Generative AI for Technical Writer or Information Developers
Internet connected ICS/SCADA/PLC
1. Internet connected ICS/SCADA/PLC Cheat Sheet 2013
Gleb Gritsai, Alexander Timorin, Alexander Zaitsev, Sergey Gordeychik, Valentin Shilnenkov
www.scadastrangelove.org
Special thanks: http://www.scadaexposure.com/
Free for responsible use
4. Vendor
Product
Protcol
BTC
Computec Oy
CROUZET
CROUZET
BTC 77 H-1 H01 tcp server
Computec Oy CWS06
CROUZET
XN05 24VD
CROUZET XN05 24VD
ENTES AS 23000102 V4.00
www.entes.com.tr POWER FACTOR
CONTROLLER RG-XXCS
ENTES AS 23100118 V5.06
www.entes.com.tr POWER FACTOR
CONTROLLER RG-XXCLS
ENTES AS
63000178 v1.78
www.entes.com.tr
Network
Analyser MPR63
ENTES AS 23000021 V2.00
www.entes.com.tr NETWORK
ANALYSER MPR-53S
ENTES AS
6342O178 v1.78
www.entes.com.tr
Network
Analyser MPR63-42
__PRODUCT__
FieldLogger 0500
Flexim GmbH XBTGT5330
Flexim GmbH Datensysteme GmbH
Frabil El AB FKP2.2/400 MODBUS
INTEG process group, inc. JNIOR 310
INVENSYS 00AE_0401 01A7_000F
IO-30S-BM 21605540638
LAB-EL LB-487
LAB-EL LB-489
Lantronix Inc UDS1100
modbus
modbus
modbus
modbus
ENTES
ENTES
ENTES
ENTES
ENTES
ENTES
FieldLogger
Flexim GmbH
Flexim GmbH
Frabil El
INTEG process group
INVENSYS
__VENDOR__
LAB-EL
LAB-EL
Lantronix Inc
Dork/Banner
BTC 77 V2.02 www.btc-automation.lv H-1 H01 tcp
server
Computec Oy CWS06
CROUZET
XN05 24VD
CROUZET XN05 24VD
ENTES AS 23000102 V4.00 www.entes.com.tr
modbus POWER FACTOR CONTROLLER RG-XXCS
ENTES AS 23100118 V5.06 www.entes.com.tr
modbus POWER FACTOR CONTROLLER RG-XXCLS
ENTES AS
63000178 v1.78 www.entes.com.tr
modbus Network Analyser MPR63
ENTES AS 23000021 V2.00 www.entes.com.tr
modbus NETWORK ANALYSER MPR-53S
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
ENTES AS
6342O178 v1.78 www.entes.com.tr
Network Analyser MPR63-42
www.entes.com.tr
FieldLogger 0500
Flexim GmbHque XBTGT5330
Flexim GmbHre Datensysteme GmbH
Frabil El AB FKP2.2/400 MODBUS
INTEG process group, inc. JNIOR 310
INVENSYS 00AE_0401 01A7_000F
IO-30S-BM 21605540638
LAB-EL LB-487
LAB-EL LB-489
Lantronix Inc UDS1100
5. Vendor
Lantronix Inc
Merlin Gerin
Merlin Gerin
__VENDOR__
Novus
Nivus
Ouman
Ouman
Ouman
Ouman
Ouman
PEWEU
proconX Pty Ltd
PRODUAL OY
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Product
Lantronix Inc WiPort
Merlin Gerin 15210
Merlin Gerin
(EAN13)3303430151982
Modbus/TCP to RTU Bridge Bridge
Novus 0001
OCM Pro CF
Ouman 20340DRF
Ouman 203mbH
Ouman 686Electric BMX
Ouman 686Kontakt 34
Ouman 686 Kontakt 34
PEWEU FPWEBD V2.1
www.peweu.de FP-WebServer
proconX Pty Ltd FT-MBSV
EXPERIMENTAL
PRODUAL OY PDSMB
Schneider Electric 15210
Schneider Electric 15211
Schneider Electric A9MEM3150
Schneider Electric A9MEM3155
Schneider Electric A9XMSB11
Schneider Electric BMX NOE 0100
Schneider Electric BMX NOE 0110
Schneider Electric BMX NOR 0200
Schneider Electric BMX P34 2020
Schneider Electric BMX P34 20302
Schneider Electric EGX200
Schneider Electric EGX300SD
Protcol Dork/Banner
modbus Lantronix Inc WiPort
modbus Merlin Gerin 15210
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
Merlin Gerin (EAN13)3303430151982
Modbus/TCP to RTU Bridge Bridge
Novus 0001
OCM Pro CF
Ouman 20340DRF 05.20
Ouman 203mbH xxxxxx V1.00
Ouman 686Electric BMX
Ouman 686Kontakt 34
Ouman 686 Kontakt 34
PEWEU FPWEBD V2.1 www.peweu.de FPmodbus WebServer
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
proconX Pty Ltd FT-MBSV EXPERIMENTAL
PRODUAL OY PDSMB
Schneider Electric 15210
