Skip to main content

Finding and Investigating License Plate Readers, Part 2

Yesterday we found license plate readers and want to learn more about them. At the end of the last post we had three IP addresses from a search of Shodan for “AutoVu” in the html field. AutoVu is the proprietary line of Genetec under which it sells a variety of automatic license plate recognition hardware and software.

Two of those IP address gave response pages with LPRaaS in the title, for “License Plate Reader as as Service.” and one titled Login - AutoVu Occupancy Study, all on the Microsoft Azure cloud. The latter and one of the former IPs are in Boydton, Virginia, according to Shodan, and one,, is in Dallas. 

Before digging more into these hosts I wanted to try some more searches on Shodan -- I went to a police magazine website’s product index and made a list from the ALPR page.

I didn’t need it yet; searching Shodan for html:”lpr” and html:”alpr” was plenty -- it produced dozens of leads. This post is the first lead to pan out (I eliminated several hosts that were false positives or ALPR company websites).

5 IP addresses in the results were all in San Jose, California, according to the Shodan maps. 

I scanned all 5 IPs with Nmap -- I make this a routine practice, that is, to use penetration-testing/network tools in a sort of clumsy way, to extract every little bit of information I can.

The scan wasn’t really necessary, as I was able to visit all of the hosts directly by clicking on the IPs -- and when I did so on HTTPS ports, I was first directed to a warning page, telling me that the certificate was not from site:[IP address], but rather * If you enter that address into your browser, you are sent to

And upon clicking on any of the links, you're directed to log in.

This particular varmint appears to belong to Forensic Logic. According to its website, it is Better Policing through Better Data.™ 

“Forensic Logic’s LEAP Network is a search engine and information network that is tying together America’s law enforcement and homeland security.”

Note in the WARNING says the website contains "criminal records and related data governed by the FBI's Criminal Justice Information System Security Policy."

The site we discovered does not appear to deal with any live data -- however, it does include, among open source data (like “Many business listings, so if a robbery occurs next to the 'Apple Store' on that map, a search for 'robbery at Apple Store' will find it Building addresses”), “Very large data sets - 330,000 License Plate Readings over 2 months. When zoomed in, it shows the individual license plates.” This is given as two hypertext link options - images from both are below.

Four IP addresses send you to the same (or an identical) index page; the 5th has only a header image for an Ubuntu “lpr test server.”

I owe some of you, as promised, a check for your plate number, and this server itself definitely warrants more investigation. We've still got our Nmap scans and much more to check out.

I added a subscribe by email widget to my site, stick with me, we have fun every day around here.

UPDATE: It's possible the ALPR is from a public source, we'll take a quick look back at this in the next post.


  1. Hi! It's Forensic Logic!

    Thanks for your article about our open source mapping project that you can download here:

    Indeed all that LPR data is public. You can see the script to load your own LPR data into your own copy of our geospatial analysis software using the script here:

    Agencies can load their own private data sets into their own copy of the software if they like; and our sales team will be happy to help them do so.

  2. This comment has been removed by the author.

  3. Here is another good analysis of this Oakland LPR public data:

  4. Thank you for your valuable content , Easy to understand and follow. As said, the migration to cloud is very essential for the protection of the database.

    Cloud Migration services
    Aws Cloud Migration services
    Azure Cloud Migration services
    Vmware Cloud Migration services
    Database Migration services


  5. Start making extra income Earns upto $550 to $750 per day by working just online. I have made $28K in this month by working online. Please visit

  6. I am definitely enjoying your website. You definitely have some great insight and great stories.
    Windows VPS Hosting India

  7. Thank you for excellent article.Great information for new guy like antimalware service executable

  8. Outstanding as well as powerful tip by the writer of this blog are really handy to me. API 5L X65 PSL2

  9. It is really a helpful blog to find some different source to add my knowledge. stainless steel pipe fittings manufacturers in India

  10. Very interesting to read this article.I would like to thank you for the efforts you had made for writing this awesome article. This article inspired me to read more. keep it up.
    Best Data Science Course

  11. Impressive and powerful suggestion by the author of this blog are really helpful to me. Ss Fasteners Manufacturers In India

  12. It is truly a practical blog to discover some various resource to include my knowledge. stainless steel pipe suppliers

  13. I am thankful to this blog giving unique and helpful knowledge about this topic. carbon steel pipe fittings manufacturers

  14. I found one successful example of this truth through this blog. I am going to use such information now. Alloy Steel Pipe Suppliers

  15. Great Article Cloud Computing Projects

    Networking Projects

    Final Year Projects for CSE

    JavaScript Training in Chennai

    JavaScript Training in Chennai

    The Angular Training covers a wide range of topics including Components, Angular Directives, Angular Services, Pipes, security fundamentals, Routing, and Angular programmability. The new Angular TRaining will lay the foundation you need to specialise in Single Page Application developer. Angular Training

  16. Hello there and thank you for your information – I've definitely picked up anything new from right here. I did however expertise a few technical points using this website, since I experienced to reload the site a lot of times previous to I could get it to load properly. I had been wondering if your web host is OK?


  17. Adapted to new systems and processes well and seeks out training to enhance knowledge, skills and abilities.


  18. Not that I am complaining, but slow loading instances times will sometimes affect your placement in google and could damage your high-quality score if advertising and marketing with AdWords. Well I am adding this RSS to my e-mail and can look out for a lot more of your respective fascinating content.


  19. I want to to thank you for this great read!! I certainly enjoyed every little bit of it. I have you bookmarked to check out new stuff you post… 건마탑

  20. Great post again! great job. And I am satisfied to read your article. Turkey quarantine. You can check all Visa Turkey Quarantine Guidelines Turkey through Turkey e-Visa website.

  21. You have posted a fantastic article on the blog. Your essay is quite essential, and reading it piqued my curiosity.

  22. Very insightful and amazing content. Do check out our website Kalpataru piping to know more about our products

  23. Well written article but also do check out our website Amardeep Steel to know more about our products


Post a Comment