{"id":13470975,"url":"https://github.com/jakejarvis/awesome-shodan-queries","last_synced_at":"2025-09-27T07:30:26.753Z","repository":{"id":37270461,"uuid":"183485617","full_name":"jakejarvis/awesome-shodan-queries","owner":"jakejarvis","description":"🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩‍💻","archived":false,"fork":false,"pushed_at":"2024-05-27T20:36:28.000Z","size":4445,"stargazers_count":5597,"open_issues_count":12,"forks_count":854,"subscribers_count":177,"default_branch":"main","last_synced_at":"2024-09-25T18:01:07.707Z","etag":null,"topics":["awesome","awesome-list","cloud","dorks","hacking","infosec","internet-of-things","iot","network-infrastructure","penetration-testing","pentesting","security","security-scanner","security-tools","shodan","shodan-dorks"],"latest_commit_sha":null,"homepage":"https://jarv.is/notes/shodan-search-queries/","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"cc0-1.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jakejarvis.png","metadata":{"files":{"readme":"readme.md","changelog":null,"contributing":"contributing.md","funding":null,"license":"license.md","code_of_conduct":"code-of-conduct.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2019-04-25T18:05:10.000Z","updated_at":"2024-09-25T16:22:52.000Z","dependencies_parsed_at":"2022-07-10T02:16:25.580Z","dependency_job_id":"21647976-eb3d-4509-baaf-d7b1d73cf56a","html_url":"https://github.com/jakejarvis/awesome-shodan-queries","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jakejarvis%2Fawesome-shodan-queries","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jakejarvis%2Fawesome-shodan-queries/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jakejarvis%2Fawesome-shodan-queries/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jakejarvis%2Fawesome-shodan-queries/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jakejarvis","download_url":"https://codeload.github.com/jakejarvis/awesome-shodan-queries/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":219871967,"owners_count":16554473,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["awesome","awesome-list","cloud","dorks","hacking","infosec","internet-of-things","iot","network-infrastructure","penetration-testing","pentesting","security","security-scanner","security-tools","shodan","shodan-dorks"],"created_at":"2024-07-31T16:00:37.963Z","updated_at":"2025-09-27T07:30:26.092Z","avatar_url":"https://github.com/jakejarvis.png","language":null,"funding_links":[],"categories":["Others","Other Awesome Lists","\u003ca id=\"a76463feb91d09b3d024fae798b92be6\"\u003e\u003c/a\u003e侦察\u0026\u0026信息收集\u0026\u0026子域名发现与枚举\u0026\u0026OSINT","Misc","\"Dorks\"/queries Lists","\u003ca id=\"170048b7d8668c50681c0ab1e92c679a\"\u003e\u003c/a\u003e工具","cloud","Others (1002)","\u003ca id=\"8c5a692b5d26527ef346687e047c5c21\"\u003e\u003c/a\u003e收集","Search Engine Dorks","Credits","Useful Resources","Online Resources","📦 Legacy \u0026 Inactive Projects","OSINT \u0026 Reconnaissance"],"sub_categories":["Other Security Awesome Lists","\u003ca id=\"18c7c1df2e6ae5e9135dfa2e4eb1d4db\"\u003e\u003c/a\u003eShodan","Ex. Web Application Firewall","Shodan Dorks","Advanced Queries","Security Awesome Lists","Other Lists Online"],"readme":"# Awesome Shodan Search Queries [![Awesome](https://awesome.re/badge.svg)](https://awesome.re)\n\n\nOver time, I've collected an assortment of interesting, funny, and depressing search queries to plug into [Shodan](https://www.shodan.io/), the ([literal](https://www.vice.com/en_uk/article/9bvxmd/shodan-exposes-the-dark-side-of-the-net)) internet search engine. Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild.\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"screenshots/shodan.png\" /\u003e\u003cbr /\u003e\n  \u003cstrong\u003e\u003ca href=\"https://account.shodan.io/register\"\u003eMost search filters require a Shodan account.\u003c/a\u003e\u003c/strong\u003e\n\u003c/p\u003e\n\nYou can assume these queries only return unsecured/open instances when possible. For your own legal benefit, do not attempt to login (even with default passwords) if they aren't! Narrow down results by adding filters like `country:US` or `org:\"Harvard University\"` or `hostname:\"nasa.gov\"` to the end.\n\nThe world and its devices are quickly becoming more connected through the shiny new [Internet of ~~Things~~ Sh*t](https://motherboard.vice.com/en_us/topic/internet-of-shit) — and exponentially [more dangerous](https://blog.malwarebytes.com/101/2017/12/internet-things-iot-security-never/) as a result. To that end, I hope this list spreads awareness (and, quite frankly, pant-wetting fear) rather than harm. \n\n**And as always, [discover and disclose responsibly](https://www.bugcrowd.com/resource/what-is-responsible-disclosure/)! 🤓**\n\n\n---\n\n\n### **Table of Contents**\n\n- [Industrial Control Systems](#industrial-control-systems)\n- [Remote Desktop](#remote-desktop)\n- [Network Infrastructure](#network-infrastructure)\n- [Network Attached Storage (NAS)](#network-attached-storage-nas)\n- [Webcams](#webcams)\n- [Printers \u0026 Copiers](#printers--copiers)\n- [Home Devices](#home-devices)\n- [Random Stuff](#random-stuff)\n\n\n---\n\n\n## Industrial Control Systems\n\n\n### Samsung Electronic Billboards [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Server%3A+Prismview+Player%22)\n\n```\n\"Server: Prismview Player\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/billboard3.png\" alt=\"Example: Electronic Billboards\" width=\"500\" /\u003e\u003c/div\u003e\n\n\n### Gas Station Pump Controllers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22in-tank+inventory%22+port%3A10001)\n\n```\n\"in-tank inventory\" port:10001\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/7-11.png\" alt=\"Example: Gas Station Pump Inventories\" width=\"700\" /\u003e\u003c/div\u003e\n\n\n### Automatic License Plate Readers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=P372+%22ANPR+enabled%22)\n\n```\nP372 \"ANPR enabled\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/plate-reader.png\" alt=\"Example: Automatic License Plate Reader\" /\u003e\u003c/div\u003e\n\n\n### Traffic Light Controllers / Red Light Cameras [🔎 \u0026#x2192;](https://www.shodan.io/search?query=mikrotik+streetlight)\n\n```\nmikrotik streetlight\n```\n\n\n### Voting Machines in the United States [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22voter+system+serial%22+country%3AUS)\n\n```\n\"voter system serial\" country:US\n```\n\n\n### Telcos Running [Cisco Lawful Intercept](https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/lawful/intercept/book/65LIch1.html) Wiretaps [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Cisco+IOS%22+%22ADVIPSERVICESK9_LI-M%22)\n\n```\n\"Cisco IOS\" \"ADVIPSERVICESK9_LI-M\"\n```\n\nWiretapping mechanism outlined by Cisco in [RFC 3924](https://tools.ietf.org/html/rfc3924):\n\n\u003e Lawful intercept is the lawfully authorized interception and monitoring of communications of an intercept subject.  The term \"intercept subject\" [...] refers to the subscriber of a telecommunications service whose communications and/or intercept related information (IRI) has been lawfully authorized to be intercepted and delivered to some agency.