198.51.100.42
Port 1883 / TCP (MQTT)
🇺🇸 United States (US)
High Risk
Internet-Connected Device Search & Banner
Search internet-connected devices, IoT cameras, industrial SCADA controllers, and exposed cloud services. Interactive Shodan and Censys query builder.
Showing 3 internet-connected host records
203.0.113.88
Port 8883 / TLS (MQTT-SSL)
🇩🇪 Germany (DE)
Medium Risk
192.0.2.140
Port 1883 / TCP (HiveMQ)
🇯🇵 Japan (JP)
Critical Risk
Visual Search Syntax Builder
Select your query parameters below to automatically formulate precise dorks for Shodan, Censys, and ZoomEye.
Shodan Query Syntax
port:1883 product:"Mosquitto" country:"US"
Censys Search Query
services.port: 1883 and services.software.product: "Mosquitto" and location.country_code: "US"
ZoomEye Dork Syntax
port:1883 +app:"Mosquitto" +country:"US"
Critical IoT, SCADA & Cloud Ports Cheat Sheet
Standard network ports frequently targeted by automated scanners and botnets on public internet address ranges.
| Port | Protocol | Standard Service | Category | Security Significance |
|---|---|---|---|---|
| 502 | TCP | Modbus Industrial Protocol | Industrial SCADA | Industrial controllers, water treatment plants, power distribution grids. Often unauthenticated. |
| 1883 | TCP | MQTT Message Queuing | IoT Telemetry | Smart meters, vehicle telematics, building automation sensors. Anonymous read/write risks. |
| 554 | TCP/UDP | RTSP Video Streaming | Surveillance | IP security cameras, NVR recorders. Default manufacturer passwords expose live video feeds. |
| 6379 | TCP | Redis In-Memory Key-Value | Databases | Cache engines. Without authentication, attackers write arbitrary SSH authorized_keys files. |
| 6443 | TCP | Kubernetes API Server | Cloud / DevOps | Container orchestration master. Misconfigured anonymous auth grants cluster takeover. |
| 47808 | UDP | BACnet Building Automation | Smart Buildings | HVAC cooling systems, lighting automation, elevator control gateways. |
| 9200 | TCP | Elasticsearch REST API | Databases | Search indexes. Open endpoints lead to massive corporate customer PII leakages. |
| 27017 | TCP | MongoDB Database | Databases | NoSQL document database. Frequent target of ransomware extortion bots when binding to 0.0.0.0. |
About this tool
How to use it
- Search internet-connected devices by IP, service name (MQTT, RTSP, Redis, SSH), port number, or country.
- Use the Shodan & Censys Query Syntax Builder to filter by protocol, organization ASN, or vulnerability CVE.
- Inspect device banner responses, SSL/TLS certificate chains, open ports, and CVSS security risk scores.
- Export technical device intelligence reports in structured JSON or copy raw port banners for security analysis.
Why it matters
Security researchers, defensive sysadmins, and penetration testers need to discover exposed IoT cameras, industrial SCADA controllers, and unauthenticated cloud services before threat actors exploit them. This offline search sandbox provides instant query construction and banner intelligence without requiring commercial subscription credits.
When to use it
Use when performing external attack surface management (ASM), constructing advanced Shodan or Censys dorks, verifying corporate port exposure, or studying industrial IoT protocol footprints.
Common questions
How does the device search and banner engine operate?
The tool provides an indexed database of realistic internet-connected devices, industrial controllers, cloud endpoints, and IoT cameras with real protocol banners, HTTP response headers, and CVE correlations executed 100% client-side.
Can this tool construct search queries for Shodan and Censys?
Yes. The interactive Query Builder lets you toggle specific filters (such as port, country, product, and vulnerability tag) and automatically formats syntax for Shodan, Censys, and ZoomEye engines.
Is any active port scanning performed against third parties from my browser?
No. The exploration, query formatting, and banner analysis run completely client-side in browser memory without sending unauthorized network probes to remote hosts.