# Awesome Shodan Search Queries | Assortment Of Interesting, Funny & Depressing Search Queries ⭐

**URL:** <https://onehack.st/t/awesome-shodan-search-queries-assortment-of-interesting-funny-depressing-search-queries/190366>\
**Category:** Tutorials & Methods\
**Tags:** hacking, freebies, tips-tricks, technology\
**Created:** [June 19, 2021, 9:56pm UTC](https://onehack.st/t/awesome-shodan-search-queries-assortment-of-interesting-funny-depressing-search-queries/190366 "2021-06-19T21:56:46Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\
**Post date:** [June 19, 2021, 9:56pm UTC](https://onehack.st/t/awesome-shodan-search-queries-assortment-of-interesting-funny-depressing-search-queries/190366/1 "2021-06-19T21:56:46Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/e/f/ef3617339adcffe0a0c2911ce170553111064a81.jpeg)

Over time, I’ve collected an assortment of interesting, funny, and depressing search queries to plug into [Shodan](https://www.shodan.io/), the literal) internet search engine. Some return facepalm-inducing results, while others return serious and/or ancient vulnerabilities in the wild.

**[Most search filters require a Shodan account.](https://account.shodan.io/register)**

You can assume these queries only return unsecured/open instances when possible. For your own legal benefit, do not attempt to login (even with default passwords) if they aren’t! Narrow down results by adding filters like `country:US` or `org:"Harvard University"` or `hostname:"nasa.gov"` to the end.

The world and its devices are quickly becoming more connected through the shiny new Internet of ~~Things~~ Sh\*t — and exponentially [more dangerous](https://blog.malwarebytes.com/101/2017/12/internet-things-iot-security-never/) as a result. To that end, I hope this list spreads awareness (and, quite frankly, pant-wetting fear) rather than harm.

**And as always, [discover and disclose responsibly](https://www.bugcrowd.com/resource/what-is-responsible-disclosure/)! 🤓**

### **Table of Contents**

- Industrial Control Systems
- Remote Desktop
- Network Infrastructure
- Network Attached Storage (NAS)
- Webcams
- Printers & Copiers
- Home Devices
- Random Stuff

## Industrial Control Systems

### Samsung Electronic Billboards [🔎 →](https://www.shodan.io/search?query=%22Server%3A+Prismview+Player%22)

```auto
"Server: Prismview Player"

```

[![Example: Electronic Billboards](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/billboard3.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/billboard3.png)

### Gas Station Pump Controllers [🔎 →](https://www.shodan.io/search?query=%22in-tank+inventory%22+port%3A10001)

```auto
"in-tank inventory" port:10001

```

[![Example: Gas Station Pump Inventories](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/7-11.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/7-11.png)

### Automatic License Plate Readers [🔎 →](https://www.shodan.io/search?query=P372+%22ANPR+enabled%22)

```auto
P372 "ANPR enabled"

```

[![Example: Automatic License Plate Reader](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/plate-reader.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/plate-reader.png)

### Traffic Light Controllers / Red Light Cameras [🔎 →](https://www.shodan.io/search?query=mikrotik+streetlight)

```auto
mikrotik streetlight

```

### Voting Machines in the United States [🔎 →](https://www.shodan.io/search?query=%22voter+system+serial%22+country%3AUS)

```auto
"voter system serial" country:US

```

### Telcos Running [Cisco Lawful Intercept](https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12-2SX/lawful/intercept/book/65LIch1.html) Wiretaps [🔎 →](https://www.shodan.io/search?query=%22Cisco+IOS%22+%22ADVIPSERVICESK9_LI-M%22)

```auto
"Cisco IOS" "ADVIPSERVICESK9_LI-M"

```

Wiretapping mechanism outlined by Cisco in [RFC 3924](https://tools.ietf.org/html/rfc3924):

> Lawful intercept is the lawfully authorized interception and monitoring of communications of an intercept subject. The term “intercept subject” […] refers to the subscriber of a telecommunications service whose communications and/or intercept related information (IRI) has been lawfully authorized to be intercepted and delivered to some agency.