\n\n\n### Prison Pay Phones [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22%5B2J%5BH+Encartele+Confidential%22)\n\n```\n\"[2J[H Encartele Confidential\"\n```\n\n\n### [Tesla PowerPack](https://www.tesla.com/powerpack) Charging Status [🔎 \u0026#x2192;](https://www.shodan.io/search?query=http.title%3A%22Tesla+PowerPack+System%22+http.component%3A%22d3%22+-ga3ca4f2)\n\n```\nhttp.title:\"Tesla PowerPack System\" http.component:\"d3\" -ga3ca4f2\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/tesla.png\" alt=\"Example: Tesla PowerPack Charging Status\" /\u003e\u003c/div\u003e\n\n\n### Electric Vehicle Chargers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Server%3A+gSOAP%2F2.8%22+%22Content-Length%3A+583%22)\n\n```\n\"Server: gSOAP/2.8\" \"Content-Length: 583\"\n```\n\n\n### Maritime Satellites [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Cobham+SATCOM%22+OR+%28%22Sailor%22+%22VSAT%22%29)\n\nShodan made a pretty sweet [Ship Tracker](https://shiptracker.shodan.io/) that maps ship locations in real time, too!\n\n```\n\"Cobham SATCOM\" OR (\"Sailor\" \"VSAT\")\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/sailor-vsat.png\" alt=\"Example: Maritime Satellites\" width=\"700\" /\u003e\u003c/div\u003e\n\n\n### Submarine Mission Control Dashboards [🔎 \u0026#x2192;](https://www.shodan.io/search?query=title%3A%22Slocum+Fleet+Mission+Control%22)\n\n```\ntitle:\"Slocum Fleet Mission Control\"\n```\n\n\n### [CAREL PlantVisor](https://www.carel.com/product/plantvisor) Refrigeration Units [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Server%3A+CarelDataServer%22+%22200+Document+follows%22)\n\n```\n\"Server: CarelDataServer\" \"200 Document follows\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/refrigeration.png\" alt=\"Example: CAREL PlantVisor Refrigeration Units\" /\u003e\u003c/div\u003e\n\n\n### [Nordex Wind Turbine](http://www.nordex-online.com/en/products-services/wind-turbines.html) Farms [🔎 \u0026#x2192;](https://www.shodan.io/search?query=http.title%3A%22Nordex+Control%22+%22Windows+2000+5.0+x86%22+%22Jetty%2F3.1+%28JSP+1.1%3B+Servlet+2.2%3B+java+1.6.0_14%29%22)\n\n```\nhttp.title:\"Nordex Control\" \"Windows 2000 5.0 x86\" \"Jetty/3.1 (JSP 1.1; Servlet 2.2; java 1.6.0_14)\"\n```\n\n\n### [C4 Max](https://www.mobile-devices.com/our-products/c4-max/) Commercial Vehicle GPS Trackers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22%5B1m%5B35mWelcome+on+console%22)\n\n```\n\"[1m[35mWelcome on console\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/c4max.png\" alt=\"Example: C4 Max Vehicle GPS\" width=\"780\" /\u003e\u003c/div\u003e\n\n\n### [DICOM](https://www.dicomstandard.org/about/) Medical X-Ray Machines [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22DICOM+Server+Response%22+port%3A104)\n\nSecured by default, thankfully, but these 1,700+ machines still [have no business](https://documents.trendmicro.com/assets/rpt/rpt-securing-connected-hospitals.pdf) being on the internet.