Schneider Electric 15211
Schneider Electric A9MEM3150
Schneider Electric A9MEM3155
Schneider Electric A9XMSB11
Schneider Electric BMX NOE 0100
Schneider Electric BMX NOE 0110
Schneider Electric BMX NOR 0200
Schneider Electric BMX P34 2020
Schneider Electric BMX P34 20302
Schneider Electric EGX200
Schneider Electric EGX300SD
6. Vendor
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Product
Schneider Electric EGX300SD
Schneider Electric EGX300
Schneider Electric EGX400
Schneider Electric HMIGTO4310
Schneider Electric
HMIGTO5310/5315
Schneider Electric HMISTU855
Schneider Electric iEM3155
Schneider Electric METSEPM3250
Schneider Electric METSEPM3255
Schneider Electric PM210 V03.140
Schneider Electric PM5350 V1110
Schneider Electric SAS 140 CPU 651
50
Schneider Electric SAS 140 NOE 771
01
Schneider Electric SAS TSXETY4103
Schneider Electric SAS TSX P57
4634M
Schneider Electric
TM218LDAE24DRHN10
Schneider Electric TM258LF42DT4L
Schneider Electric TM258LF42DT
Schneider Electric TM258LF66DT4L
Schneider Electric TRV00210
Schneider Electric WinXP
Schneider Electric XBTGT2330
Schneider Electric XBTGT4330
Schneider Electric XBTGT4340
Schneider Electric XBTGT5330
Protcol
modbus
modbus
modbus
modbus
Dork/Banner
Schneider Electric EGX300SD
Schneider Electric EGX300
Schneider Electric EGX400
Schneider Electric HMIGTO4310
modbus
modbus
modbus
modbus
modbus
modbus
modbus
Schneider Electric HMIGTO5310/5315
Schneider Electric HMISTU855
Schneider Electric iEM3155
Schneider Electric METSEPM3250
Schneider Electric METSEPM3255
Schneider Electric PM210 V03.140
Schneider Electric PM5350 V1110
modbus Schneider Electric SAS 140 CPU 651 50
modbus Schneider Electric SAS 140 NOE 771 01
modbus Schneider Electric SAS TSXETY4103
modbus Schneider Electric SAS TSX P57 4634M
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
Schneider Electric TM218LDAE24DRHN10
Schneider Electric TM258LF42DT4L
Schneider Electric TM258LF42DT
Schneider Electric TM258LF66DT4L
Schneider Electric TRV00210
Schneider Electric WinXP
Schneider Electric XBTGT2330
Schneider Electric XBTGT4330
Schneider Electric XBTGT4340
Schneider Electric XBTGT5330
7. Vendor
SE-Elektronic G
Solare Datensysteme
Square-D BCPMC142D
Square D
Square D
Square D
Square D
Square D
Square D
Square D
SYNCHRONIC
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemecanique
Telemehanique
__VENDOR__
__VENDOR__
Product
SE-Elektronic G 02 90 00
Solare Datensysteme GmbH
Square-D BCPMC142D
Square D 15101
Square D 15112
Square D 15210
Square D 15211
Square D 15213
Square D PM210
Square D PM750
SYNCHRONIC
TELEMECANIQUE LTMR08EFM 0202
Telemecanique OTB 1E0 DM9LP
TELEMECANIQUE BMX P34 2020
TELEMECANIQUE BMX P34 2020
TELEMECANIQUE TWDLCAE40DRF
TELEMECANIQUE SR3 MBU01BD
TELEMECANIQUE SR3 NET01
Telemecanique TSX ETG 3000
Telemecanique TSX ETG 3021
Telemecanique TSXWMY100
TELEMECANIQUE TWDLCAE40DRF
Telemecanique WinNT 4.0
Telemecanique XBT-GT4230
Telemecanique XBTGT4230
Telemecanique XBTGT6330
Telemechanique LTMRxxx
Flexim GmbH
Ouman 6860
Protcol
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
modbus
Dork/Banner
SE-Elektronic G 02 90 00
Solare Datensysteme GmbH
Square-D BCPMC142D
Square D 15101
Square D 15112
Square D 15210
Square D 15211
Square D 15213
Square D PM210
Square D PM750
SYNCHRONIC 00-0F-0C-00-18-74 16
TELEMECANIQUE LTMR08EFM 0202
Telemecanique OTB 1E0 DM9LP
TELEMECANIQUE BMX P34 2020
TELEMECANIQUE BMX P34 2020