### Prison Pay Phones [🔎 →](https://www.shodan.io/search?query=%22%5B2J%5BH+Encartele+Confidential%22)

```auto
"[2J[H Encartele Confidential"

```

### [Tesla PowerPack](https://www.tesla.com/powerpack) Charging Status [🔎 →](https://www.shodan.io/search?query=http.title%3A%22Tesla+PowerPack+System%22+http.component%3A%22d3%22+-ga3ca4f2)

```auto
http.title:"Tesla PowerPack System" http.component:"d3" -ga3ca4f2

```

[![Example: Tesla PowerPack Charging Status](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/tesla.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/tesla.png)

### Electric Vehicle Chargers [🔎 →](https://www.shodan.io/search?query=%22Server%3A+gSOAP%2F2.8%22+%22Content-Length%3A+583%22)

```auto
"Server: gSOAP/2.8" "Content-Length: 583"

```

### Maritime Satellites [🔎 →](https://www.shodan.io/search?query=%22Cobham+SATCOM%22+OR+%28%22Sailor%22+%22VSAT%22%29)

Shodan made a pretty sweet [Ship Tracker](https://shiptracker.shodan.io/) that maps ship locations in real time, too!

```auto
"Cobham SATCOM" OR ("Sailor" "VSAT")

```

[![Example: Maritime Satellites](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/sailor-vsat.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/sailor-vsat.png)

### Submarine Mission Control Dashboards [🔎 →](https://www.shodan.io/search?query=title%3A%22Slocum+Fleet+Mission+Control%22)

```auto
title:"Slocum Fleet Mission Control"

```

### [CAREL PlantVisor](https://www.carel.com/product/plantvisor) Refrigeration Units [🔎 →](https://www.shodan.io/search?query=%22Server%3A+CarelDataServer%22+%22200+Document+follows%22)

```auto
"Server: CarelDataServer" "200 Document follows"

```

[![Example: CAREL PlantVisor Refrigeration Units](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/refrigeration.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/refrigeration.png)

### [Nordex Wind Turbine](http://www.nordex-online.com/en/products-services/wind-turbines.html) Farms [🔎 →](https://www.shodan.io/search?query=http.title%3A%22Nordex+Control%22+%22Windows+2000+5.0+x86%22+%22Jetty%2F3.1+%28JSP+1.1%3B+Servlet+2.2%3B+java+1.6.0_14%29%22)

```auto
http.title:"Nordex Control" "Windows 2000 5.0 x86" "Jetty/3.1 (JSP 1.1; Servlet 2.2; java 1.6.0_14)"

```

### [C4 Max](https://www.mobile-devices.com/our-products/c4-max/) Commercial Vehicle GPS Trackers [🔎 →](https://www.shodan.io/search?query=%22%5B1m%5B35mWelcome+on+console%22)

```auto
"[1m[35mWelcome on console"

```

[![Example: C4 Max Vehicle GPS](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/c4max.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/c4max.png)

### [DICOM](https://www.dicomstandard.org/about/) Medical X-Ray Machines [🔎 →](https://www.shodan.io/search?query=%22DICOM+Server+Response%22+port%3A104)

Secured by default, thankfully, but these 1,700+ machines still [have no business](https://documents.trendmicro.com/assets/rpt/rpt-securing-connected-hospitals.pdf) being on the internet.

```auto
"DICOM Server Response" port:104

```

### [GaugeTech](https://electroind.com/all-products/) Electricity Meters [🔎 →](https://www.shodan.io/search?query=%22Server%3A+EIG+Embedded+Web+Server%22+%22200+Document+follows%22)

```auto
"Server: EIG Embedded Web Server" "200 Document follows"

```

[![Example: GaugeTech Electricity Meters](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/power-gaugetech.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/power-gaugetech.png)

### Siemens Industrial Automation [🔎 →](https://www.shodan.io/search?query=%22Siemens%2C+SIMATIC%22+port%3A161)

```auto
"Siemens, SIMATIC" port:161

