Gas Station ATGs Exposed to Public

HD Moore from Rapid7 recently disclosed that over 5800 Automated Tank Gauges at gas stations around the world were publicly accessible. Anyone connected to the internet can now view the in-tank inventories of the gas stations and manage the gas tanks.

The process to access the gauges is simple:
1. Telnet into port 10001 of an ATG’s IP.
2. Type ^A (Ctrl A) followed by I20100. This command outputs a basic report.

ATG telnet info

There are over 600 commands that can be executed, some of which include setting alarm thresholds, editing sensor configurations, and running tank tests. You can view them all in the vendor manual.


A list of affected IP’s can be found on Shodan.

Inline Feedbacks
View all comments
6 hours ago

dino game is also called Google Dinosaur Game, Dinosaur Game, T-Rex Game, Chrome Dino, No Internet Game, and Dino Dun. The online game is free to play on a computer, a cell phone, or a tablet.

Denis Nobre
4 years ago


Is there any other way to get the same information using another method than via telnet?

1 year ago
Reply to  Denis Nobre

nmap –script atg-info -p 10001 –script-args command=I20200 <HOST>

#Using –script-args command=I20200 you will be able to pull a diffrent report than the I20100.