# Use Case Based Blended Teaching of IIoT Cybersecurity in the Industry 4.0 Era
## 4 Shodan for Practical IIoT/Industry 4.0 Cybersecurity Labs
### Lab 4: Advanced Shodan scripting
Shodan can find several hundreds of monitoring panels of Apache Spark masters (Shodan query: _\"Spark master\" worker_) and workers (Shodan query: _Spark worker_). Figure A10 shows as examples screenshots of the panels of a Spark master and a worker exposed by Shodan. ### Cloud Computing

Cloud computing has a relevant role in the Industry 4.0 paradigm since a significant amount of the processing is carried out by remote servers that centralize resources in a scalable way. Cloud servers usually run multiple virtual machines that are managed through a software like VMware vSphere. As of writing, Shodan detects almost 3000 VMware vSphere web clients (Shodan query: _Path=/vsphere-client/_). Moreover, Shodan currently detects almost 2000 running instances of VMwarevCloud Director (Shodan query: _X-VMware-Vcloud-REQUIST-ID_), another VMware cloud infrastructure management software. There are also other tools that run on the cloud that may be vulnerable to attacks. For instance, it is possible to find numerous Rsync servers, which are used to synchronize files between computers (Shodan query: _Product:rsyncd_). In addition, many software developers make use of automation tools that provide web dashboards with the shared projects. This is for instance the case of Jenkins: Figure 11 shows two open Jenkins dashboards discovered with Shodan (query: _port:8081 \"Dashboard [Jenkins]\"_). Another example is GitLab servers, which are typically used for software project development: more than 61,000 of them can be currently found through Shodan (Shodan query: _http:favicon.hash:1278323681_) and many of them allow for registering additional users to have direct access to the shared project code. ### Blockchain and Distributed Ledger Technologies (DLTs)

DLTs like blockchain provide decentralized transaction ledgers that are designed to avoid data tampering, thus implementing advanced cryptography mechanisms [92]. Thus, blockchain enables implementing decentralized applications that allow for exchanging transactions among entities that do not trust each other or do not want to incur in the additional costs derived from the involvement of certain middlemen (e.g., banks, distributors) [93]. Such features make blockchain appropriate for Industry 4.0 companies that require trusting their own employees and providers [16; 94; 95]. Most blockchain systems (e.g., Bitcoin [96], Ethereum [97]) are composed by regular nodes (i.e., nodes that only interact with the blockchain to read from it or to write data on it) and full nodes, which act like regular nodes but also validate the exchanged transactions. Such a validation process is often called mining, which involves a consensus mechanism and some sort of verification process. Thus, miners are nodes that validate collaboratively blocks of transactions before adding them to the blockchain. Shodan is capable of finding blockchain miners. For instance, Antminer is one of the most popular mining platforms [98], since it provides dedicated and really fast hardware. As of writing, Shodan detects almost 1000 antimers (Shodan query: _antminer_). The transaction log of many Ethereum miners can also be discovered easily (Shodan query: _\"Eth speed:\"_), as well as hundreds of Bitcoin miners (Shodan query: _lastblock_). Furthermore, more than 3000 Ethereum clients are currently detected by Shodan (query: _\"Ethereum RPC\"_). ## References

* [PERSON] et al. 2019 [PERSON]; [PERSON]; [PERSON] [PERSON] A Survey on Information and Communication Technologies for Industry 4.0: State-of-the-Art, Taxonomies, Perspectives, and Challenges. _IEEE Commun. Surv. Tutor._**2019**, _21_, 3467-3501. [CrossRef][PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Control kernel in smart factory environments: Smart resources integration. In Proceedings of the IEEE International Conference on Cyber Technology in Automation, Control, and Intelligent Systems (CYBER), Shenyang, China, 8-12 June 2015. * [PERSON] et al. (2014) [PERSON]; [PERSON]; [PERSON] Internet of Things in Industries: A Survey. _IEEE Trans. Ind.