Backup_Repos/SecLists
1
0
Fork 0
mirror of https://github.com/danielmiessler/SecLists synced 2025-12-06 08:53:59 +01:00
Code Issues Projects Releases Wiki Activity

Merge pull request #44 from cafnet/master

Browse source 
Added 000webhost passwords / Also added SCADA Hardcoded password csv
This commit is contained in:
Daniel Miessler 2016-01-04 13:25:40 -08:00
commit ede701f45b
2 changed files with 1000113 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1000001
Passwords/000webhost.txt Normal file
View file

File diff suppressed because it is too large Load diff

112
Passwords/scadapass.csv Normal file
View file

@ -0,0 +1,112 @@
#SCADA StrangeLove Default/Hardcoded Passwords List,,,,,,
#Find more at http://www.scada.sl,,,,,,
#release 1.0 by Oxana Andreeva (oxana.andreeva@inbox.ru),,,,,,
,,,,,,
Vendor,Device,Default password,Port,Device type,Protocol,Source
ABB,AC 800M,service:ABB800xA,,Controller ,,https://library.e.abb.com/public/f355a67551218ae7c1257dc0003298c5/3BDS021515-600_-_en_AC_800M_6.0_PROFINET_IO_Configuration.pdf
ABB,SREA-01,admin:admin,80/tcp,Ethernet Adapter Module,http,https://www.inverterdrive.com/file/ABB-SREA-01-Manual
B&B ELECTRONICS,CR10 v2,root:root,80/tcp,Industrial router,http,http://tekniska.pl/downloadfile/1400014902-1208342584-pdf
B&B ELECTRONICS,Conel 4.0.1,root:root,80/tcp,Industrial router,http,http://conel.ru/shared/files/201502/9_411.pdf
B&B ELECTRONICS,SPECTRE Router,root:root,80/tcp,Router,http,b&b electronics SPECTRE Router.pdf
B&B ELECTRONICS,ER75i/ER 75i DUO/ER 75i SL/ER75i v2,root:root,80/tcp,Industrial router,http,http://ec-mobile.ru/user_files/File/Conel/ER75i_Manual_RUS.pdf
B&B ELECTRONICS,LR77 v2 Libratum/LR77 v2,root:root,80/tcp,Industrial router,http,"http://www.induowireless.com/wp-content/uploads/2014/12/lr77-v2-libratum-manual.pdf, http://data.kommago.nl/files/pdf/conel-lr77_v2-handleiding.pdf"
B&B ELECTRONICS,UR5i v2,root:root,80/tcp,Industrial router,http,http://www.cd.lucom.de/vpn-industrie-router/dokumentation/handbuch/ur5iv2-guide.pdf
B&B ELECTRONICS,UCR11-v2/UCR11 v2 SL,root:root,80/tcp,Industrial router,http,http://www.induowireless.com/wp-content/uploads/2014/03/ucr11-3g-router-hspa-cdma.pdf
B&B ELECTRONICS,XR5i v2E/XR5i v2/XR5i/XR5i SL,root:root,80/tcp,Industrial router,http,http://www.cd.lucom.de/vpn-industrie-router/dokumentation/handbuch/xr5iv2e-guide.pdf
Beck IPC, IPC@CHIP,"PPPSERVER:, ppps:ppps",,PLC,pap/chap,https://www.beck-ipc.com/files/api/scxxx/config.htm
BinTec Elmeg,BinTec X1200 II,"admin:bintec, ",,Router,,http://www.router-defaults.com/Router/BinTec--x1200-ip-password-username
BinTec Elmeg,any routers,"(##unknown - means not known or any char):, ##unknown:snmp-Trap , suggested:, admin:1234, admin:password, admin:admin",,Router,,http://www.router-defaults.com/Router/BinTec--x1200-ip-password-username
BinTec Elmeg,BinTec R230aw,admin:funwerk,,Router,,http://www.tomshw.it/forum/banda-larga/154194-router-bintec.html
BinTec Elmeg,"bintec W2002T-n, ","admin:funwerk, admin:admin",,WLAN Access Point for applications in rolling stocks,,bintec W2002T-n.jpeg
Contemporary Control Systems,BASRT-B,admin:admin,80/tcp,Router,http,http://www.ccontrols.com/pdf/TD0712000I2.pdf
Datasensor,UR5i/UR5i SL,root:root,80/tcp,Router,http,http://datasensor.de/sites/datasensor.de/files/datasheets/UR5i_m_e.pdf
Digi,DC-ME-01T-S,"user:passwd, root:dbps",,Networking Modules,,http://www.digi.com/support/forum/13553/digi-connect-me-default-password
Digi,"Digi Connect SP, Digi Connect Wi-SP, Digi Connect ME, Digi Connect ME 4 MB, Digi Connect Wi-ME, Digi Connect EM, Digi Connect Wi-EM",root:dbps,80/tcp,Network Device Server Module,http,http://ftp1.digi.com/support/documentation/90000565_P1.pdf
Digi,"Digi Connect ES 4/8 SB with Switch, Digi Connect ES 4/8 SB",root:dbps,80/tcp,Concentrator,http,http://ftp1.digi.com/support/documentation/90000565_P1.pdf
Digi,"ConnectPort TS 4x4, ConnectPort TS 4x2, ConnectPort TS W, ConnectPort TS 8, ConnectPort TS 8 MEI, ConnectPort TS 16",root:dbps,80/tcp,Terminal Server,http,http://ftp1.digi.com/support/documentation/90000565_P1.pdf
Digi,"Digi Connect WAN, Digi Connect WAN GPRS, Digi Connect WAN GSM-R, Digi Connect WAN VPN, Digi Connect WAN IA, Digi Connect WAN 3G, Digi Connect WAN 3G IA, Digi Connect WAN 4G",root:dbps,80/tcp,Industrial router,http,http://www.acspl.com.au/Manuals/digi_Wan.pdf
Digi,Digi TransPort WR21/WR44,username:password,80/tcp,Industrial router,http,http://ftp1.digi.com/support/documentation/transport/assets/guides/IG_Digi_WR21.pdf
Digi,Digi CM,root:dbps,"console port (9600, 8, N, 1)",Industrial router,,http://ftp1.digi.com/support/documentation/90000300_E.pdf
Digi,DigiOne IAP Serial,root:dbps,80/tcp,Gateway,http,http://web-material3.yokogawa.com/IMMW100EIP.pdf
Echelon,i.LON® SmartServer,"for ftp and lns servers:, ilon:ilon",,router,"ftp, L2TP",http://www.unicom-bg.com/pdf/systemintegration/iLONproducts/i.LON_SmartServer_Freely_Programmable_Modules_User_Guide.pdf
Emerson ,DeltaV™ Digital Automation System,Administrator:deltav,,Automation System,,http://www.chem.mtu.edu/chem_eng/current/new_courses/CM4120/2009/Getting%20Started.pdf