\n\n```\n\"DICOM Server Response\" port:104\n```\n\n\n### [GaugeTech](https://electroind.com/all-products/) Electricity Meters [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Server%3A+EIG+Embedded+Web+Server%22+%22200+Document+follows%22)\n\n```\n\"Server: EIG Embedded Web Server\" \"200 Document follows\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/power-gaugetech.png\" alt=\"Example: GaugeTech Electricity Meters\" width=\"650\" /\u003e\u003c/div\u003e\n\n\n### Siemens Industrial Automation [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Siemens%2C+SIMATIC%22+port%3A161)\n\n```\n\"Siemens, SIMATIC\" port:161\n```\n\n\n### Siemens HVAC Controllers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Server%3A+Microsoft-WinCE%22+%22Content-Length%3A+12581%22)\n\n```\n\"Server: Microsoft-WinCE\" \"Content-Length: 12581\"\n```\n\n\n### Door / Lock Access Controllers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22HID+VertX%22+port%3A4070)\n\n```\n\"HID VertX\" port:4070\n```\n\n\n### Railroad Management [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22log+off%22+%22select+the+appropriate%22)\n\n```\n\"log off\" \"select the appropriate\"\n```\n\n\n\n---\n\n\n\n## Remote Desktop\n\n\n### Unprotected VNC [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22authentication+disabled%22+%22RFB+003.008%22)\n\n```\n\"authentication disabled\" \"RFB 003.008\"\n```\n\n[Shodan Images](https://images.shodan.io/) is a great supplementary tool to browse screenshots, by the way!  [🔎 \u0026#x2192;](https://images.shodan.io/?query=%22authentication+disabled%22+%21screenshot.label%3Ablank)\n\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"screenshots/vnc.png\" alt=\"Example: Unprotected VNC\" /\u003e\u003cbr /\u003e\n  \u003cem\u003eThe first result right now. 😞\u003c/em\u003e\n\u003c/p\u003e\n\n\n### Windows RDP [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22%5Cx03%5Cx00%5Cx00%5Cx0b%5Cx06%5Cxd0%5Cx00%5Cx00%5Cx124%5Cx00%22)\n\n99.99% are secured by a secondary Windows login screen.\n\n```\n\"\\x03\\x00\\x00\\x0b\\x06\\xd0\\x00\\x00\\x124\\x00\"\n```\n\n\n---\n\n\n## Network Infrastructure\n\n\n### [Weave Scope](https://www.weave.works/oss/scope/) Dashboards [🔎 \u0026#x2192;](https://www.shodan.io/search?query=title%3A%22Weave+Scope%22+http.favicon.hash%3A567176827)\n\nCommand-line access inside Kubernetes pods and Docker containers, and real-time visualization/monitoring of the entire infrastructure.\n\n```\ntitle:\"Weave Scope\" http.favicon.hash:567176827\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/weavescope.png\" alt=\"Example: Weave Scope Dashboards\" /\u003e\u003c/div\u003e\n\n\n### MongoDB [🔎 \u0026#x2192;](https://www.shodan.io/search?query=product%3AMongoDB+-authentication)\n\nOlder versions were insecure by default. [Very scary.](https://krebsonsecurity.com/tag/mongodb/)\n\n```\n\"MongoDB Server Information\" port:27017 -authentication\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/mongo.png\" alt=\"Example: MongoDB\" width=\"500\" /\u003e\u003c/div\u003e\n\n\n### [Mongo Express](https://github.com/mongo-express/mongo-express) Web GUI [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Set-Cookie%3A+mongo-express%3D%22+%22200+OK%22)\n\nLike the [infamous phpMyAdmin](https://www.cvedetails.com/vulnerability-list/vendor_id-784/Phpmyadmin.html) but for MongoDB.\n\n```\n\"Set-Cookie: mongo-express=\" \"200 OK\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/mongo-express.png\" alt=\"Example: Mongo Express GUI\" width=\"700\" /\u003e\u003c/div\u003e\n\n\n### Jenkins CI [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22X-Jenkins%22+%22Set-Cookie%3A+JSESSIONID%22+http.title%3A%22Dashboard%22)\n\n```\n\"X-Jenkins\" \"Set-Cookie: JSESSIONID\" http.title:\"Dashboard\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/jenkins.png\" alt=\"Example: Jenkins CI\" width=\"700\" /\u003e\u003c/div\u003e\n\n\n### Docker APIs [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Docker+Containers%3A%22+port%3A2375)\n\n```\n\"Docker