135.163.6/ord?station:|slot:/Home
Server: Niagara Web Server/1.1
216.49.115.10
Added on 30.11.2009
United States Saint Meinrad
Details
dbba264-psci.psci.net
HTTP/1.0 302 Moved Temporarily
Set-cookie: niagara_audit=guest; path=/
Content-length: 117
Content-type: text/html; charset=UTF-8
Location: http://216.49.115.10/ord?station:|slot:/HomeGraphic
Server: Niagara Web Server/1.1
204.77.52.67
Added on 29.11.2009
United States Saint Paul
Details
HTTP/1.0 302 Moved Temporarily
Set-cookie: niagara_audit=guest; path=/
Content-length: 117
Content-type: text/html; charset=UTF-8
Location: http://204.77.52.67/ord?station:|slot:/pxHome
Server: Niagara Web Server/1.1
http://165.154.50.20/ord?station:|slot:/HOME
http://70.91.37.250/ord?station:|slot:/Services
http://216.172.46.42/ord?station:|slot:/
http://64.49.112.47/ord?station:|slot:/fxApp
http://69.119.154.100/ord?station:|slot:/Services
http://99.191.85.49/ord?station:|slot:/fxApp
http://77.40.144.214/ord?station:|slot:/
http://209.56.73.31/ord?station:|slot:/
http://97.93.208.165/ord?station:|slot:/Services
http://206.127.124.76/ord?station:|slot:/Services
http://99.191.85.49/ord?station:|slot:/fxApp
http://204.14.161.214/ord?station:|slot:/Drivers/LonNetwork/Home
http://158.123.163.236/ord?station:|slot:/Graphics/HX_1
http://68.90.164.14/ord?station:|slot:/Services
http://209.33.201.6/ord?station:|slot:/Services
http://99.191.85.49/ord?station:|slot:/fxApp
70.167.25.88/ord?station:|slot:/Home
http://216.69.8.218/ord?station:|slot:/
http://66.162.112.212/ord?station:|slot:/
http://207.255.193.77/ord?station:|slot:/Services
http://209.137.240.141/ord?station:|slot:/Services
http://209.33.248.81/ord?station:|slot:/Services
http://206.216.159.139/ord?station:|slot:/
http://207.67.73.74/ord?station:|slot:/Services
http://207.67.73.74/ord?station:|slot:/
http://209.254.21.226:8280/ord?station:|slot:/Drivers/ModbusAsyncNetwork/ModiconPLC/points/AHU1
http://209.254.21.226:8280/ord?station:|slot:
http://aecabin.tzo.com/ord?station:|slot:/Drivers
http://65.126.88.227/ord?station:|slot:/Drivers/LonNetwork
http://aecabin.tzo.com/ord?station:|slot:/Drivers/LonNetwork
http://65.126.88.227/ord?station:|slot:
http://165.228.159.136/ord?station:|slot:/Site
http://207.210.134.93/ord?station:|slot:/
http://84.249.121.239/ord?station:|slot:/P$e4$e4valikko finland
No comments:
Post a Comment
-