Finding the Fleet: What SNMP Finds in the Satellite Ground Segment that HTTP Misses
Brief
By Adrian Cheek, Senior Cybercrime Researcher
Ask an internet-wide scanning index how many satellite mission-control systems are exposed and you can get the answer 1,776. All but 18 of those results turn out to be the same static web page, replicated across cloud edge nodes in every region on earth.
The productive question asks which devices report the vendor’s string in their own SNMP system description, whereas the web query asks which pages carry that string in their title. That question returns 437. Every one of those is a distinct address, on a distinct national telecom network, reporting a distinct serial number, answering on the port assigned to the management protocol.
Same infrastructure, same vendors, same collection day, yet the difference is roughly three orders of magnitude, and nothing about the first number looks wrong on its face.