Most search filters require a Shodan account.
This has tons of titles, info and categorisation that a lot of other mass-lists don't have.
Also, every six hours, it re-checks every query on here and updates their count. It also removes dorks that have 0 results.
- Cameras
- Industrial Control Systems
- Network Infastructure
- Printers
- Files and Directories
- Compromised devices and websites
- Miscellaneous
General camera search
camera - 3,778,997 results
Hikvision IP Cameras
product:"Hikvision IP Camera" - 1,874,935 results
Backdoor exploit at https://ipvm.com/reports/hik-exploit
Webcams running on IPCam Client
title:"IPCam Client" - 28,989 results
Older webcams running on GeoVision
server: GeoHttpServer - 24,633 results
ContaCam Cameras
title:"ContaCam" - 17,189 results
Avigilion-brand camera/monitoring devices
title:"Avigilon" - 15,238 results
Vivotek IP cameras
server: VVTK-HTTP-Server - 14,621 results
DVR CCTV cameras accessible via HTTP
200 ok dvr port:"81" - 3,830 results
UI3 - the HTML5 web interface for Blue Iris
title:"ui3 -" - 759 results
A UK-based IP camera provider
WWW-Authenticate: "Merit LILIN Ent. Co., Ltd" - 675 results
Netwave-make IP cameras
Netwave IP Camera Content-Length: 2574 - 495 results
Various IP camera/video management system products
ACTi - 346 results
Unsecured Linksys webcams
title:"+tm01+" - 247 results
Yet another WebCAM software
product:"Yawcam webcam viewer httpd" - 211 results
Webcams running on webcamXP
server: webcamxp - 128 results
Webcams running on webcam 7
server: "webcam 7" - 70 results
Webcams with screenshots
webcam has_screenshot:true - 52 results
Canon-manufactured megapixel security cameras
title:"Network Camera VB-M600" - 26 results
i-Catcher IP-based CCTV systems
server: "i-Catcher Console" - 26 results
IP Webcams with screenshots
has_screenshot:true IP Webcam - 25 results
Webcams running on Blue Iris
title:"blue iris remote view" - 8 results
EtherNet/IP
port:44818 - 550,636 results
S7
port:102 - 499,936 results
Modbus
port:502 - 415,356 results
GaugeTech Electricity Meters
"Server: EIG Embedded Web Server" "200 Document follows" - 188,040 results
BACnet
port:47808 - 40,986 results
Niagara Fox
port:1911,4911 product:Niagara - 6,761 results
VNC Servers
"authentication disabled" "RFB 003.008" - 6,472 results
While not always 100% guaranteed to be a system, lots of embedded systems can show up here, along with personal systems.
IEC 60870-5-104
port:2404 asdu address - 3,011 results
Gas Station Pump Controllers
"in-tank inventory" port:10001 - 2,575 results
Find gas station pump controllers with accessible inventory data.
DICOM Medical X-Ray Machines
"DICOM Server Response" port:104 - 2,562 results
Siemens Industrial Automation
"Siemens, SIMATIC" port:161 - 1,772 results
More VNC Servers
"authentication disabled" port:5900,5901 - 1,509 results
Another search term for VNC servers - most are on port 5900 or 5901 as these are VNC display ports.
ProConOS
port:20547 PLC - 1,410 results
Omron FINS
port:9600 response code - 886 results
DNP3
port:20000 source address - 664 results
PCWorx
port:1962 PLC - 581 results
XZERES Wind Turbine
title:"xzeres wind" - 353 results
MELSEC-Q
port:5006,5007 product:mitsubishi - 197 results
Door / Lock Access Controllers
"HID VertX" port:4070 - 138 results
Voting Machines in the United States
"voter system serial" country:US - 22 results
Nordex Wind Turbine Farms
http.title:"Nordex Control" "Windows 2000 5.0 x86" "Jetty/3.1 (JSP 1.1; Servlet 2.2; java 1.6.0_14)" - 14 results
C4 Max Commercial Vehicle GPS Trackers
[1m[35mWelcome on console - 13 results
Open ATM
NCR Port:"161" - 5 results
Railroad Management
"log off" "select the appropriate" - 4 results
HART-IP
port:5094 hart-ip - 4 results
CAREL PlantVisor Refrigeration Units
"Server: CarelDataServer" "200 Document follows" - 3 results
Traffic Light Controllers / Red Light Cameras
mikrotik streetlight - 2 results
Siemens HVAC Controllers
"Server: Microsoft-WinCE" "Content-Length: 12581" - 2 results
Submarine Mission Control Dashboards
title:"Slocum Fleet Mission Control" - 1 result
General MySQL Database Search
product:MySQL - 1,833,699 results
Remote PostgreSQL Connections
port:5432 PostgreSQL - 516,896 results
Default MongoDB Instances
mongodb port:27017 - 64,115 results
MongoDB Server Information on Default Port
"MongoDB Server Information" port:27017 - 64,113 results
Open Elasticsearch Databases
port:"9200" all:elastic - 12,820 results
Listed Apache CouchDB
product:"CouchDB" - 5,823 results