```

### Siemens HVAC Controllers [🔎 →](https://www.shodan.io/search?query=%22Server%3A+Microsoft-WinCE%22+%22Content-Length%3A+12581%22)

```auto
"Server: Microsoft-WinCE" "Content-Length: 12581"

```

### Door / Lock Access Controllers [🔎 →](https://www.shodan.io/search?query=%22HID+VertX%22+port%3A4070)

```auto
"HID VertX" port:4070

```

### Railroad Management [🔎 →](https://www.shodan.io/search?query=%22log+off%22+%22select+the+appropriate%22)

```auto
"log off" "select the appropriate"

```

## Remote Desktop

### Unprotected VNC [🔎 →](https://www.shodan.io/search?query=%22authentication+disabled%22+%22RFB+003.008%22)

```auto
"authentication disabled" "RFB 003.008"

```

[Shodan Images](https://images.shodan.io/) is a great supplementary tool to browse screenshots, by the way! [🔎 →](https://images.shodan.io/?query=%22authentication+disabled%22+%21screenshot.label%3Ablank)

[![Example: Unprotected VNC](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/vnc.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/vnc.png)  
_The first result right now. 😞_

### Windows RDP [🔎 →](https://www.shodan.io/search?query=%22%5Cx03%5Cx00%5Cx00%5Cx0b%5Cx06%5Cxd0%5Cx00%5Cx00%5Cx124%5Cx00%22)

99.99% are secured by a secondary Windows login screen.

```auto
"\x03\x00\x00\x0b\x06\xd0\x00\x00\x124\x00"

```

## Network Infrastructure

### [Weave Scope](https://www.weave.works/oss/scope/) Dashboards [🔎 →](https://www.shodan.io/search?query=title%3A%22Weave+Scope%22+http.favicon.hash%3A567176827)

Command-line access inside Kubernetes pods and Docker containers, and real-time visualization/monitoring of the entire infrastructure.

```auto
title:"Weave Scope" http.favicon.hash:567176827

```

[![Example: Weave Scope Dashboards](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/weavescope.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/weavescope.png)

### MongoDB [🔎 →](https://www.shodan.io/search?query=product%3AMongoDB+-authentication)

Older versions were insecure by default. [Very scary.](https://krebsonsecurity.com/tag/mongodb/)

```auto
"MongoDB Server Information" port:27017 -authentication

```

[![Example: MongoDB](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/mongo.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/mongo.png)

### [Mongo Express](https://github.com/mongo-express/mongo-express) Web GUI [🔎 →](https://www.shodan.io/search?query=%22Set-Cookie%3A+mongo-express%3D%22+%22200+OK%22)

Like the [infamous phpMyAdmin](https://www.cvedetails.com/vulnerability-list/vendor_id-784/Phpmyadmin.html) but for MongoDB.

```auto
"Set-Cookie: mongo-express=" "200 OK"

```

[![Example: Mongo Express GUI](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/mongo-express.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/mongo-express.png)

### Jenkins CI [🔎 →](https://www.shodan.io/search?query=%22X-Jenkins%22+%22Set-Cookie%3A+JSESSIONID%22+http.title%3A%22Dashboard%22)

```auto
"X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Dashboard"

```

[![Example: Jenkins CI](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/jenkins.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/jenkins.png)

### Docker APIs [🔎 →](https://www.shodan.io/search?query=%22Docker+Containers%3A%22+port%3A2375)

```auto
"Docker Containers:" port:2375

```

### Docker Private Registries [🔎 →](https://www.shodan.io/search?query=%22Docker-Distribution-Api-Version%3A+registry%22+%22200+OK%22+-gitlab)

```auto
"Docker-Distribution-Api-Version: registry" "200 OK" -gitlab

```

### [Pi-hole](https://pi-hole.net/) Open DNS Servers [🔎 →](https://www.shodan.io/search?query=%22dnsmasq-pi-hole%22+%22Recursion%3A+enabled%22)

```auto
"dnsmasq-pi-hole" "Recursion: enabled"

