| A | B | C | D | E | F | G | H | I | J | |
|---|---|---|---|---|---|---|---|---|---|---|
1 | Network Scanning Watch List A.K.A The No-Scan List | To add to this list, report new devices to the google group: https://groups.google.com/forum/?fromgroups#!forum/netscanwatch | ||||||||
2 | Specific Warnings | |||||||||
3 | Vendor | Product | Unverified | Verified (Multiple sightings) | Vendor Acknowledged | Current No. of Reports | Reported By (Anonymous by default) | Scanning Tool (Not usually to blame, usually bad device) | Behaviour | Comments |
4 | Arecont | IP camera | X | 1 | Does a factory default reset | Listed verified as behaviour was reproduced | ||||
5 | Aspect | Call Centre system | X | Requires reboot | Listed verified as behaviour was reproduced | |||||
6 | Bosch | Alarm Controller | X | 1 | Listed verified as behaviour was reproduced | |||||
7 | Brocade | SAN Switch (DCX?) | X | 3 | Listed verified as behaviour was reproduced | |||||
8 | Canon | Network Printers | X | 1 | Printing of garbage pages in response to Qualys scan | |||||
9 | Checkpoint | VPN-1 | X | 1 | Connection table maxs out or CPU maxes out | Listed verified as behaviour was reproduced | ||||
10 | Cisco | 2600 router | X | 3 | Listed verified as behaviour was reproduced | |||||
11 | Dell | Kace appliance | X | 1 | ||||||
12 | Dell Powerconnect B-DCX & B-8000 (Brocade) and Dell Brocade Switches | |||||||||
13 | Ericsson | PPX Switch (Formerly Nortel Passport) | X | 0 | Currently speculated | |||||
14 | Cello platform (used in Mobile network platforms) | X | 2 | Listed verified as behaviour was reproduced | ||||||
15 | HP | B-Series Switch (Re-Badged Brocade) | X | 3 | Listed verified as behaviour was reproduced | |||||
16 | Lexmark | Network Printers | X | Configuration corruption caused by scanning When web interface unsecured | ||||||
17 | The Logic Group | Solve SE (POS payment processing) | X | 1 | Listed verified as behaviour was reproduced | |||||
18 | Nice | VOIP Recorders | X | 1 | Listed verified as behaviour was reproduced | |||||
19 | Nortel | Passport/MultiService Switch | X | 3 | CAM Table saturation | Listed verified as behaviour was reproduced | ||||
20 | Trane | HVAC Controllers Tracer Summit BMTW BCU (BMTW 8-001 ver 15.023.A100) | X | 1 | Listed verified as behaviour was reproduced Versions listed are confirmed | |||||
21 | Watchguard | Network Management Appliance | X | 1 | ||||||
22 | ||||||||||
23 | Generic Warnings | |||||||||
24 | ||||||||||
25 | Mainframes | Any and all | X | 4 | Resource exhaustion issues were reported in at least 2 cases | Multiple reports for different platforms including IBM Z and Unisys | ||||
26 | Digital Video Recorders | X | 1 | Scanning causes loss of connectivity to the clients | ||||||
27 | Network Switches | General | X | 1 | Scanning of the management IP address while scanning through the switch can cause it to become unresponsive. | This behaviour has been suggested for a couple of the devices listed and needs to be verified | ||||
28 | Network/Bandwidth | General | X | Scanning can consume all available bandwidth on a pipe, so make sure you're not swamping other people off the network. | ||||||
29 | Network/Firewalls | General | X | 3 | Large scope or open ended scanning can cause the connection tables to become full and therefore effectively DOS the firewall | |||||
30 | Network Admins | General | X | Always ask the local network/sysadmins do they no of any unusual/strange kit attached to the network. | ||||||