Emerson ,Liebert IntelliSlot Web Card ,"Liebert:Liebert, User:User",23/tcp,Web Card ,telnet,http://www.emersonnetworkpower.com/documentation/en-us/products/monitoring/documents/sl-52615.pdf
Emerson ,Smart Wireless Gateway 1420,admin:default,80/tcp,Wireless Gateway,http,http://www2.emersonprocess.com/siteadmincenter/PM%20Rosemount%20Documents/00809-0200-4420.pdf
Emerson ,Network Power® MPH2™ Rack PDU,admin:admin,80/tcp,Rack PDUs,http,https://community.emerson.com/networkpower/support/avocent/power/mph2/m/mediagallery/3093
Emerson ,UL33 UPS ,123456,,UPS ,,Emerson UL33 UPS.doc
Emerson ,Control Link Refrigeration System Controller ,0,,Controller ,,http://foodservice.structuralconcepts.com/media/com_sccmanager/temp-controller-info/emerson-control-link-cpc-controller.pdf
Emerson ,UltraSite,"User 01:100, User 05:200, User 09:300, Engineer:400",,Software,,http://www.emersonclimate.com/Documents/Retail%20Solutions/Manuals/0261004Rev1.pdf
Emerson ,Avocent® ACS 6000 Advanced Console Server,"admin: avocent, root:linux",,Console Server,"console port, with Telnet, SSH",Emerson Avocent ACS 6000.pdf
Emerson ,ROCLINK™ 800,LOI:1000,,Software,,http://www.documentation.emersonprocess.com/groups/public/documents/instruction_manuals/d301159x012.pdf
Emerson ,ControlWave® Micro Quick,"for download project:, SYSTEM:666666",,PLC,,http://www.documentation.emersonprocess.com/groups/public/documents/users_guide/d301425x012.pdf
Emerson ,IP-KVM Avocent MergePoint Unity,Admin:blank,,Switch,,http://community.emerson.com/networkpower/support/avocent/kvmip/mpunity/w/wiki-mergepoint-unity/363.default-user-name-and-password-for-the-mergepoint-unity-kvm-over-ip-appliance
ENTES,"EMG-10, EMG-02 , EMG-12","emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02)",80/tcp,MODBUS Gateway,http,http://www.entes.com.tr/dosyalar/EMG_Series_EN-ver_2_2.pdf
eWON,all,adm:adm,80/tcp,Router,http,http://ewon.biz/sites/default/files/aug-004-0-en-ewon_getting_started.pdf
Helmholz Systeme,NETLink PRO HW 1-1a-1 and FW 1. 54 and higher,admin,,Ethernet Gateway for MPI/PROFIBUS,,Helmholtz Systeme.pdf
Hirschmann,"RS20/RS30, MICE","admin:private, user:public",80/tcp,Switch,http,"http://www.wwsinternational.com.au/Hirschmann/pdf/quickstart.pdf;, Hirschmann MICE.pdf"
Hirschmann,RSP 20/25/30/35,"user:public, admin:private",23/tcp (telnet),Industrial router,telnet,Hirschmann RSP20_25_30_35.pdf
Hirschmann,MACH 4000 Family/MACH 1000 Family/MACH 100 Family/MACH 4002 Family/MACH104 Family Full Gigabit/MACH 1040 Family Full Gigabit,"user:public, admin:private",,Industrial router,,"Hirschmann MACH1040 Full Gigabit.pdf, Hirschmann MACH4002 Family.pdf, Hirschmann MACH1000 Family.pdf, Hirschmann MACH4000 Family.pdf, http://www.industrialcomms.co.uk/images/pdf/IG_MACH104_02_1210_en.pdf, http://www.industrialcomms.co.uk/images/pdf/IG_MACH100_03_0709_en.pdf"
Hirschmann,"OCTOPUS 8M..., OCTOPUS 16M..., OCTOPUS 24M…","user:public, admin:private",23/tcp,Industrial router,telnet,https://www.neteon.net/media/downloads/IG_Octopus8M16M24M_PoETrain_02_0708_en_1.pdf
IBM,2210,def:trade,, Multiprotocol Router,,http://www.governmentsecurity.org/_/articles/default-logins-and-passwords-for-networked-devices.html
Moxa,AWK-5232-RCC Series ,admin:root,80/tcp,Industrial 802.11n wireless AP/bridge/client,http,http://www.moxa.com/doc/man/AWK-3131-RCC_UM_1e.pdf
Moxa,"Railway Remote I/O (ioLogik E12xx , ioLogik E15xx )","Http on Port 9020: , 1)none:root, 2)none:none",9020/tcp,Remote Ethernet I/O,http,http://www.toolswatch.org/2013/02/new-scada-default-passwords-added-to-dpe-xml-database/
Moxa,"Cellular Micro RTU Controller (ioLogik W53xx, ioLogik)","administrator:blank, Telnet on port 9900 / 9000:, root:root",9900/9000/tcp,micro RTU controller,telnet or serial console,http://www.toolswatch.org/2013/02/new-scada-default-passwords-added-to-dpe-xml-database/
Moxa,VPort 461 Industrial Video Encoder ,"admin:admin, <none>:<none>",,Industrial Video Encoder ,telnet,http://www.moxa.com/doc/man/VPort_461_UM_2e.pdf
Moxa, IA240/241 Embedded computer,"telnet root:root, ftp root:blank, ppp root:blank, serial console root:root",,"Embedded computers are designed for industrial, automation applications","telnet, ftp, ppp, serial console",http://www.toolswatch.org/2013/02/new-scada-default-passwords-added-to-dpe-xml-database/
moxa,OnCell Central Manager,admin:admin,8080/tcp,Software,http,http://www.moxa.ru/files/manuals_modems/oncell_central_manager_users_manual_v1.pdf
moxa,EDS-508A/505A Series,admin:<none>,,Switch,telnet or serial console,http://www.moxa.com/doc/man/eds-508a_505a_um_4e.pdf
Moxa,OnCell G3100,Admin:Keep <blank>,23/tcp,cellular IP gateways,telnet,http://www.moxa.com/doc/man/OnCell_G3100_Series_Users_Manual_v7.pdf
Netcomm Wireless,"3G21WB (BigPond Firmware), 3G9WB (BigPond Firmware), N3G001W (Netcomm Firmware), NB14WN (Netcomm Firmware), NB5 (Netcomm Firmware), NB5Plus4 (Netcomm Firmware), NB6Plus4 (Netcomm Firmware), NB6Plus4W (Netcomm Firmware), NNB7 (Netcomm Firmware), NB9WMAXX (Netcomm Firmware), NP804N (Netcomm Firmware)",admin:admin,,Router,,http://www.pcwintech.com/default-router-modem-passwords2