```

### Already Logged-In as `root` via Telnet [🔎 →](https://www.shodan.io/search?query=%22root%40%22+port%3A23+-login+-password+-name+-Session)

```auto
"root@" port:23 -login -password -name -Session

```

### Android Root Bridges [🔎 →](https://www.shodan.io/search?query=%22Android+Debug+Bridge%22+%22Device%22+port%3A5555)

A tangential result of Google’s sloppy fractured update approach. 🙄 [More information here.](https://medium.com/p/root-bridge-how-thousands-of-internet-connected-android-devices-now-have-no-security-and-are-b46a68cb0f20)

```auto
"Android Debug Bridge" "Device" port:5555

```

### Lantronix Serial-to-Ethernet Adapter [Leaking Telnet Passwords](https://www.bleepingcomputer.com/news/security/thousands-of-serial-to-ethernet-devices-leak-telnet-passwords/) [🔎 →](https://www.shodan.io/search?query=Lantronix+password+port%3A30718+-secured)

```auto
Lantronix password port:30718 -secured

```

### Citrix Virtual Apps [🔎 →](https://www.shodan.io/search?query=%22Citrix+Applications%3A%22+port%3A1604)

```auto
"Citrix Applications:" port:1604

```

[![Example: Citrix Virtual Apps](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/citrix.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/citrix.png)

### Cisco Smart Install [🔎 →](https://www.shodan.io/search?query=%22smart+install+client+active%22)

[Vulnerable](https://2016.zeronights.ru/wp-content/uploads/2016/12/CiscoSmartInstall.v3.pdf) (kind of “by design,” but especially when exposed).

```auto
"smart install client active"

```

### PBX IP Phone Gateways [🔎 →](https://www.shodan.io/search?query=PBX+%22gateway+console%22+-password+port%3A23)

```auto
PBX "gateway console" -password port:23

```

### [Polycom](https://www.polycom.com/hd-video-conferencing.html) Video Conferencing [🔎 →](https://www.shodan.io/search?query=http.title%3A%22-+Polycom%22+%22Server%3A+lighttpd%22)

```auto
http.title:"- Polycom" "Server: lighttpd"

```

Telnet Configuration: [🔎 →](https://www.shodan.io/search?query=%22Polycom+Command+Shell%22+-failed+port%3A23)

```auto
"Polycom Command Shell" -failed port:23

```

[![Example: Polycom Video Conferencing](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/polycom.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/polycom.png)

### [Bomgar Help Desk](https://www.beyondtrust.com/remote-support/integrations) Portal [🔎 →](https://www.shodan.io/search?query=%22Server%3A+Bomgar%22+%22200+OK%22)

```auto
"Server: Bomgar" "200 OK"

```

### Intel Active Management [CVE-2017-5689](https://www.exploit-db.com/exploits/43385) [🔎 →](https://www.shodan.io/search?query=%22Intel%28R%29+Active+Management+Technology%22+port%3A623%2C664%2C16992%2C16993%2C16994%2C16995)

```auto
"Intel(R) Active Management Technology" port:623,664,16992,16993,16994,16995

```

### HP iLO 4 [CVE-2017-12542](https://nvd.nist.gov/vuln/detail/CVE-2017-12542) [🔎 →](https://www.shodan.io/search?query=HP-ILO-4+%21%22HP-ILO-4%2F2.53%22+%21%22HP-ILO-4%2F2.54%22+%21%22HP-ILO-4%2F2.55%22+%21%22HP-ILO-4%2F2.60%22+%21%22HP-ILO-4%2F2.61%22+%21%22HP-ILO-4%2F2.62%22+%21%22HP-iLO-4%2F2.70%22+port%3A1900)

```auto
HP-ILO-4 !"HP-ILO-4/2.53" !"HP-ILO-4/2.54" !"HP-ILO-4/2.55" !"HP-ILO-4/2.60" !"HP-ILO-4/2.61" !"HP-ILO-4/2.62" !"HP-iLO-4/2.70" port:1900

