Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I scanned Austria

blog.haschek.at

Post reply on HN
Print view View original

51–60 of 69 posts

Re: I scanned Austria

#51

Post by ktpsns »

FrankDixon wrote: post #17
piokoch wrote: post #5

I think soon or later we will need some kind of public institution that will do this sort of scans; all those unsecured IoT printers, vacuum cleaners, fridges, abandoned servers, Synology servers, etc. would become a real threat at some point and the costs of dealing with issues caused by them like identity theft, false accusations because on someone's server there is child porn uploaded by a cracker, bot nets will b…

In germany the federal bureau of security in IT actually does that. They send the admins an email: https://www.bsi.bund.de/EN/Topics/IT-Crisis-Management/CERT-...

Actually I once got a mail by them, forwarded via several intermediate admins in a university network. It was an information about a public reachable DNS server on my server. Nowadays, this can be abused for DNS replay attacks or so. What a pity. Things where so easy 20 years ago.

Re: I scanned Austria

#52

Post by gerdesj »

Forge36 wrote: post #32
piokoch wrote: post #5

I think soon or later we will need some kind of public institution that will do this sort of scans; all those unsecured IoT printers, vacuum cleaners, fridges, abandoned servers, Synology servers, etc. would become a real threat at some point and the costs of dealing with issues caused by them like identity theft, false accusations because on someone's server there is child porn uploaded by a cracker, bot nets will b…

What's the best way to self scan? I recently bought a wifi camera and digging through the settings I couldn't find a way to block external access. Ultimately I had to block is access via my router, however consumer models are terrible about blocking access to the internet.

Phone a friend! Go to a friend's house and run nmap (zenmap for a GUI if you like, https://nmap.org/download.html most common OSs supported). Do the same for them in return.

You might also like to explore this: https://www.shodan.io/ and if you have some time on your hands this: https://www.kali.org/

Re: I scanned Austria

#53

Post by DarkStar851 »

davb wrote: post #45

This was a really interesting idea and inspired me to do something similar. I had some Shodan credits from a Humble Bundle, so searched for all servers on port 80 in my city. Then I wrote a very simple Python program to screenshot each of those (using wkhtmltoimage), with 20 concurrent threads. I didn't stitch the images together and didn't try to login to any of the sites (that would be crossing a line, and simply m…

HikVision has been really popular with old-school analog CCTV installers, so odds are it's one very large deployment, or one/a few companies all using HV.

Re: I scanned Austria

#54

Post by driverdan »

simonsaidit wrote: post #26
dev_dull wrote: post #18

Earlier quoted context omitted.

Tell us more (I love to hear things about the wares days).

This was for fxp sites. I was a mod on a fxp board. We would make locked directories eg with deep paths and Lots of Whitespace that ftp clients couldent handle easy and Hence not Enter without knowing the tricks. Also using reserved Windows names like aux would prevent owner to delete or even crash his server trying anything. Later came tricks like undeletable files as different sites would fight over the same ftps.…

I remember the 2001 busts. I was in college at the time and a friend of mine was busted as a part of it. I don't think they took any legal action, just confiscated his hardware.

Re: I scanned Austria

#55

Post by achillean »

DyslexicAtheist wrote: post #4

great work. Pretty sure you can find a lot more scary stuff online by looking for IoT (CoAP, MQTT, etc). There was a rather scary talk by Lukas Lundgren at defcon 2016 on unauthenticated MQTT[0][1] ... the things he found exposed were just insane. He also used MASSCAN[2], a phenomenal tool, which isn't just useful to probe endpoints but also to actually send payloads (with all its performance/speed benefits). [0] htt…

Shodan indexes both MQTT and CoAP if you want to see the current exposure for those protocols:

https://www.shodan.io/search?query=CoAP+Resources

https://www.shodan.io/search?query=mqtt

Re: I scanned Austria

#57

Post by davb »

DarkStar851 wrote: post #53
davb wrote: post #45

This was a really interesting idea and inspired me to do something similar. I had some Shodan credits from a Humble Bundle, so searched for all servers on port 80 in my city. Then I wrote a very simple Python program to screenshot each of those (using wkhtmltoimage), with 20 concurrent threads. I didn't stitch the images together and didn't try to login to any of the sites (that would be crossing a line, and simply m…

HikVision has been really popular with old-school analog CCTV installers, so odds are it's one very large deployment, or one/a few companies all using HV.

That's interesting! There is a HikVision office in town too. Thinking about the possible deployment scenarios, you're probably right. Municipal project, hospitals, even a large supermarket chain with 20+ cameras per store. I was just surprised by the sheer volume. I reckon if I compile some stats it'll be one of the most popular devices in the city. That and Alien DVR. Hundreds of those too.

I'm surprised so many of these at internet connected, with their own public IP. No NAT, no VPN, no firewall. I'd expect that on one-off DIY deployments at grocery stores but this was pretty surprising.

Re: I scanned Austria

#59

Post by hmhhcycbtsc557 »

corndoge wrote: post #44
bboreham wrote: post #34

Earlier quoted context omitted.

Most consumer routers will by default block a connection _from_ the Internet. They use a private address range and apply NAT to outgoing connections, so explicit configuration is needed to do something with an incoming connection.

Say it with me NAT Is Not A Firewall

I believe you, but I have little expertise. Could you explain or give examples why?

Re: I scanned Austria

#60

Post by SSLy »

simonsaidit wrote: post #47
SSLy wrote: post #42

Earlier quoted context omitted.

I'm pretty sure that today all trading is automated. And the quality of releases have also gone (relatively) down - for movies good P2P is better than any scene pre.

It would make sense. Taking on good groups was nessasary to build a good rated site but it was up to the groups to hand out the slots and you never knew who you were really dealing with. It could be FBI or some hacker. There was however scriptet ftp clients but even though they were known many places had a ban on them and did a client not obey site rules then too many nukes or banned content would get them kicked off…

BTW, nowadays it seems the power is held at least by some degree by the nukenets
Post reply on HN