Netcomm Wireless,"NB1300 Plus 4 (Netcomm Firmware), NP803N (Netcomm Firmware)",admin:password,,Router,,http://www.pcwintech.com/default-router-modem-passwords2
NOVUS AUTOMATION,Superview,superview:superview ,,SCADA,,http://www.scigiene.com/pdfs/Superview%20Manual.pdf
OMRON IA,CJ1M CPU Units with Ethernet Functions,"for http: ETHERNET, for ftp: CONFIDENTIAL","80/tcp (http), 21/tcp (ftp)",PLC,"http, ftp",http://omronkft.hu/nostree/pdfs/plc/cs1_cj1/w441-e1-03+cj-series-ethernetfunc+opermanual.pdf
Ouman ,EH-net server,admin:admin,,HMI Software,,http://docplayer.fi/509891-Palvelin-eh-net-kayttoonotto-ja-yllapito-www-ouman-fi.html
Phoenix Contact,Logic+,admin:admin,80/tcp,Software,http,https://www.phoenixcontact.com/assets/downloads_ed/global/web_dwl_technical_info/52005213_EN.pdf
Prosoft Technology,ICX30-HWC,admin:password,80/tcp, Industrial Cellular Gateway,http,http://www.prosoft-technology.com/content/download/8772/168219/version/9/file/ICX30_HWC_User_Manual.pdf
Rockwell Automation /Allen-Bradley,1756-EN2TSC,Administrator:admin,80/tcp,EtherNet/IP communication module,http,http://literature.rockwellautomation.com/idc/groups/literature/documents/um/enet-um003_-en-p.pdf
Rockwell Automation /Allen-Bradley,1734-AENT,admin:password,80/tcp, I/O Adapter ,http,http://literature.rockwellautomation.com/idc/groups/literature/documents/um/1734-um011_-en-p.pdf
Rockwell Automation /Allen-Bradley,1756-EWEB,Administrator:<none>,80/tcp,Web Server Module,http,https://www.jlab.org/Hall-D/Documents/manuals/Allen-Bradley%20stuff/1756-EWEB%20Web%20Server%20Module.pdf
Rockwell Automation /Allen-Bradley,MicroLogix 1400 Embedded Web Server,"administrator:ml1400, guest:guest",80/tcp,Web Server,http,http://literature.rockwellautomation.com/idc/groups/literature/documents/um/1766-um002_-en-p.pdf
Rockwell Automation /Allen-Bradley,MicroLogix 1100 Embedded Web Server,"administrator:ml1100, guest:guest",80/tcp,Web Server,http,http://literature.rockwellautomation.com/idc/groups/literature/documents/um/1763-um002_-en-p.pdf
Rockwell Automation /Allen-Bradley,"PanelView Plus 6 Graphic Terminals, Firmware 6.10 or later/ , PVPlus 6",password,,SCADA,,http://www.manualsdir.com/manuals/580848/rockwell-automation-2711p-xxxx-panelview-plus-6-terminals-user-manual.html?page=54
Samsung,Integrated Management System DMS,root:rkwjsdusrnth,,Data Management Server,,http://www.tenable.com/plugins/index.php?view=single&id=53878
Samsung,Integrated Management System S-NET mini,0,,Built-in web server,,http://dvmdownload.com/controls/central-control-options/mst-s3w/technical-tip/SNET%20MINI%20MST-S3W%20SETUP_1%2017%202012.pdf
Schneider Electric,PowerLogic™ Series 800 Power Meter,0,,PLC,,http://www.powerlogic.com/literature/63230-500-282A1_PM8_Install_Guide.pdf
Schneider Electric,PowerLogic™ ION8*/7*/6* Energy and power meter,0,,Energy and power meter,,"http://www2.schneider-electric.com/library/SCHNEIDER_ELECTRIC/SE_LOCAL/APS/209510_35F6/8650_Install_Guide.pdf, http://azzo.com.au/wp-content/uploads/2015/08/ION7550-RTU-UserGuide.pdf"
Schneider Electric,PowerLogicTM Ethernet Gateway EGX300/EGX100,Administrator:Gateway,80/tcp,Integrated gateway-server,http,http://azzo.com.au/wp-content/uploads/2015/05/PowerLogic-EGX300-Users-Guide.pdf
Schneider Electric,POWERLOGIC® EGX200 or EGX400 with firmware version 5.5 or higher,"Administrator:admin, User 1:master, User 2:engineer, User 3:operator",80/tcp,gateway-server,http,http://www.powerlogic.com/literature/63230-314-208A3.pdf
Schneider Electric,Modicon Quantum,"ftpuser/password, qbf77101/hexakisoctahedron, USER:USERUSER",80/tcp,PLC,http,"http://www.digitalbond.com/tools/basecamp/schneider-modicon-quantum/, http://www.schneider-electric.cn/downloads//85257689000007EE/All/01507367599A9DC985257871005F4B3D/$File/EIO0000000121EN.pdf"
Schneider Electric,Modicon M340 for Ethernet,"ntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials)",,PLC,"ftp, http",https://dariusfreamon.wordpress.com/2013/12/08/schneider-modicon-m340-for-ethernet-multiple-default-credentials/
Schneider Electric,"PM8000, PM8240, PM8243, PM8244",8000:00:00,80/tcp,PLC,http,http://www2.schneider-electric.com/sites/corporate/en/support/faq/faq_main.page?page=content&country=APS_GLOBAL&lang=en&locale=en_US&id=FA243275&redirect=true
Schneider Electric,TSX ETG 1000,"HTTP server, pap: USER:USER, FTP:, wsupgrade:wsupgrade",21 TCP,PLC,"ftp, pap, http",http://www.is-com.ru/files/net_tsxetg1000.pdf
Schneider Electric,ETG100,Administrator:Gateway,,PLC,,http://www.schneider-electric.co.in/sites/india/en/support/faq/main_faq.page?page=content&country=IN&lang=en&id=FA138738&locale=en_US&redirect=true
Schneider Electric,M258,adm:adm,80/tcp,PLC,http,http://ewon.biz/sites/default/files/aug-054-0-en-remote_access_for_schneider_m258_plcs.pdf
Schneider Electric,Quantum NOE 771 xx,"ftp, http: , USER:USER",,Ethernet Modules,"ftp, http",https://igate.alamedaelectric.com/Modicon%20Documents/PLC%20Quantum%20PLC%20NOE771xx%20User%20Manual%20v5.0.pdf
