Exposed Outlets: Don’t Let Attackers Turn You Off

Censys scanned the internet for networked power-management devices (PDUs, remote power switches, iLO/OOB devices), identified default/embedded certificates, weak or absent authentication (including unauthenticated telnet), and found 2,617 actively reachable devices; the report details fingerprinting methods, vendor firmware artifacts, risks of physical shutdown or lateral pivot, and recommends monitoring, disabling UPnP, and restricting admin access.