TELEMECANIQUE TWDLCAE40DRF
TELEMECANIQUE SR3 MBU01BD
TELEMECANIQUE SR3 NET01
Telemecanique TSX ETG 3000
Telemecanique TSX ETG 3021
Telemecanique TSXWMY100
TELEMECANIQUE TWDLCAE40DRF
Telemecanique WinNT 4.0
Telemecanique XBT-GT4230
Telemecanique XBTGT4230
Telemecanique XBTGT6330
Telemechanique LTMRxxx
Flexim GmbH
Ouman 6860
8. Vendor
Veris Industries
Veris Industries
Wurm GmbH
WAGO
WAGO
General
Lantronix
Product
Veris Industries E50C2
Veris Industries E51C3
Wurm GmbH & Co.KG Multigate
WAGO PLC
WAGO 750-873 PFC
General
Modbus Bridge
Protcol
modbus
modbus
modbus
url
snmp
snmp
snmp
General Electric
STXMBE001
header
TURCK
TURCK
Schneider Electric
Schneider Electric
Advantsys
Netbiter
Webdyn
BL67-PG-EN
BLXX-XX-EN
Ethernet Modbus GW 499TWD01100
Modbus Brigde
Advantsys Modbus Gateway
webSCADA
Webdyn Modbus Proxy
snmp
snmp
telnet
snmp
snmp
header
snmp
Veris industries
E8950
header
Crevis
NA-9189
Honeywell Building Network Adapter
(BNA);telnet"
Telemetry Gateway A840
Telemetry Gateway A850
Telemetry Gateway
RTU
Generic
Codesys
Promotic SCADA/HMI
header
Honeywell
Adcon Telemetry GmbH
Adcon Telemetry GmbH
Adcon Telemetry GmbH
Energy ICT
Shneider Electric
Codesys
Promotic
Dork/Banner
Veris Industries E50C2
Veris Industries E51C3
Wurm GmbH & Co.KG Multigate
plc/webvisu.htm
WAGO 750-873 PFC Serial Modbus
IEC 61131-3
Lantronix Inc. - Modbus Bridge
STXMBE001(Modbus/TCP) (http://www.geip.com/)
BL67-PG-EN (App: PLC/Modbus V1.6.0.9, BL:
V1.0.0.9, GwId: 01004110h)
App: PLC/Modbus
Telemecanique 499 TWD 01 100
Schneider Automation, Inc. - Modbus Bridge
Advantys STB Modbus/TCP Communication Module
webSCADA-Modbus
Webdyn Modbus Proxy
E8950 w/Modbus Energy Meter: Log in as Admin or
User.
FnIO NA-9189(Modbus/TCP)
(http://www.crevis.co.kr/)
Honeywell Building Network Adapter (BNA)
telnet
Telemetry Gateway A840
snmp
A850 Telemetry Gateway
snmp
Telemetry Gateway
header EnergyICT RTU
title
shneider electric telecontrol
title
codesys webvisualization
title
promotic redirection
9. Vendor
Siemens
Siemens
Siemens
Siemens
Siemens
Siemens
Rockwell Automation
Rockwell Automation
Rockwell Automation
schneider electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
General Electric
General Electric
Product
PCS7
PCS7
SIMATIC
SIMATIC
SIMATIC HMI Miniweb
SIMATIC HMI Miniweb
CompactLogix
CompactLogix
SLC5
PowerLogic PM800
PowerLogic ION8650
PowerLogic ION8600
PowerLogic ION7650/7550
PowerLogic ION7650/7550
PowerLogic ION7300
PowerLogic ION6200
PowerLogic PM1200
PowerLogic DM6200
PowerLogic Branch Current Monitor
PowerLogic Ethernet Gateway (EGX)
PowerLogic EGX300
PowerLogic ION7550RTU
ModiconQuantum
ModiconPremium
CitectSCADA
ClearSCADA
ClearSCADA
Cimplicity
Proficy
Protcol
http
url
url
url
url
title
title
title
title
header
header
header
header
header
header
header
header
header
header
header
header
header
title
title
title
header
title
title
url
Dork/Banner
S7Web.css
Portal0000.htm
Portal/Portal.mwsl
S7Web.css
/CSS/Miniweb.css
Miniweb Start Page
Rockwell Automation
Device Name
1747-L552
PowerLogic PM800
8650 ION
8600 ION
ION 7550
ION 7650
ION 7300
ION6200
PM1200
DM6200
BCM42
EGX100
EGX300
ION 7550RTU
Quantum CPU Web Server
Premium CPU Web Server
Citect Web
ClearSCADA
ClearSCADA HOME
CIMPLICITY WebView
ProficyPortal/default.asp
10. Vendor
ABB
ABB
ACKP
Adcon Telemetry
Adcon Telemetry
Allen-Bradley
Allen-Bradley
Beck IPC
BroadWeb
Cimetrics
Clorius Controls
Codesys
Delta Controls
Echelon