siemens ,Simatic S7-300 (pre-2009 versions),"Hardcoded password:, Basisk:Basisk",,PLC,telnet. Http,http://www.wired.com/2011/08/siemens-hardcoded-password/
siemens ,Scalance,"admin:admin, user:user",,Industrial Ethernet switche,,https://www.acunetix.com/vulnerabilities/network/vulnerability/siemens-scalance-default-credentials/
siemens ,"Scalance (x 200, W788-1PRO, W788-2PRO, etc.)","Admin:admin, User:user, for FTP access:, siemens:siemens",80/tcp,"Industrial Wireless LAN, Industrial Ethernet Switches","ftp, http","https://cache.industry.siemens.com/dl/files/728/25508728/att_4008/v1/BA_SCALANCE-X-200_76.pdf, https://www.acunetix.com/vulnerabilities/network/vulnerability/siemens-scalance-default-credentials/"
siemens ,SyncoTM living Web server OZW772 V2.0,Administrator:Password,,Web-server,,http://www.toolswatch.org/2013/02/new-scada-default-passwords-added-to-dpe-xml-database/
siemens ,Siemens WinCC 7.x,"winccd:winccpass, wincce:winccpass, DMUser:Data&Pass, Administrator:Administrator",,HMI Software,,http://www.toolswatch.org/2013/02/new-scada-default-passwords-added-to-dpe-xml-database/
siemens ,Ruggedcom RMC30,admin:admin,80/tcp,Industrial router,http,Siemens Ruggedcom RMC30.pdf
siemens ,"RuggedSwitch, RS8000 / RS1600 / RS900",admin,,Industrial router,,http://www.techsalesnw.com/oldwebsite/products/ethernet/rc_files/RuggedSwitch%20User%20Guide%20v1.5.1.pdf
Siemens ,Siemens Climatix,"Level 6 End users:, 1000, Level 4 Service operator: , 2000, Level 2 OEM:, 6000",,PLC,,http://www.ivprodukt.se/documents/ivprodukt/documents/styr%20climatix/basis%20document%20climatix%20control%20system%20bdcx.100820.01.gb.pdf
Sierra Wireless,AirLink,sconsole:12345,"12345/tcp, 2332/tcp",3G/4G gateway,"telnet, ssh",official documentation
Sierra Wireless,AirLink,"user:12345, viewer:12345",9191/tcp,3G/4G gateway,http,official documentation
Stulz GmbH,Stulz WIB 8000,"Administrator, highest authorization:, ganymed, Medium authorization:, kallisto, Lowest authorization:, europa",,PLC,,https://dariusfreamon.wordpress.com/2013/09/07/stulz-wib-8000-air-conditioning-web-interface-board-multiple-vulnerabilities/
TAC AB,"TAC Xenta 500/700/911/913, TAC Xenta511, TAC Xenta527, ",root:root,,PLC,,http://www.xref.be/dpdf/tac_xenta911_xenta511_manuel_uk.pdf
Tecomat ,Tecomat Foxtrot ,"0:0 (role 0) , 1:1 (role 1), 2:2 (role 2), 3:3 (role 3), 4:4 (role 4), 5:5 (role 5), 6:6 (role 6), 7:7 (role 7), 8:8 (role 8), 9:9 (role 9) ",,PLC,,http://dsec.ru/ipm-research-center/notification-of-vulnerabilities/tecomat_plc_paroli_po_umolchaniyu/
Tridium,NiagaraAX,tridium:niagara,,"Software for JACE-2, JACE-403 or JACE-545",,http://www.hvacc.net/pdf/tridium/docs_3.2.16/docJaceStartup/docJaceStartup.pdf
Turck,BL20-E-GW-EN,password,80/tcp,PLC,http,http://pdb.turck.de/media/_in/Anlagen/D301173.pdf
Wago,WAGO-I/O-SYSTEM 750,"admin:wago, user:user, guest:guest",80/tcp,Controller ,http,http://www.wago.spb.ru/upload/information_system_28/3/2/8/item_328/information_items_property_340.pdf
Wago,WAGO-I/O-IPC 758-870/000-xxx,"http, ftp:, user:user00 , administrator:, su:ko2003wa",80/tcp (http),Compact Industrial PC ,"http, ftp",http://www.wago.com/wagoweb/documentation/758/eng_manu/870/q07580870_00000000_2en.pdf
Wago,Modular I/O-System Linux Fieldbus Coupler 750-860 ,"root:wago , admin:wago, user:user , guest:guest ",,PLC,,http://www.wago.com/wagoweb/documentation/750/eng_manu/coupler_controller/m07500860_00000000_0en.pdf
Wellintech,KingSCADA 3.0,administrator:administrator (role KVAdministrator),,Software,,http://www.slideshare.net/DefconRussia/pavel-volobuev-alexander-minozhenko-alexander-polyakov-practical-demonstration-of-typical-attacks-and-0days-in-scada-and-plccontrollers
Westermo,TDW 33,"no password, just return, Hardcoded password:, n3Y9kA6otYZu8 , (?? TD-36)",,Industrial Modem,,Westermo TDW 33.pdf
Westermo,MRD-305-DIN/MRD-310/MRD-315/MRD-330/MRD-355/MRD-350/MRD-455,admin:westermo,80/tcp,Industrial router,http,"http://www.eternity-sales.com/westermo/files/westermo_ug_6623-2266_mrd-305-DIN_en.pdf, Westermo MRD 330.pdf"
Westermo,"RedFox Series, Wolverine Series, Lynx Series, Falcon Series, Viper Series",admin:westermo,80/tcp,Industrial router,http,http://www.westermosales.com/pdfs/westermo_mg_6101-3201_weos.pdf
Wonderware,Intouch,Administrator:Wonderware,,SCADA,,http://www.automation-talk.info/2011/01/default-intouch-login-username-password.html
Yokogawa,YFGW410 gateway,admin:!admin,,Wireless Management Station,,http://www.yokogawa.com/us/support/knowledgebase/i-cannot-login-to-the-yfgw410-gateway-what-is-the-default-username-and-password-of-a-yfgw410-isa100-gateway.htm
Yokogawa,DX1000/DX1000N/DX2000 Advanced,"Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90",,Software,,http://web-material3.yokogawa.com/IM04L41B01-05EN_020.pdf
Yokogawa,CENTUM CS 3000 DCS,CENTUM:CENTUM,,Distributed Control System,,http://www.allinterview.com/showanswers/170266/having-yokogawa-centum-cs-3000-dcs-2-fcs-4-operation-download-message-appears-eq.html