```

### Outlook Web Access:

#### Exchange 2007 [🔎 →](https://www.shodan.io/search?query=%22x-owa-version%22+%22IE%3DEmulateIE7%22+%22Server%3A+Microsoft-IIS%2F7.0%22)

```auto
"x-owa-version" "IE=EmulateIE7" "Server: Microsoft-IIS/7.0"

```

[![Example: OWA for Exchange 2007](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/owa2007.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/owa2007.png)

#### Exchange 2010 [🔎 →](https://www.shodan.io/search?query=%22x-owa-version%22+%22IE%3DEmulateIE7%22+http.favicon.hash%3A442749392)

```auto
"x-owa-version" "IE=EmulateIE7" http.favicon.hash:442749392

```

[![Example: OWA for Exchange 2010](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/owa2010.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/owa2010.png)

#### Exchange 2013 / 2016 [🔎 →](https://www.shodan.io/search?query=%22X-AspNet-Version%22+http.title%3A%22Outlook%22+-%22x-owa-version%22)

```auto
"X-AspNet-Version" http.title:"Outlook" -"x-owa-version"

```

[![Example: OWA for Exchange 2013/2016](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/owa2013.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/owa2013.png)

### Lync / Skype for Business [🔎 →](https://www.shodan.io/search?query=%22X-MS-Server-Fqdn%22)

```auto
"X-MS-Server-Fqdn"

```

## Network Attached Storage (NAS)

### SMB (Samba) File Shares [🔎 →](https://www.shodan.io/search?query=%22Authentication%3A+disabled%22+port%3A445)

Produces ~500,000 results…narrow down by adding “Documents” or “Videos”, etc.

```auto
"Authentication: disabled" port:445

```

Specifically domain controllers: [🔎 →](https://www.shodan.io/search?query=%22Authentication%3A+disabled%22+NETLOGON+SYSVOL+-unix+port%3A445)

```auto
"Authentication: disabled" NETLOGON SYSVOL -unix port:445

```

Concerning [default network shares of QuickBooks](https://quickbooks.intuit.com/learn-support/en-us/help-articles/set-up-folder-and-windows-access-permissions-to-share-company/01/201880) files: [🔎 →](https://www.shodan.io/search?query=%22Authentication%3A+disabled%22+%22Shared+this+folder+to+access+QuickBooks+files+OverNetwork%22+-unix+port%3A445)

```auto
"Authentication: disabled" "Shared this folder to access QuickBooks files OverNetwork" -unix port:445

```

### FTP Servers with Anonymous Login [🔎 →](https://www.shodan.io/search?query=%22220%22+%22230+Login+successful.%22+port%3A21)

```auto
"220" "230 Login successful." port:21

```

### Iomega / LenovoEMC NAS Drives [🔎 →](https://www.shodan.io/search?query=%22Set-Cookie%3A+iomega%3D%22+-%22manage%2Flogin.html%22+-http.title%3A%22Log+In%22)

```auto
"Set-Cookie: iomega=" -"manage/login.html" -http.title:"Log In"

```

[![Example: Iomega / LenovoEMC NAS Drives](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/iomega.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/iomega.png)

### Buffalo TeraStation NAS Drives [🔎 →](https://www.shodan.io/search?query=Redirecting+sencha+port%3A9000)

```auto
Redirecting sencha port:9000

```

[![Example: Buffalo TeraStation NAS Drives](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/buffalo.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/buffalo.png)

### Logitech Media Servers [🔎 →](https://www.shodan.io/search?query=%22Server%3A+Logitech+Media+Server%22+%22200+OK%22)

```auto
"Server: Logitech Media Server" "200 OK"

```

[![Example: Logitech Media Servers](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/logitech.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/logitech.png)

### [Plex](https://www.plex.tv/) Media Servers [🔎 →](https://www.shodan.io/search?query=%22X-Plex-Protocol%22+%22200+OK%22+port%3A32400)

```auto
"X-Plex-Protocol" "200 OK" port:32400