Electro Industries
GaugeTech
Elster EnergyICT
Elster EnergyICT
Elster EnergyICT
General Electric
General Electric
Generic
Generic
Generic
Generic
Generic
Generic
Generic
Product
Generic
RTU500
Generic
A850 Telemetry Gateway
addUPI-OPC Server
Generic
Generic
IPC@CHIP
Generic
Eplus - B/IP to B/WS Gateway
Firewall
Generic
WebVisu
enteliTOUCH
i.LON 600
Protcol
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Dork/Banner
ABB Webmodule
ABB RTU560
AKCP Embedded Web Server
A850 Telemetry Gateway
addUPI Server
Allen-Bradley
Series C Revision
IPC@CHIP
BroadWeb
Shodan
Shodan
Shodan
Shodan
Shodan
Cimetrics Eplus Web Server
ISC SCADA Service HTTPserv:00001
Webvisu
DELTA enteliTOUCH
i.LON
Generic
Generic
RTU
eiPortal
Cimplicity
Proficy
Generic
Generic
Generic
Generic
Generic
Generic
Generic
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
EIG Embedded Web Server
EnergyICT
EnergyICT RTU
eiPortal
CIMPLICITY-HttpSvr
ProficyPortal
GoAhead-Webs InitialPage.asp
Jetty 3.1.8 (Windows 2000 5.0 x86)
Modbus Bridge
ModbusGW
NET ARM Web Server/1.00
Powerlink
SCADA
11. Vendor
Generic
Generic
Generic
HMS
Moxa
Moxa
NRG Systems
Novatech
RTS Services
Rabbit
Reliance
Rockwell Automation
Rockwell Automation
SAP
Schleifenbauer
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Schneider Electric
Product
Generic
Generic
Generic
EtherNet/IP / Modbus-TCP Interface
Generic
ioLogik
WindCube
Generic
Generic
Generic
Reliance 4 SCADA/HMI system
Generic
Micrologix
NetWeaver Application Server
SPbus gateway
CitectSCADA
Generic
Generic
Generic
Generic
Modicon
Modicon
Modicon
PowerLogic ECC
PowerLogic EGX
PowerLogic ION
PowerLogic ION
PowerLogic PM
PowerLogic PM
Protcol
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Dork/Banner
SLC5
openerp server:CherryPy
webSCADA-Modbus
HMS AnyBus-S WebServer
MoxaHttp
ioLogik Web Server
WindWeb
NovaTech HTTPD
RTS SCADA Server
Z-World Rabbit
Reliance 4 Control Server
Rockwell Automation
Micrologix
SAP NetWeaver Application Server
Schleifenbauer SPbus gateway
CitectSCADA
ClearSCADA
Power Measurement Ltd
Schneider-WEB
title:PowerLogic
Modicon M340 CPU
Modicon M340
TELEMECANIQUE BMX
Schneider Electric ECC21
Schneider Electric EGX100MG
Power Measurement Ltd ION8650
port:23 Meter ION""
PowerLogic PM800
Schneider Electric PM820SD
12. Vendor
Schneider Electric
Schneider Electric
Schneider Electric
Siemens
Siemens
Siemens
Siemens
Siemens
Siemens
Product
PowerLogic PM
Tac XENTA 913
Tac XENTA 913
Scalance S
Scalance W
Scalance X
Simatic HMI
Simatic HMI
Simatic HMI
Protcol
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Siemens
Siemens
Siemens
Siemens
Siemens
Siemens
Siemens
Siemens
Siemens
SoftPLC
Somfy
SpiderControl
Stulz
THUS
Tridium
Tridium
Wago
Simatic HMI
Simatic NET
Simatic NET
Simatic S7
Simatic S7
Simatic S7
Simatic S7
Simatic S7
Simatic S7
Generic
Generic
Generic
Generic
Generic
Generic
Generic
Generic
Advantsys STB Communication
Module
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Shodan
Advantsys
snmp
Dork/Banner
Schneider Electric PM870SD
TAC/Xenta
Tac XENTA 913
Scalance S
Scalance W
Scalance X
HMI, XP277
SIMATIC HMI
Simatic
Welcome to the Windows CE Telnet Service on
HMI_Panel
SIMATIC NET
Simatic net
Portal0000
Portal0000.htm
S7-200
S7-300
Simatic -S7 HMI
Simatic S7
SoftPLC
title:Somfy
SpiderControl
Stulz GmbH Klimatechnik
THUS plc FTP server
Niagara Web Server
niagara_audit
WAGO
Advantys STB Modbus/TCP Communication Module
- Standard