Wednesday, August 1, 2012

Search Engine Boredom

Bored?
Have a Shodan account?

Lets look for protected directories in iran on a web server!

http://www.shodanhq.com/search?q=country%3Air+port%3A80+title%3Aprotected

The search string is country:ir port:80 title:protected . Nifty, but mostly ADSL modems. Now go look on other ports for the more fun stuff.

Now lets look for internal server errors
http://www.shodanhq.com/search?q=country%3Air+port%3A80+title%3Aerror
country:ir port:80 title:error

Wonder what this means. Almost looks SCADA related...
-------------------------------------------------------------------------------------------------------------------------------


95.82.76.231
Added on 01.08.2012
Iran, Islamic Republic of
Details 
HTTP/1.0 504 Gateway Timeout
Content-Length: 708
Content-Type: text/html
Date: Mon, 05 Jan 1970 07:53:28 GMT
Expires: Mon, 05 Jan 1970 07:53:28 GMT
Server: Mikrotik HttpProxy
Proxy-Connection: close 
188.253.16.68
Ghaem Ertebatat Rasavi
Added on 31.07.2012
Iran, Islamic Republic of
Details 
HTTP/1.0 504 Gateway Timeout
Content-Length: 686
Content-Type: text/html
Date: Fri, 02 Jan 1970 06:57:00 GMT
Expires: Fri, 02 Jan 1970 06:57:00 GMT
Server: Mikrotik HttpProxy
Proxy-Connection: close



-------------------------------------------------------------------------------------------------------------
I'm sure they have their code squared away

212.50.246.72
Rasaneh Esfahan Net
Added on 31.07.2012
Iran, Islamic Republic ofEsfahan
Details 
HTTP/1.0 500 Internal Server Error
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/7.0
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Tue, 31 Jul 2012 06:59:42 GMT
Content-Length: 3030 
----------------------------------------------------------------------
Web Clock eh?
77.36.254.55
IRIB
Added on 31.07.2012
Iran, Islamic Republic of
Details 
HTTP/1.0 200 OK
Pragma: no-cache
Content-Length: 1820
Content-Type: text/html
Server: Microsoft-IIS/7.5
Date: Wed, 01 Aug 2012 05:14:08 GMT


----------------------------------------------------------------------------------------------------------------------------------

Nobody believes in updates anymore?

178.173.167.99
Linux 3.x
Shiraz Hamyar Co.
Added on 29.07.2012
Iran, Islamic Republic ofShiraz
Details 
HTTP/1.0 403 Forbidden
Server: squid
Mime-Version: 1.0
Date: Sun, 29 Jul 2012 23:11:02 GMT
Content-Type: text/html
Content-Length: 3084
X-Squid-Error: ERR_ACCESS_DENIED 0
Vary: Accept-Language
Content-Language: en
X-Cache: MISS from FIRE
X-Cache-Lookup: NONE from FIRE:3138
Via: 1.0 FIRE (squid)
Connection: keep-alive 

No comments:

Post a Comment