Yokogawa,EJX910A Multivariable Transmitter HART Communication Type,"YOKOGAWA. (to release the Write Protect mode), ",,Multivariable transmitter,,http://www.controlswarehouse.com/sheets/meriam/EJX910HARTIM01C25R02-01E_001.pdf
Yokogawa,WT 3000 Driver ,anonymous:blank (Ethernet access),,Precision Power Analyzer,,Yokagawa WT3000.doc
1 #SCADA StrangeLove Default/Hardcoded Passwords List
2 #Find more at http://www.scada.sl
3 #release 1.0 by Oxana Andreeva (oxana.andreeva@inbox.ru)
4
5 Vendor Device Default password Port Device type Protocol Source
6 ABB AC 800M service:ABB800xA Controller https://library.e.abb.com/public/f355a67551218ae7c1257dc0003298c5/3BDS021515-600_-_en_AC_800M_6.0_PROFINET_IO_Configuration.pdf
7 ABB SREA-01 admin:admin 80/tcp Ethernet Adapter Module http https://www.inverterdrive.com/file/ABB-SREA-01-Manual
8 B&B ELECTRONICS CR10 v2 root:root 80/tcp Industrial router http http://tekniska.pl/downloadfile/1400014902-1208342584-pdf
9 B&B ELECTRONICS Conel 4.0.1 root:root 80/tcp Industrial router http http://conel.ru/shared/files/201502/9_411.pdf
10 B&B ELECTRONICS SPECTRE Router root:root 80/tcp Router http b&b electronics SPECTRE Router.pdf
11 B&B ELECTRONICS ER75i/ER 75i DUO/ER 75i SL/ER75i v2 root:root 80/tcp Industrial router http http://ec-mobile.ru/user_files/File/Conel/ER75i_Manual_RUS.pdf
12 B&B ELECTRONICS LR77 v2 Libratum/LR77 v2 root:root 80/tcp Industrial router http http://www.induowireless.com/wp-content/uploads/2014/12/lr77-v2-libratum-manual.pdf, http://data.kommago.nl/files/pdf/conel-lr77_v2-handleiding.pdf
13 B&B ELECTRONICS UR5i v2 root:root 80/tcp Industrial router http http://www.cd.lucom.de/vpn-industrie-router/dokumentation/handbuch/ur5iv2-guide.pdf
14 B&B ELECTRONICS UCR11-v2/UCR11 v2 SL root:root 80/tcp Industrial router http http://www.induowireless.com/wp-content/uploads/2014/03/ucr11-3g-router-hspa-cdma.pdf
15 B&B ELECTRONICS XR5i v2E/XR5i v2/XR5i/XR5i SL root:root 80/tcp Industrial router http http://www.cd.lucom.de/vpn-industrie-router/dokumentation/handbuch/xr5iv2e-guide.pdf
16 Beck IPC IPC@CHIP PPPSERVER:, ppps:ppps PLC pap/chap https://www.beck-ipc.com/files/api/scxxx/config.htm
17 BinTec Elmeg BinTec X1200 II admin:bintec, Router http://www.router-defaults.com/Router/BinTec--x1200-ip-password-username
18 BinTec Elmeg any routers (##unknown - means not known or any char):, ##unknown:snmp-Trap , suggested:, admin:1234, admin:password, admin:admin Router http://www.router-defaults.com/Router/BinTec--x1200-ip-password-username
19 BinTec Elmeg BinTec R230aw admin:funwerk Router http://www.tomshw.it/forum/banda-larga/154194-router-bintec.html
20 BinTec Elmeg bintec W2002T-n, admin:funwerk, admin:admin WLAN Access Point for applications in rolling stocks bintec W2002T-n.jpeg
21 Contemporary Control Systems BASRT-B admin:admin 80/tcp Router http http://www.ccontrols.com/pdf/TD0712000I2.pdf
22 Datasensor UR5i/UR5i SL root:root 80/tcp Router http http://datasensor.de/sites/datasensor.de/files/datasheets/UR5i_m_e.pdf
23 Digi DC-ME-01T-S user:passwd, root:dbps Networking Modules http://www.digi.com/support/forum/13553/digi-connect-me-default-password
24 Digi Digi Connect SP, Digi Connect Wi-SP, Digi Connect ME, Digi Connect ME 4 MB, Digi Connect Wi-ME, Digi Connect EM, Digi Connect Wi-EM root:dbps 80/tcp Network Device Server Module http http://ftp1.digi.com/support/documentation/90000565_P1.pdf
25 Digi Digi Connect ES 4/8 SB with Switch, Digi Connect ES 4/8 SB root:dbps 80/tcp Concentrator http http://ftp1.digi.com/support/documentation/90000565_P1.pdf
26 Digi ConnectPort TS 4x4, ConnectPort TS 4x2, ConnectPort TS W, ConnectPort TS 8, ConnectPort TS 8 MEI, ConnectPort TS 16 root:dbps 80/tcp Terminal Server http http://ftp1.digi.com/support/documentation/90000565_P1.pdf
27 Digi Digi Connect WAN, Digi Connect WAN GPRS, Digi Connect WAN GSM-R, Digi Connect WAN VPN, Digi Connect WAN IA, Digi Connect WAN 3G, Digi Connect WAN 3G IA, Digi Connect WAN 4G root:dbps 80/tcp Industrial router http http://www.acspl.com.au/Manuals/digi_Wan.pdf
28 Digi Digi TransPort WR21/WR44 username:password 80/tcp Industrial router http http://ftp1.digi.com/support/documentation/transport/assets/guides/IG_Digi_WR21.pdf
29 Digi Digi CM root:dbps console port (9600, 8, N, 1) Industrial router http://ftp1.digi.com/support/documentation/90000300_E.pdf
30 Digi DigiOne IAP Serial root:dbps 80/tcp Gateway http http://web-material3.yokogawa.com/IMMW100EIP.pdf
31 Echelon i.LON® SmartServer for ftp and lns servers:, ilon:ilon router ftp, L2TP http://www.unicom-bg.com/pdf/systemintegration/iLONproducts/i.LON_SmartServer_Freely_Programmable_Modules_User_Guide.pdf
32 Emerson DeltaV™ Digital Automation System Administrator:deltav Automation System http://www.chem.mtu.edu/chem_eng/current/new_courses/CM4120/2009/Getting%20Started.pdf
33 Emerson Liebert IntelliSlot Web Card Liebert:Liebert, User:User 23/tcp Web Card telnet http://www.emersonnetworkpower.com/documentation/en-us/products/monitoring/documents/sl-52615.pdf
34 Emerson Smart Wireless Gateway 1420 admin:default 80/tcp Wireless Gateway http http://www2.emersonprocess.com/siteadmincenter/PM%20Rosemount%20Documents/00809-0200-4420.pdf
