4 ms·
Just read over their FAQ. They claim that Modbus over TCP is an internet protocol. No where do they even mention security. I wonder how many devices are sitting
by thoughtsimple 11y ago
Just read over their FAQ. They claim that Modbus over TCP is an internet protocol. No where do they even mention security. I wonder how many devices are sitting on IPv4 addresses that are completely controllable over the net without a shred of security. Lovely.
- westi 11y agoPreviously: https://blog.shodan.io/dont-be-clever/ https://blog.shodan.io/dont-be-clever/ > For example, you might know that Shodan crawls the Internet for industrial control systems (ICS). One of the most popular protocols in ICS is called Modbus that runs on port 502. At the moment, there are about 17,000 devices listening to Modbus on the default port. It turns out there are also 700 devices listening on port 503, again a one-off sort of situation. Probably over 20k by now
- thoughtsimple 11y agoThanks. Exactly as bad as I expected.