Isak is a lazy bastard

A SolaX solar dashboard showing today's PV production, battery state and grid export - wide open on the open internet. http.title:"Solax" -tag:honeypot #shodansafari

27,057 FTP servers still accept anonymous login and list their command set to anyone who asks. "230 Login successful." port:21 -tag:honeypot #shodansafari

153,875 SMB servers report "Authentication: disabled" - shares visible, names withheld here. "Authentication: disabled" port:445 -tag:honeypot #shodansafari

GoodWe solar inverters driving full Promotic SCADA pages: live power flows, boiler temps, battery stats - no login required. http.title:"GoodWe" -tag:honeypot #shodansafari

231 fluidd 3D-printer dashboards are wide open - live nozzle temps, job queue, and the printer's own camera feed. http.title:"Fluidd" -tag:honeypot #shodansafari

HikCentral Professional - a video-management server for camera fleets - announces itself on BACnet UDP 47808. 476 found. "HikCentral" port:47808 -tag:honeypot #shodansafari

Schneider Modicon M241 PLCs hand out CPU model and firmware version over unauthenticated Modbus TCP. 409 controllers. "TM241" port:502 -tag:honeypot #shodansafari

Schneider Modicon M221 PLCs answer Modbus TCP with full device identification - exact model and firmware - with no authentication. "TM221" port:502 -tag:honeypot #shodansafari

A gas turbine 'digital twin' streams live prognostics: 41,414 rpm, 749°C exhaust, fuel flow — and a mostly-red anomaly heatmap with HIGH alerts for excessive vibration and low oil pressure. http.title:"Gas Turbine" -tag:honeypot #shodansafari

A mini-hydro fleet status map grades stations by outage: one green dot (online <2h), the rest black — offline more than 24h. http.title:"Hydro" -tag:honeypot #shodansafari

A lithium battery management system dashboard is wide open: pack voltage, per-cell voltages, state of charge, charge current — and the alarm panel reads 'all systems normal'. http.title:"BMS" -tag:honeypot #shodansafari

A remote wind-turbine console streams its gauges: 0.0 kW output, 3.0 m/s wind, rotor at 17.3 rpm, alignment error, plus live power and rpm history traces. http.title:"Turbine" -tag:honeypot #shodansafari

A smart-agriculture greenhouse big-screen is open to the web: 27.6°C avg temp, 64.5% humidity, 54,003 lux irradiance, plus live temp/humidity/light charts for four growing houses. http.title:"Greenhouse" -tag:honeypot #shodansafari

A rail station's classic yellow dot-matrix departures board is live on the open web: train times, platforms and on-time status straight from National Rail data. http.title:"departures" -tag:honeypot #shodansafari

An "AIS Port Command" console watches a river port fleet: vessel names, MMSIs, alongside status, tamper/connectivity panels, operational logs and track replay — all live, all open. http.title:"AIS" http.html:"ship" -tag:honeypot #shodansafari

A coastal AIS hub streams 41 live vessels — pilot boats, cargo, names, positions, course, last update — to anyone who finds the page. http.html:"MMSI" http.title:"AIS" -tag:honeypot #shodansafari

Delta Controls eBMGR routers on UDP 47808: a passive BACnet read returns the object name, firmware, and proof of a foreign-device table. No connection made. product:"eBMGR" -tag:honeypot #shodansafari

Reliable Controls MACH-ProWebCom building controllers answer BACnet on UDP 47808 and hand out their object name, app software and firmware to anyone who asks. 450+ of them. product:"MACH-ProWebCom" -tag:honeypot #shodansafari