35 Emerson Network Power® MPH2™ Rack PDU admin:admin 80/tcp Rack PDUs http https://community.emerson.com/networkpower/support/avocent/power/mph2/m/mediagallery/3093
36 Emerson UL33 UPS 123456 UPS Emerson UL33 UPS.doc
37 Emerson Control Link Refrigeration System Controller 0 Controller http://foodservice.structuralconcepts.com/media/com_sccmanager/temp-controller-info/emerson-control-link-cpc-controller.pdf
38 Emerson UltraSite User 01:100, User 05:200, User 09:300, Engineer:400 Software http://www.emersonclimate.com/Documents/Retail%20Solutions/Manuals/0261004Rev1.pdf
39 Emerson Avocent® ACS 6000 Advanced Console Server admin: avocent, root:linux Console Server console port, with Telnet, SSH Emerson Avocent ACS 6000.pdf
40 Emerson ROCLINK™ 800 LOI:1000 Software http://www.documentation.emersonprocess.com/groups/public/documents/instruction_manuals/d301159x012.pdf
41 Emerson ControlWave® Micro Quick for download project:, SYSTEM:666666 PLC http://www.documentation.emersonprocess.com/groups/public/documents/users_guide/d301425x012.pdf
42 Emerson IP-KVM Avocent MergePoint Unity Admin:blank Switch http://community.emerson.com/networkpower/support/avocent/kvmip/mpunity/w/wiki-mergepoint-unity/363.default-user-name-and-password-for-the-mergepoint-unity-kvm-over-ip-appliance
43 ENTES EMG-10, EMG-02 , EMG-12 emg12 (for EMG12), emg10 (for EMG10), emg02 (for EMG02) 80/tcp MODBUS Gateway http http://www.entes.com.tr/dosyalar/EMG_Series_EN-ver_2_2.pdf
44 eWON all adm:adm 80/tcp Router http http://ewon.biz/sites/default/files/aug-004-0-en-ewon_getting_started.pdf
45 Helmholz Systeme NETLink PRO HW 1-1a-1 and FW 1. 54 and higher admin Ethernet Gateway for MPI/PROFIBUS Helmholtz Systeme.pdf
46 Hirschmann RS20/RS30, MICE admin:private, user:public 80/tcp Switch http http://www.wwsinternational.com.au/Hirschmann/pdf/quickstart.pdf;, Hirschmann MICE.pdf
47 Hirschmann RSP 20/25/30/35 user:public, admin:private 23/tcp (telnet) Industrial router telnet Hirschmann RSP20_25_30_35.pdf
48 Hirschmann MACH 4000 Family/MACH 1000 Family/MACH 100 Family/MACH 4002 Family/MACH104 Family Full Gigabit/MACH 1040 Family Full Gigabit user:public, admin:private Industrial router Hirschmann MACH1040 Full Gigabit.pdf, Hirschmann MACH4002 Family.pdf, Hirschmann MACH1000 Family.pdf, Hirschmann MACH4000 Family.pdf, http://www.industrialcomms.co.uk/images/pdf/IG_MACH104_02_1210_en.pdf, http://www.industrialcomms.co.uk/images/pdf/IG_MACH100_03_0709_en.pdf
49 Hirschmann OCTOPUS 8M..., OCTOPUS 16M..., OCTOPUS 24M… user:public, admin:private 23/tcp Industrial router telnet https://www.neteon.net/media/downloads/IG_Octopus8M16M24M_PoETrain_02_0708_en_1.pdf
50 IBM 2210 def:trade Multiprotocol Router http://www.governmentsecurity.org/_/articles/default-logins-and-passwords-for-networked-devices.html
51 Moxa AWK-5232-RCC Series admin:root 80/tcp Industrial 802.11n wireless AP/bridge/client http http://www.moxa.com/doc/man/AWK-3131-RCC_UM_1e.pdf
52 Moxa Railway Remote I/O (ioLogik E12xx , ioLogik E15xx ) Http on Port 9020: , 1)none:root, 2)none:none 9020/tcp Remote Ethernet I/O http http://www.toolswatch.org/2013/02/new-scada-default-passwords-added-to-dpe-xml-database/
53 Moxa Cellular Micro RTU Controller (ioLogik W53xx, ioLogik) administrator:blank, Telnet on port 9900 / 9000:, root:root 9900/9000/tcp micro RTU controller telnet or serial console http://www.toolswatch.org/2013/02/new-scada-default-passwords-added-to-dpe-xml-database/
54 Moxa VPort 461 Industrial Video Encoder admin:admin, <none>:<none> Industrial Video Encoder telnet http://www.moxa.com/doc/man/VPort_461_UM_2e.pdf
55 Moxa IA240/241 Embedded computer telnet root:root, ftp root:blank, ppp root:blank, serial console root:root Embedded computers are designed for industrial, automation applications telnet, ftp, ppp, serial console http://www.toolswatch.org/2013/02/new-scada-default-passwords-added-to-dpe-xml-database/
56 moxa OnCell Central Manager admin:admin 8080/tcp Software http http://www.moxa.ru/files/manuals_modems/oncell_central_manager_users_manual_v1.pdf
57 moxa EDS-508A/505A Series admin:<none> Switch telnet or serial console http://www.moxa.com/doc/man/eds-508a_505a_um_4e.pdf
58 Moxa OnCell G3100 Admin:Keep <blank> 23/tcp cellular IP gateways telnet http://www.moxa.com/doc/man/OnCell_G3100_Series_Users_Manual_v7.pdf
59 Netcomm Wireless 3G21WB (BigPond Firmware), 3G9WB (BigPond Firmware), N3G001W (Netcomm Firmware), NB14WN (Netcomm Firmware), NB5 (Netcomm Firmware), NB5Plus4 (Netcomm Firmware), NB6Plus4 (Netcomm Firmware), NB6Plus4W (Netcomm Firmware), NNB7 (Netcomm Firmware), NB9WMAXX (Netcomm Firmware), NP804N (Netcomm Firmware) admin:admin Router http://www.pcwintech.com/default-router-modem-passwords2
60 Netcomm Wireless NB1300 Plus 4 (Netcomm Firmware), NP803N (Netcomm Firmware) admin:password Router http://www.pcwintech.com/default-router-modem-passwords2
61 NOVUS AUTOMATION Superview superview:superview SCADA http://www.scigiene.com/pdfs/Superview%20Manual.pdf