```

### [Tautulli / PlexPy](https://github.com/Tautulli/Tautulli) Dashboards [🔎 →](https://www.shodan.io/search?query=%22CherryPy%2F5.1.0%22+%22%2Fhome%22)

```auto
"CherryPy/5.1.0" "/home"

```

[![Example: PlexPy / Tautulli Dashboards](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/plexpy.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/plexpy.png)

## Webcams

Example images not necessary. 🤦

### Yawcams [🔎 →](https://www.shodan.io/search?query=%22Server%3A+yawcam%22+%22Mime-Type%3A+text%2Fhtml%22)

```auto
"Server: yawcam" "Mime-Type: text/html"

```

### webcamXP/webcam7 [🔎 →](https://www.shodan.io/search?query=%28%22webcam+7%22+OR+%22webcamXP%22%29+http.component%3A%22mootools%22+-401)

```auto
("webcam 7" OR "webcamXP") http.component:"mootools" -401

```

### Android IP Webcam Server [🔎 →](https://www.shodan.io/search?query=%22Server%3A+IP+Webcam+Server%22+%22200+OK%22)

```auto
"Server: IP Webcam Server" "200 OK"

```

### Security DVRs [🔎 →](https://www.shodan.io/search?query=html%3A%22DVR_H264+ActiveX%22)

```auto
html:"DVR_H264 ActiveX"

```

## Printers & Copiers:

### HP Printers [🔎 →](https://www.shodan.io/search?query=%22Serial+Number%3A%22+%22Built%3A%22+%22Server%3A+HP+HTTP%22)

```auto
"Serial Number:" "Built:" "Server: HP HTTP"

```

[![Example: HP Printers](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/hp.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/hp.png)

### Xerox Copiers/Printers [🔎 →](https://www.shodan.io/search?query=ssl%3A%22Xerox+Generic+Root%22)

```auto
ssl:"Xerox Generic Root"

```

[![Example: Xerox Copiers/Printers](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/xerox.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/xerox.png)

### Epson Printers [🔎 →](https://www.shodan.io/search?query=%22SERVER%3A+EPSON_Linux+UPnP%22+%22200+OK%22)

```auto
"SERVER: EPSON_Linux UPnP" "200 OK"

```

```auto
"Server: EPSON-HTTP" "200 OK"

```

[![Example: Epson Printers](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/epson.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/epson.png)

### Canon Printers [🔎 →](https://www.shodan.io/search?query=%22Server%3A+KS_HTTP%22+%22200+OK%22)

```auto
"Server: KS_HTTP" "200 OK"

```

```auto
"Server: CANON HTTP Server"

```

[![Example: Canon Printers](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/canon.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/canon.png)

## Home Devices

### Yamaha Stereos [🔎 →](https://www.shodan.io/search?query=%22Server%3A+AV_Receiver%22+%22HTTP%2F1.1+406%22)

```auto
"Server: AV_Receiver" "HTTP/1.1 406"

```

[![Example: Yamaha Stereos](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/yamaha.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/yamaha.png)

### Apple AirPlay Receivers [🔎 →](https://www.shodan.io/search?query=%22%5Cx08_airplay%22+port%3A5353)

Apple TVs, HomePods, etc.

```auto
"\x08_airplay" port:5353

```

### Chromecasts / Smart TVs [🔎 →](https://www.shodan.io/search?query=%22Chromecast%3A%22+port%3A8008)

```auto
"Chromecast:" port:8008

```

### [Crestron Smart Home](https://www.crestron.com/Products/Market-Solutions/Residential-Solutions) Controllers [🔎 →](https://www.shodan.io/search?query=%22Model%3A+PYNG-HUB%22)

```auto
"Model: PYNG-HUB"

```

## Random Stuff

### OctoPrint 3D Printer Controllers [🔎 →](https://www.shodan.io/search?query=title%3A%22OctoPrint%22+-title%3A%22Login%22+http.favicon.hash%3A1307375944)

```auto
title:"OctoPrint" -title:"Login" http.favicon.hash:1307375944