Containers:\" port:2375\n```\n\n\n### Docker Private Registries [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Docker-Distribution-Api-Version%3A+registry%22+%22200+OK%22+-gitlab)\n\n```\n\"Docker-Distribution-Api-Version: registry\" \"200 OK\" -gitlab\n```\n\n\n### [Pi-hole](https://pi-hole.net/) Open DNS Servers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22dnsmasq-pi-hole%22+%22Recursion%3A+enabled%22)\n\n```\n\"dnsmasq-pi-hole\" \"Recursion: enabled\"\n```\n\n\n### Already Logged-In as `root` via Telnet [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22root%40%22+port%3A23+-login+-password+-name+-Session)\n\n```\n\"root@\" port:23 -login -password -name -Session\n```\n\n\n### Android Root Bridges [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Android+Debug+Bridge%22+%22Device%22+port%3A5555)\n\nA tangential result of Google's sloppy fractured update approach. 🙄 [More information here.](https://medium.com/p/root-bridge-how-thousands-of-internet-connected-android-devices-now-have-no-security-and-are-b46a68cb0f20)\n\n```\n\"Android Debug Bridge\" \"Device\" port:5555\n```\n\n\n### Lantronix Serial-to-Ethernet Adapter [Leaking Telnet Passwords](https://www.bleepingcomputer.com/news/security/thousands-of-serial-to-ethernet-devices-leak-telnet-passwords/) [🔎 \u0026#x2192;](https://www.shodan.io/search?query=Lantronix+password+port%3A30718+-secured)\n\n```\nLantronix password port:30718 -secured\n```\n\n\n### Citrix Virtual Apps [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Citrix+Applications%3A%22+port%3A1604)\n\n```\n\"Citrix Applications:\" port:1604\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/citrix.png\" alt=\"Example: Citrix Virtual Apps\" width=\"700\" /\u003e\u003c/div\u003e\n\n\n### Cisco Smart Install [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22smart+install+client+active%22)\n\n[Vulnerable](https://2016.zeronights.ru/wp-content/uploads/2016/12/CiscoSmartInstall.v3.pdf) (kind of \"by design,\" but especially when exposed).\n\n```\n\"smart install client active\"\n```\n\n\n### PBX IP Phone Gateways [🔎 \u0026#x2192;](https://www.shodan.io/search?query=PBX+%22gateway+console%22+-password+port%3A23)\n\n\n```\nPBX \"gateway console\" -password port:23\n```\n\n\n### [Polycom](https://www.polycom.com/hd-video-conferencing.html) Video Conferencing [🔎 \u0026#x2192;](https://www.shodan.io/search?query=http.title%3A%22-+Polycom%22+%22Server%3A+lighttpd%22)\n\n```\nhttp.title:\"- Polycom\" \"Server: lighttpd\"\n```\n\nTelnet Configuration: [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Polycom+Command+Shell%22+-failed+port%3A23)\n\n```\n\"Polycom Command Shell\" -failed port:23\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/polycom.png\" alt=\"Example: Polycom Video Conferencing\" /\u003e\u003c/div\u003e\n\n\n### [Bomgar Help Desk](https://www.beyondtrust.com/remote-support/integrations) Portal [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Server%3A+Bomgar%22+%22200+OK%22)\n\n```\n\"Server: Bomgar\" \"200 OK\"\n```\n\n\n### Intel Active Management [CVE-2017-5689](https://www.exploit-db.com/exploits/43385) [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Intel%28R%29+Active+Management+Technology%22+port%3A623%2C664%2C16992%2C16993%2C16994%2C16995)\n\n```\n\"Intel(R) Active Management Technology\" port:623,664,16992,16993,16994,16995\n```\n\n\n### HP iLO 4 [CVE-2017-12542](https://nvd.nist.gov/vuln/detail/CVE-2017-12542) [🔎 \u0026#x2192;](https://www.shodan.io/search?query=HP-ILO-4+%21%22HP-ILO-4%2F2.53%22+%21%22HP-ILO-4%2F2.54%22+%21%22HP-ILO-4%2F2.55%22+%21%22HP-ILO-4%2F2.60%22+%21%22HP-ILO-4%2F2.61%22+%21%22HP-ILO-4%2F2.62%22+%21%22HP-iLO-4%2F2.70%22+port%3A1900)\n\n```\nHP-ILO-4 !