62 OMRON IA CJ1M CPU Units with Ethernet Functions for http: ETHERNET, for ftp: CONFIDENTIAL 80/tcp (http), 21/tcp (ftp) PLC http, ftp http://omronkft.hu/nostree/pdfs/plc/cs1_cj1/w441-e1-03+cj-series-ethernetfunc+opermanual.pdf
63 Ouman EH-net server admin:admin HMI Software http://docplayer.fi/509891-Palvelin-eh-net-kayttoonotto-ja-yllapito-www-ouman-fi.html
64 Phoenix Contact Logic+ admin:admin 80/tcp Software http https://www.phoenixcontact.com/assets/downloads_ed/global/web_dwl_technical_info/52005213_EN.pdf
65 Prosoft Technology ICX30-HWC admin:password 80/tcp Industrial Cellular Gateway http http://www.prosoft-technology.com/content/download/8772/168219/version/9/file/ICX30_HWC_User_Manual.pdf
66 Rockwell Automation /Allen-Bradley 1756-EN2TSC Administrator:admin 80/tcp EtherNet/IP communication module http http://literature.rockwellautomation.com/idc/groups/literature/documents/um/enet-um003_-en-p.pdf
67 Rockwell Automation /Allen-Bradley 1734-AENT admin:password 80/tcp I/O Adapter http http://literature.rockwellautomation.com/idc/groups/literature/documents/um/1734-um011_-en-p.pdf
68 Rockwell Automation /Allen-Bradley 1756-EWEB Administrator:<none> 80/tcp Web Server Module http https://www.jlab.org/Hall-D/Documents/manuals/Allen-Bradley%20stuff/1756-EWEB%20Web%20Server%20Module.pdf
69 Rockwell Automation /Allen-Bradley MicroLogix 1400 Embedded Web Server administrator:ml1400, guest:guest 80/tcp Web Server http http://literature.rockwellautomation.com/idc/groups/literature/documents/um/1766-um002_-en-p.pdf
70 Rockwell Automation /Allen-Bradley MicroLogix 1100 Embedded Web Server administrator:ml1100, guest:guest 80/tcp Web Server http http://literature.rockwellautomation.com/idc/groups/literature/documents/um/1763-um002_-en-p.pdf
71 Rockwell Automation /Allen-Bradley PanelView Plus 6 Graphic Terminals, Firmware 6.10 or later/ , PVPlus 6 password SCADA http://www.manualsdir.com/manuals/580848/rockwell-automation-2711p-xxxx-panelview-plus-6-terminals-user-manual.html?page=54
72 Samsung Integrated Management System DMS root:rkwjsdusrnth Data Management Server http://www.tenable.com/plugins/index.php?view=single&id=53878
73 Samsung Integrated Management System S-NET mini 0 Built-in web server http://dvmdownload.com/controls/central-control-options/mst-s3w/technical-tip/SNET%20MINI%20MST-S3W%20SETUP_1%2017%202012.pdf
74 Schneider Electric PowerLogic™ Series 800 Power Meter 0 PLC http://www.powerlogic.com/literature/63230-500-282A1_PM8_Install_Guide.pdf
75 Schneider Electric PowerLogic™ ION8*/7*/6* Energy and power meter 0 Energy and power meter http://www2.schneider-electric.com/library/SCHNEIDER_ELECTRIC/SE_LOCAL/APS/209510_35F6/8650_Install_Guide.pdf, http://azzo.com.au/wp-content/uploads/2015/08/ION7550-RTU-UserGuide.pdf
76 Schneider Electric PowerLogicTM Ethernet Gateway EGX300/EGX100 Administrator:Gateway 80/tcp Integrated gateway-server http http://azzo.com.au/wp-content/uploads/2015/05/PowerLogic-EGX300-Users-Guide.pdf
77 Schneider Electric POWERLOGIC® EGX200 or EGX400 with firmware version 5.5 or higher Administrator:admin, User 1:master, User 2:engineer, User 3:operator 80/tcp gateway-server http http://www.powerlogic.com/literature/63230-314-208A3.pdf
78 Schneider Electric Modicon Quantum ftpuser/password, qbf77101/hexakisoctahedron, USER:USERUSER 80/tcp PLC http http://www.digitalbond.com/tools/basecamp/schneider-modicon-quantum/, http://www.schneider-electric.cn/downloads//85257689000007EE/All/01507367599A9DC985257871005F4B3D/$File/EIO0000000121EN.pdf
79 Schneider Electric Modicon M340 for Ethernet ntpupdate:ntpupdate (Using an FTP client, store your rules in the file:, /FLASH0/wwwroot/conf/NTP/customrules), USER:USER (FTP Setup page via HTTP, HTTP credentials) PLC ftp, http https://dariusfreamon.wordpress.com/2013/12/08/schneider-modicon-m340-for-ethernet-multiple-default-credentials/
80 Schneider Electric PM8000, PM8240, PM8243, PM8244 8000:00:00 80/tcp PLC http http://www2.schneider-electric.com/sites/corporate/en/support/faq/faq_main.page?page=content&country=APS_GLOBAL&lang=en&locale=en_US&id=FA243275&redirect=true
81 Schneider Electric TSX ETG 1000 HTTP server, pap: USER:USER, FTP:, wsupgrade:wsupgrade 21 TCP PLC ftp, pap, http http://www.is-com.ru/files/net_tsxetg1000.pdf
82 Schneider Electric ETG100 Administrator:Gateway PLC http://www.schneider-electric.co.in/sites/india/en/support/faq/main_faq.page?page=content&country=IN&lang=en&id=FA138738&locale=en_US&redirect=true
83 Schneider Electric M258 adm:adm 80/tcp PLC http http://ewon.biz/sites/default/files/aug-054-0-en-remote_access_for_schneider_m258_plcs.pdf
84 Schneider Electric Quantum NOE 771 xx ftp, http: , USER:USER Ethernet Modules ftp, http https://igate.alamedaelectric.com/Modicon%20Documents/PLC%20Quantum%20PLC%20NOE771xx%20User%20Manual%20v5.0.pdf
85 siemens Simatic S7-300 (pre-2009 versions) Hardcoded password:, Basisk:Basisk PLC telnet. Http http://www.wired.com/2011/08/siemens-hardcoded-password/
86 siemens Scalance admin:admin, user:user Industrial Ethernet switche https://www.acunetix.com/vulnerabilities/network/vulnerability/siemens-scalance-default-credentials/