Cisco Smart Install
smart install client active - 3,403 results
Pi-hole Open DNS Servers
"dnsmasq-pi-hole" "Recursion: enabled" - 2,154 results
Jenkins CI
"X-Jenkins" "Set-Cookie: JSESSIONID" http.title:"Dashboard" - 1,564 results
Polycom Video Conferencing
http.title:"- Polycom" "Server: lighttpd" - 1,130 results
Android Root Bridges
"Android Debug Bridge" "Device" port:5555 - 960 results
Lantronix Serial-to-Ethernet Adapter Leaking Telnet Passwords
Lantronix password port:30718 -secured - 475 results
Already Logged-In as root via Telnet
"root@" port:23 -login -password -name -Session - 253 results
Docker Private Registries
"Docker-Distribution-Api-Version: registry" "200 OK" -gitlab - 231 results
Citrix Virtual Apps
"Citrix Applications:" port:1604 - 146 results
Accessible Kibana Dashboards
kibana content-length:217 - 109 results
Exposed MongoDB Express Web Interfaces
"Set-Cookie: mongo-express=" "200 OK" - 99 results
PBX IP Phone Gateways
PBX "gateway console" -password port:23 - 89 results
Telnet Configuration
"Polycom Command Shell" -failed port:23 - 14 results
Vulnerable CouchDB Instances
port:"5984"+Server: "CouchDB/2.1.0" - 3 results
Weave Scope Dashboards
title:"Weave Scope" http.favicon.hash:567176827 - 1 result
General Printer Search
printer - 68,592 results
Canon Printer HTTP Servers
Server: CANON HTTP Server - 6,540 results
HP Printers Remote Restart
port:161 hp - 5,936 results
HTTP Accessible Epson Printers
http 200 server epson -upnp - 2,237 results
Epson Printers via HTTP Server
"Server: EPSON-HTTP" "200 OK" - 1,674 results
Samsung Printers with SyncThru Web Service
title:"syncthru web service" - 1,050 results
Unsecured Telnet Access to Printers
port:23 "Password is not set" - 237 results
Remote Access to Xerox Printers
ssl:"Xerox Generic Root" - 119 results
Lexmark Printer Control Panels
Printer Type: Lexmark - 56 results
HP LaserJet Printers via HTTP
"HP-ChaiSOE" port:"80" - 36 results
Brother Printers Admin Interface
"Location: /main/main.html" debut - 17 results
Exposed OctoPrint 3D Printer Controllers
title:"OctoPrint" -title:"Login" http.favicon.hash:1307375944 - 9 results
Printers with FTP Access
Laser Printer FTP Server - 2 results
Open Lists of Files and Directories
http.title:"Index of /" - 202,072 results
Filezilla FTP
filezilla port:"21" - 111,259 results
Open Lists on Port 80
port:80 title:"Index of /" - 77,369 results
Samba Shares with Authentication Disabled
"Authentication: disabled" port:445 product:"Samba" - 44,460 results
FTP Access Without Credentials
"220" "230 Login successful." port:21 - 27,889 results
Anonymous Access Allowed FTP
"Anonymous access allowed" port:"21" - 8,800 results
Vulnerable vsftpd Service
vsftpd 2.3.4 - 1,460 results
NDMP on FTP Port 10000
ftp port:"10000" - 308 results
QuickBooks Files Shared Over Network
"QuickBooks files OverNetwork" -unix port:445 - 30 results
Compromised Legacy Systems on Port 4444
port:4444 system32 - 1,375 results
General Hacked Label Search
hacked - 791 results
Hacked By in HTTP Title
http.title:"Hacked by" - 452 results
Compromised Routers Labeled HACKED-ROUTER
HACKED-ROUTER - 190 results
Compromised Routers
hacked-router-help-sos - 181 results
Variation of Hacked By Label Search
hacked by - 65 results
Ransomware Infected RDP Services
"attention" "encrypted" port:3389 - 16 results
Compromised Hosts Advertising Default Password
HACKED-ROUTER-HELP-SOS-HAD-DEFAULT-PASSWORD - 10 results
Compromised FTP Servers
HACKED FTP server - 10 results
Owned By Label in HTTP Title
http.title:"0wn3d by" - 4 results
Bitcoin Ransomware with Screenshot
bitcoin has_screenshot:true - 1 result
General Dashboard Interfaces
http.title:"dashboard" - 396,904 results
EIG Electricity Meters
"Server: EIG Embedded Web Server" "200 Document follows" - 188,040 results
Control Panel Access Points
http.title:"control panel" - 75,096 results
Minecraft Servers
"Minecraft Server" "protocol 340" port:25565 - 3,110 results
Tesla-related Interfaces
http.title:"Tesla" - 527 results
Bomgar Help Desk Portals
"Server: Bomgar" "200 OK" - 182 results
Bitcoin Antminer Miners
antminer - 114 results
These devices are often left with default credentials.
Everything in North Korea
net:175.45.176.0/22,210.52.109.0/24,77.94.35.0/24 - 34 results
Misconfigured WordPress Installations
http.html:"* The wp-config.php creation script uses this file" - 6 results
i'm not responsible for any misuse of this list :) explore responsibly!
last updated at: 2026-10-15 04:39:11