```

[![Example: OctoPrint 3D Printers](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/octoprint.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/octoprint.png)

### Etherium Miners [🔎 →](https://www.shodan.io/search?query=%22ETH+-+Total+speed%22)

```auto
"ETH - Total speed"

```

[![Example: Etherium Miners](https://github.com/jakejarvis/awesome-shodan-queries/raw/main/screenshots/eth.png)](https://github.com/jakejarvis/awesome-shodan-queries/blob/main/screenshots/eth.png)

### Apache Directory Listings [🔎 →](https://www.shodan.io/search?query=http.title%3A%22Index+of+%2F%22+http.html%3A%22.pem%22)

Substitute `.pem` with any extension or a filename like `phpinfo.php`.

```auto
http.title:"Index of /" http.html:".pem"

```

### Misconfigured WordPress [🔎 →](https://www.shodan.io/search?query=http.html%3A%22*+The+wp-config.php+creation+script+uses+this+file%22)

Exposed [`wp-config.php`](https://github.com/WordPress/WordPress/blob/master/wp-config-sample.php) files containing database credentials.

```auto
http.html:"* The wp-config.php creation script uses this file"

```

### Too Many Minecraft Servers [🔎 →](https://www.shodan.io/search?query=%22Minecraft+Server%22+%22protocol+340%22+port%3A25565)

```auto
"Minecraft Server" "protocol 340" port:25565

```

### Literally [Everything](https://www.vox.com/2014/12/22/7435625/north-korea-internet) in North Korea 🇰🇵 [🔎 →](https://www.shodan.io/search?query=net%3A175.45.176.0%2F22%2C210.52.109.0%2F24)

```auto
net:175.45.176.0/22,210.52.109.0/24,77.94.35.0/24

```

### TCP Quote of the Day [🔎 →](https://www.shodan.io/search?query=port%3A17+product%3A%22Windows+qotd%22)

Port 17 ([RFC 865](https://tools.ietf.org/html/rfc865)) has a [bizarre history](https://en.wikipedia.org/wiki/QOTD)…

```auto
port:17 product:"Windows qotd"

```

### Find a Job Doing This! 👩‍💼 [🔎 →](https://www.shodan.io/search?query=%22X-Recruiting%3A%22)

```auto
"X-Recruiting:"

```

Bon voyage, fellow penetrators! 😉

## License

[![CC0](https://camo.githubusercontent.com/80163f7b2e90d10162f1b595c71e432e245537c055de2dcf49846b5af8ab786a/687474703a2f2f6d6972726f72732e6372656174697665636f6d6d6f6e732e6f72672f70726573736b69742f627574746f6e732f38387833312f7376672f63632d7a65726f2e737667)](https://creativecommons.org/publicdomain/zero/1.0/)

> Source: [1Hack.Us](http://1Hack.Us) & GitHub

# ENJOY & HAPPY LEARNING! ❤

![](https://i.ibb.co/rwpPJZy/Leechers.gif)

---

<div class="post-metadata">

**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\
**Post date:** [June 19, 2021, 9:57pm UTC](https://onehack.st/t/awesome-shodan-search-queries-assortment-of-interesting-funny-depressing-search-queries/190366/2 "2021-06-19T21:57:01Z")

</div>



---

<div class="post-metadata">

**Author:** ![Miksu](https://onehack.st/user_avatar/onehack.st/miksu/32/76053_2.png) [@Miksu](https://onehack.st/u/Miksu)\
**Post date:** [June 20, 2021, 7:32am UTC](https://onehack.st/t/awesome-shodan-search-queries-assortment-of-interesting-funny-depressing-search-queries/190366/3 "2021-06-20T07:32:02Z")

</div>

This shows how vulnerable we are. If someone really changes the traffic lights (as in the movies) or changes the courses of ships, etc., the devastation could be enormous, not just for individuals but for communities and finally for nations and the planet. I’m speechless… 😢 (and sad)