\"HP-ILO-4/2.53\" !\"HP-ILO-4/2.54\" !\"HP-ILO-4/2.55\" !\"HP-ILO-4/2.60\" !\"HP-ILO-4/2.61\" !\"HP-ILO-4/2.62\" !\"HP-iLO-4/2.70\" port:1900\n```\n\n\n### Outlook Web Access:\n\n#### Exchange 2007 [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22x-owa-version%22+%22IE%3DEmulateIE7%22+%22Server%3A+Microsoft-IIS%2F7.0%22)\n\n```\n\"x-owa-version\" \"IE=EmulateIE7\" \"Server: Microsoft-IIS/7.0\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/owa2007.png\" alt=\"Example: OWA for Exchange 2007\" width=\"400\" /\u003e\u003c/div\u003e\n\n#### Exchange 2010 [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22x-owa-version%22+%22IE%3DEmulateIE7%22+http.favicon.hash%3A442749392)\n\n```\n\"x-owa-version\" \"IE=EmulateIE7\" http.favicon.hash:442749392\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/owa2010.png\" alt=\"Example: OWA for Exchange 2010\" width=\"400\" /\u003e\u003c/div\u003e\n\n#### Exchange 2013 / 2016 [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22X-AspNet-Version%22+http.title%3A%22Outlook%22+-%22x-owa-version%22)\n\n```\n\"X-AspNet-Version\" http.title:\"Outlook\" -\"x-owa-version\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/owa2013.png\" alt=\"Example: OWA for Exchange 2013/2016\" width=\"500\" /\u003e\u003c/div\u003e\n\n\n### Lync / Skype for Business [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22X-MS-Server-Fqdn%22)\n\n```\n\"X-MS-Server-Fqdn\"\n```\n\n\n---\n\n\n## Network Attached Storage (NAS)\n\n\n### SMB (Samba) File Shares [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Authentication%3A+disabled%22+port%3A445)\n\nProduces ~500,000 results...narrow down by adding \"Documents\" or \"Videos\", etc.\n\n```\n\"Authentication: disabled\" port:445\n```\n\nSpecifically domain controllers: [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Authentication%3A+disabled%22+NETLOGON+SYSVOL+-unix+port%3A445)\n\n```\n\"Authentication: disabled\" NETLOGON SYSVOL -unix port:445\n```\n\nConcerning [default network shares of QuickBooks](https://quickbooks.intuit.com/learn-support/en-us/help-articles/set-up-folder-and-windows-access-permissions-to-share-company/01/201880) files: [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Authentication%3A+disabled%22+%22Shared+this+folder+to+access+QuickBooks+files+OverNetwork%22+-unix+port%3A445)\n\n```\n\"Authentication: disabled\" \"Shared this folder to access QuickBooks files OverNetwork\" -unix port:445\n```\n\n\n### FTP Servers with Anonymous Login [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22220%22+%22230+Login+successful.%22+port%3A21)\n\n```\n\"220\" \"230 Login successful.\" port:21\n```\n\n\n### Iomega / LenovoEMC NAS Drives [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Set-Cookie%3A+iomega%3D%22+-%22manage%2Flogin.html%22+-http.title%3A%22Log+In%22)\n\n```\n\"Set-Cookie: iomega=\" -\"manage/login.html\" -http.title:\"Log In\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/iomega.png\" alt=\"Example: Iomega / LenovoEMC NAS Drives\" width=\"600\" /\u003e\u003c/div\u003e\n\n\n### Buffalo TeraStation NAS Drives [🔎 \u0026#x2192;](https://www.shodan.io/search?query=Redirecting+sencha+port%3A9000)\n\n```\nRedirecting sencha port:9000\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/buffalo.png\" alt=\"Example: Buffalo TeraStation NAS Drives\" width=\"600\" /\u003e\u003c/div\u003e\n\n\n### Logitech Media