Yesterday we found license plate readers and want to learn more about them. At the end of the last post we had three IP addresses from a search of Shodan for “AutoVu” in the html field. AutoVu is the proprietary line of Genetec under which it sells a variety of automatic license plate recognition hardware and software.
Two of those IP address gave response pages with LPRaaS in the title, for “License Plate Reader as as Service.” and one titled Login - AutoVu Occupancy Study, all on the Microsoft Azure cloud. The latter and one of the former IPs are in Boydton, Virginia, according to Shodan, and one, 23.101.179.17, is in Dallas.
Before digging more into these hosts I wanted to try some more searches on Shodan -- I went to a police magazine website’s product index and made a list from the ALPR page.
I didn’t need it yet; searching Shodan for html:”lpr” and html:”alpr” was plenty -- it produced dozens of leads. This post is the first lead to pan out (I eliminated several hosts that were false positives or ALPR company websites).
5 IP addresses in the results were all in San Jose, California, according to the Shodan maps.
I scanned all 5 IPs with Nmap -- I make this a routine practice, that is, to use penetration-testing/network tools in a sort of clumsy way, to extract every little bit of information I can.
The scan wasn’t really necessary, as I was able to visit all of the hosts directly by clicking on the IPs -- and when I did so on HTTPS ports, I was first directed to a warning page, telling me that the certificate was not from site:[IP address], but rather *.leapportal.us. If you enter that address into your browser, you are sent to
And upon clicking on any of the links, you're directed to log in.
This particular varmint appears to belong to Forensic Logic. According to its website, it is Better Policing through Better Data.™
“Forensic Logic’s LEAP Network is a search engine and information network that is tying together America’s law enforcement and homeland security.”
Note in the WARNING says the website contains "criminal records and related data governed by the FBI's Criminal Justice Information System Security Policy."
The site we discovered does not appear to deal with any live data -- however, it does include, among open source data (like “Many business listings, so if a robbery occurs next to the 'Apple Store' on that map, a search for 'robbery at Apple Store' will find it Building addresses”), “Very large data sets - 330,000 License Plate Readings over 2 months. When zoomed in, it shows the individual license plates.” This is given as two hypertext link options - images from both are below.
Four IP addresses send you to the same (or an identical) index page; the 5th has only a header image for an Ubuntu “lpr test server.”
I owe some of you, as promised, a check for your plate number, and this server itself definitely warrants more investigation. We've still got our Nmap scans and much more to check out.
I added a subscribe by email widget to my site, stick with me, we have fun every day around here.
UPDATE: It's possible the ALPR is from a public source, we'll take a quick look back at this in the next post.
UPDATE: It's possible the ALPR is from a public source, we'll take a quick look back at this in the next post.
Hi! It's Forensic Logic!
ReplyDeleteThanks for your article about our open source mapping project that you can download here:
https://github.com/forensiclogic/mapserver_osm_gis_analytics
Indeed all that LPR data is public. You can see the script to load your own LPR data into your own copy of our geospatial analysis software using the script here: https://github.com/forensiclogic/mapserver_osm_gis_analytics/blob/master/bin/load_lpr_test_data
Agencies can load their own private data sets into their own copy of the software if they like; and our sales team will be happy to help them do so.
This comment has been removed by the author.
ReplyDeleteHere is another good analysis of this Oakland LPR public data:
ReplyDeletehttps://www.eff.org/deeplinks/2015/01/what-we-learned-oakland-raw-alpr-data
The given information was excellent and useful. This is one of the excellent blog, I have come across. Do share more.
ReplyDeleteAzure Training in Chennai
Azure Training center in Chennai
Cloud Computing Courses in Chennai
Cloud Computing Training in Velachery
VMware course in Chennai
AWS course in Chennai
DevOps Certification in Chennai
Cloud computing Training in Chennai
Such an excellent and interesting blog, do post like this more with more information, This was very useful, Thank you.
ReplyDeleteAviation Academy in Chennai
Air hostess training in Chennai
Airport management courses in Chennai
Ground staff training in Chennai
aviation training in Chennai
cabin crew course in Chennai
diploma in airline and airport management in Chennai
airport ground staff training in Chennai
Thanks for publishing this blog. really good. Only professional can do this.
ReplyDeleteSpring Training in Chennai
Core Spring Training
Spring Training in Adyar
Hibernate Training in Chennai
Spring and Hibernate Training
soft skills training in chennai
core java training in chennai
Spring Training in Chennai
Thanks for your post which gather more knowledge about the topic. I read your blog everything is helpful and effective.
ReplyDeleteCloud computing courses in chennai
Cloud computing training in chennai
Cloud computing training in anna nagar
Cloud computing training in adyar
Cloud computing course in tambaram
Data science training in chennai
Data science course in chennai
Data science training in anna nagar
Thank you for your valuable content , Easy to understand and follow. As said, the migration to cloud is very essential for the protection of the database.
ReplyDeleteCloud Migration services
Aws Cloud Migration services
Azure Cloud Migration services
Vmware Cloud Migration services
Database Migration services
This blog is useful to enhance my knowledge about this technology.Thanks for sharing such a information
ReplyDeleteAWS Training in Anna nagar
DevOps Training in Anna nagar
AWS Course in Anna nagar
Devops Training in chennai
Blue Prism Training in Anna nagar
RPA Training in Anna nagar
Data Science Course in anna nagar
Data Science Training in anna nagar
Innovative thinking of you in this blog makes me very useful to learn.
ReplyDeletei need more info to learn so kindly update it.
Selenium Training in Chennai
selenium training in tambaram
JAVA Training in Chennai
Python Training in Chennai
Hadoop Training in Chennai
IOS Training in Chennai
Selenium Training in Chennai
Selenium Training in OMR
This blog is very creativity and the admin providing the best content was many knowledgeable posts. I appreciate your great work and keep blogging!!!
ReplyDeleteSpark Training in Chennai
Spark Training
Pega Training in Chennai
Linux Training in Chennai
Social Media Marketing Courses in Chennai
Power BI Training in Chennai
Tableau Training in Chennai
Excel Training in Chennai
Oracle DBA Training in Chennai
Spark Training in Valachery
ReplyDeleteStart making extra income Earns upto $550 to $750 per day by working just online. I have made $28K in this month by working online. Please visit earnmoney99.com
I am definitely enjoying your website. You definitely have some great insight and great stories.
ReplyDeleteWindows VPS Hosting India
Its a wonderful post and very helpful, thanks for all this information. You are including better information regarding this topic in an effective way. T hank you so much.
ReplyDeleteJava Training in Coimbatore
Java Training in Bangalore
Java course in coimbatore
Big Data Course in Coimbatore
AWS training in Coimbatore
Java Classes in Bangalore
Best Java Institute in Bangalore
Digital Marketing Training in Coimbatore
German Classes in Coimbatore
PHP Training in Coimbatore
Selenium Training in Coimbatore
Thank you for excellent article.Great information for new guy like antimalware service executable
ReplyDeleteOutstanding as well as powerful tip by the writer of this blog are really handy to me. API 5L X65 PSL2
ReplyDeleteIt is really a helpful blog to find some different source to add my knowledge. stainless steel pipe fittings manufacturers in India
ReplyDeletenice blog compact binding machine "
ReplyDeleteVery interesting to read this article.I would like to thank you for the efforts you had made for writing this awesome article. This article inspired me to read more. keep it up.
ReplyDeleteBest Data Science Course
nice blog paper binding machine "
ReplyDelete