State of Industrial Control Systems in Poland and Switzerland
This way you can gather full geo-intelligence (localization, cameras in neighborhood, google street view and social media photos) and also data intelligence (IP address, hostnames, services or open ports). The data source is still Shodan and following filter are product:“Niagara Fox”
port:20000 source address
product:”general electric”
port:20547,1962 response code
port:789 product:”Red Lion Controls”
port:2404 asdu address
port:2455 operating system(with additional filter „country” with two letter short code of country as a value.) Geolocation of ICS is presented below
Map of Industrial Control Devices in Switzerland„Exposed ports” chart presents that telnet is still in use in 25 cases (in Poland it was 12) and also DNS runs on 16 machines (11 in PL).
Source: medium.com