Servers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Server%3A+Logitech+Media+Server%22+%22200+OK%22)\n\n```\n\"Server: Logitech Media Server\" \"200 OK\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/logitech.png\" alt=\"Example: Logitech Media Servers\" width=\"500\" /\u003e\u003c/div\u003e\n\n\n### [Plex](https://www.plex.tv/) Media Servers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22X-Plex-Protocol%22+%22200+OK%22+port%3A32400)\n\n```\n\"X-Plex-Protocol\" \"200 OK\" port:32400\n```\n\n\n### [Tautulli / PlexPy](https://github.com/Tautulli/Tautulli) Dashboards [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22CherryPy%2F5.1.0%22+%22%2Fhome%22)\n\n```\n\"CherryPy/5.1.0\" \"/home\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/plexpy.png\" alt=\"Example: PlexPy / Tautulli Dashboards\" width=\"570\" /\u003e\u003c/div\u003e\n\n\n---\n\n\n## Webcams\n\nExample images not necessary. 🤦\n\n### Yawcams [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Server%3A+yawcam%22+%22Mime-Type%3A+text%2Fhtml%22)\n\n```\n\"Server: yawcam\" \"Mime-Type: text/html\"\n```\n\n\n### webcamXP/webcam7 [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%28%22webcam+7%22+OR+%22webcamXP%22%29+http.component%3A%22mootools%22+-401)\n\n```\n(\"webcam 7\" OR \"webcamXP\") http.component:\"mootools\" -401\n```\n\n\n### Android IP Webcam Server [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Server%3A+IP+Webcam+Server%22+%22200+OK%22)\n\n```\n\"Server: IP Webcam Server\" \"200 OK\"\n```\n\n\n### Security DVRs [🔎 \u0026#x2192;](https://www.shodan.io/search?query=html%3A%22DVR_H264+ActiveX%22)\n\n```\nhtml:\"DVR_H264 ActiveX\"\n```\n\n\n---\n\n\n## Printers \u0026 Copiers:\n\n\n### HP Printers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Serial+Number%3A%22+%22Built%3A%22+%22Server%3A+HP+HTTP%22)\n\n```\n\"Serial Number:\" \"Built:\" \"Server: HP HTTP\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/hp.png\" alt=\"Example: HP Printers\" width=\"650\" /\u003e\u003c/div\u003e\n\n\n### Xerox Copiers/Printers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=ssl%3A%22Xerox+Generic+Root%22)\n\n```\nssl:\"Xerox Generic Root\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/xerox.png\" alt=\"Example: Xerox Copiers/Printers\" width=\"550\" /\u003e\u003c/div\u003e\n\n\n### Epson Printers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22SERVER%3A+EPSON_Linux+UPnP%22+%22200+OK%22)\n\n```\n\"SERVER: EPSON_Linux UPnP\" \"200 OK\"\n```\n\n```\n\"Server: EPSON-HTTP\" \"200 OK\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/epson.png\" alt=\"Example: Epson Printers\" width=\"500\" /\u003e\u003c/div\u003e\n\n\n### Canon Printers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Server%3A+KS_HTTP%22+%22200+OK%22)\n\n```\n\"Server: KS_HTTP\" \"200 OK\"\n```\n\n```\n\"Server: CANON HTTP Server\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/canon.png\" alt=\"Example: Canon Printers\" width=\"500\" /\u003e\u003c/div\u003e\n\n\n--- \n\n\n## Home Devices\n\n\n### Yamaha Stereos [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Server%3A+AV_Receiver%22+%22HTTP%2F1.1+406%22)\n\n```\n\"Server: AV_Receiver\" \"HTTP/1.1 406\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/yamaha.png\" alt=\"Example: Yamaha Stereos\" width=\"500\" /\u003e\u003c/div\u003e\n\n\n### Apple AirPlay Receivers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22%5Cx08_airplay%22+port%3A5353)\n\nApple TVs, HomePods, etc.