87 siemens Scalance (x 200, W788-1PRO, W788-2PRO, etc.) Admin:admin, User:user, for FTP access:, siemens:siemens 80/tcp Industrial Wireless LAN, Industrial Ethernet Switches ftp, http https://cache.industry.siemens.com/dl/files/728/25508728/att_4008/v1/BA_SCALANCE-X-200_76.pdf, https://www.acunetix.com/vulnerabilities/network/vulnerability/siemens-scalance-default-credentials/
88 siemens SyncoTM living Web server OZW772 V2.0 Administrator:Password Web-server http://www.toolswatch.org/2013/02/new-scada-default-passwords-added-to-dpe-xml-database/
89 siemens Siemens WinCC 7.x winccd:winccpass, wincce:winccpass, DMUser:Data&Pass, Administrator:Administrator HMI Software http://www.toolswatch.org/2013/02/new-scada-default-passwords-added-to-dpe-xml-database/
90 siemens Ruggedcom RMC30 admin:admin 80/tcp Industrial router http Siemens Ruggedcom RMC30.pdf
91 siemens RuggedSwitch, RS8000 / RS1600 / RS900 admin Industrial router http://www.techsalesnw.com/oldwebsite/products/ethernet/rc_files/RuggedSwitch%20User%20Guide%20v1.5.1.pdf
92 Siemens Siemens Climatix Level 6 End users:, 1000, Level 4 Service operator: , 2000, Level 2 OEM:, 6000 PLC http://www.ivprodukt.se/documents/ivprodukt/documents/styr%20climatix/basis%20document%20climatix%20control%20system%20bdcx.100820.01.gb.pdf
93 Sierra Wireless AirLink sconsole:12345 12345/tcp, 2332/tcp 3G/4G gateway telnet, ssh official documentation
94 Sierra Wireless AirLink user:12345, viewer:12345 9191/tcp 3G/4G gateway http official documentation
95 Stulz GmbH Stulz WIB 8000 Administrator, highest authorization:, ganymed, Medium authorization:, kallisto, Lowest authorization:, europa PLC https://dariusfreamon.wordpress.com/2013/09/07/stulz-wib-8000-air-conditioning-web-interface-board-multiple-vulnerabilities/
96 TAC AB TAC Xenta 500/700/911/913, TAC Xenta511, TAC Xenta527, root:root PLC http://www.xref.be/dpdf/tac_xenta911_xenta511_manuel_uk.pdf
97 Tecomat Tecomat Foxtrot 0:0 (role 0) , 1:1 (role 1), 2:2 (role 2), 3:3 (role 3), 4:4 (role 4), 5:5 (role 5), 6:6 (role 6), 7:7 (role 7), 8:8 (role 8), 9:9 (role 9) PLC http://dsec.ru/ipm-research-center/notification-of-vulnerabilities/tecomat_plc_paroli_po_umolchaniyu/
98 Tridium NiagaraAX tridium:niagara Software for JACE-2, JACE-403 or JACE-545 http://www.hvacc.net/pdf/tridium/docs_3.2.16/docJaceStartup/docJaceStartup.pdf
99 Turck BL20-E-GW-EN password 80/tcp PLC http http://pdb.turck.de/media/_in/Anlagen/D301173.pdf
100 Wago WAGO-I/O-SYSTEM 750 admin:wago, user:user, guest:guest 80/tcp Controller http http://www.wago.spb.ru/upload/information_system_28/3/2/8/item_328/information_items_property_340.pdf
101 Wago WAGO-I/O-IPC 758-870/000-xxx http, ftp:, user:user00 , administrator:, su:ko2003wa 80/tcp (http) Compact Industrial PC http, ftp http://www.wago.com/wagoweb/documentation/758/eng_manu/870/q07580870_00000000_2en.pdf
102 Wago Modular I/O-System Linux Fieldbus Coupler 750-860 root:wago , admin:wago, user:user , guest:guest PLC http://www.wago.com/wagoweb/documentation/750/eng_manu/coupler_controller/m07500860_00000000_0en.pdf
103 Wellintech KingSCADA 3.0 administrator:administrator (role KVAdministrator) Software http://www.slideshare.net/DefconRussia/pavel-volobuev-alexander-minozhenko-alexander-polyakov-practical-demonstration-of-typical-attacks-and-0days-in-scada-and-plccontrollers
104 Westermo TDW 33 no password, just return, Hardcoded password:, n3Y9kA6otYZu8 , (?? TD-36) Industrial Modem Westermo TDW 33.pdf
105 Westermo MRD-305-DIN/MRD-310/MRD-315/MRD-330/MRD-355/MRD-350/MRD-455 admin:westermo 80/tcp Industrial router http http://www.eternity-sales.com/westermo/files/westermo_ug_6623-2266_mrd-305-DIN_en.pdf, Westermo MRD 330.pdf
106 Westermo RedFox Series, Wolverine Series, Lynx Series, Falcon Series, Viper Series admin:westermo 80/tcp Industrial router http http://www.westermosales.com/pdfs/westermo_mg_6101-3201_weos.pdf
107 Wonderware Intouch Administrator:Wonderware SCADA http://www.automation-talk.info/2011/01/default-intouch-login-username-password.html
108 Yokogawa YFGW410 gateway admin:!admin Wireless Management Station http://www.yokogawa.com/us/support/knowledgebase/i-cannot-login-to-the-yfgw410-gateway-what-is-the-default-username-and-password-of-a-yfgw410-isa100-gateway.htm
109 Yokogawa DX1000/DX1000N/DX2000 Advanced Administrator 1:Admin1, Administrator 2:Admin2, ..., Administrator 5:Admin5, User 1:User01, ..., User 90:User90 Software http://web-material3.yokogawa.com/IM04L41B01-05EN_020.pdf
110 Yokogawa CENTUM CS 3000 DCS CENTUM:CENTUM Distributed Control System http://www.allinterview.com/showanswers/170266/having-yokogawa-centum-cs-3000-dcs-2-fcs-4-operation-download-message-appears-eq.html
111 Yokogawa EJX910A Multivariable Transmitter HART Communication Type YOKOGAWA. (to release the Write Protect mode), Multivariable transmitter http://www.controlswarehouse.com/sheets/meriam/EJX910HARTIM01C25R02-01E_001.pdf
112 Yokogawa WT 3000 Driver anonymous:blank (Ethernet access) Precision Power Analyzer Yokagawa WT3000.doc