\n\n```\n\"\\x08_airplay\" port:5353\n```\n\n\n### Chromecasts / Smart TVs [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Chromecast%3A%22+port%3A8008)\n\n```\n\"Chromecast:\" port:8008\n```\n\n\n### [Crestron Smart Home](https://www.crestron.com/Products/Market-Solutions/Residential-Solutions) Controllers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Model%3A+PYNG-HUB%22)\n\n```\n\"Model: PYNG-HUB\"\n```\n\n---\n\n\n## Random Stuff\n\n\n### OctoPrint 3D Printer Controllers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=title%3A%22OctoPrint%22+-title%3A%22Login%22+http.favicon.hash%3A1307375944)\n\n```\ntitle:\"OctoPrint\" -title:\"Login\" http.favicon.hash:1307375944\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/octoprint.png\" alt=\"Example: OctoPrint 3D Printers\" width=\"740\" /\u003e\u003c/div\u003e\n\n\n### Etherium Miners [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22ETH+-+Total+speed%22)\n\n```\n\"ETH - Total speed\"\n```\n\n\u003cdiv align=\"center\"\u003e\u003cimg src=\"screenshots/eth.png\" alt=\"Example: Etherium Miners\" /\u003e\u003c/div\u003e\n\n\n### Apache Directory Listings [🔎 \u0026#x2192;](https://www.shodan.io/search?query=http.title%3A%22Index+of+%2F%22+http.html%3A%22.pem%22)\n\nSubstitute `.pem` with any extension or a filename like `phpinfo.php`.\n\n```\nhttp.title:\"Index of /\" http.html:\".pem\"\n```\n\n\n### Misconfigured WordPress [🔎 \u0026#x2192;](https://www.shodan.io/search?query=http.html%3A%22*+The+wp-config.php+creation+script+uses+this+file%22)\n\nExposed [`wp-config.php`](https://github.com/WordPress/WordPress/blob/master/wp-config-sample.php) files containing database credentials.\n\n```\nhttp.html:\"* The wp-config.php creation script uses this file\"\n```\n\n\n### Too Many Minecraft Servers [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22Minecraft+Server%22+%22protocol+340%22+port%3A25565)\n\n```\n\"Minecraft Server\" \"protocol 340\" port:25565\n```\n\n\n### Literally [Everything](https://www.vox.com/2014/12/22/7435625/north-korea-internet) in North Korea 🇰🇵 [🔎 \u0026#x2192;](https://www.shodan.io/search?query=net%3A175.45.176.0%2F22%2C210.52.109.0%2F24)\n\n```\nnet:175.45.176.0/22,210.52.109.0/24,77.94.35.0/24\n```\n\n\n### TCP Quote of the Day [🔎 \u0026#x2192;](https://www.shodan.io/search?query=port%3A17+product%3A%22Windows+qotd%22)\n\nPort 17 ([RFC 865](https://tools.ietf.org/html/rfc865)) has a [bizarre history](https://en.wikipedia.org/wiki/QOTD)...\n\n```\nport:17 product:\"Windows qotd\"\n```\n\n\n### Find a Job Doing This! 👩‍💼 [🔎 \u0026#x2192;](https://www.shodan.io/search?query=%22X-Recruiting%3A%22)\n\n```\n\"X-Recruiting:\"\n```\n\n\n---\n\n\n\nIf you've found any other juicy Shodan gems, whether it's a search query or a specific example, definitely [drop a comment](https://jarv.is/notes/shodan-search-queries/#commento) on the blog or [open an issue/PR here on GitHub](https://github.com/jakejarvis/awesome-shodan-queries).\n\nBon voyage, fellow penetrators! 😉\n\n\n\n## License\n\n[![CC0](http://mirrors.creativecommons.org/presskit/buttons/88x31/svg/cc-zero.svg)](https://creativecommons.org/publicdomain/zero/1.0/)\n\nTo the extent possible under law, [Jake Jarvis](https://jarv.is/) has waived all copyright and related or neighboring rights to this work.\n\nMirrored from a blog post at https://jarv.is/notes/shodan-search-queries/.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjakejarvis%2Fawesome-shodan-queries","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjakejarvis%2Fawesome-shodan-queries","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjakejarvis%2Fawesome-shodan-queries/lists"}