Accessible Apple Remote Desktop (ARD) Report

This report identifies hosts that have the Apple Remote Desktop service on port 3283/udp running and accessible on the Internet.  This can be abused in an amplification attack and it also leaks information about the system that it is running on.

For more details behind the scan methodology and a daily update of global ARD scan statistics please visit our dedicated Accessible ARD scan page.

For more information on our scanning efforts, check out our Internet scanning summary page.

Fields

  • timestamp
    Time that the IP was probed in UTC+0
  • ip
    The IP address of the device in question
  • protocol
    Protocol that the ARD response came on (always UDP)
  • port
    Port that the ARD response came from (usually 3283)
  • hostname
    Reverse DNS name of the device in question
  • tag
    This will always be ard
  • asn
    ASN of where the device in question resides
  • geo
    Country where the device in question resides
  • region
    State / Province / Administrative region where the device in question resides
  • city
    City in which the device in question resides
  • naics
    North American Industry Classification System Code
  • sic
    Standard Industrial Classification System Code
  • machine_name
    Trivial name of the device
  • response_size
    Size of the ARD response in bytes, minus the UDP header

Sample

"timestamp","ip","protocol","port","hostname","tag","asn","geo","region","city","naics","sic","machine_name","response_size"
"2019-10-02 09:18:05","169.236.55.189","udp",3283,"lpg2.ucmerced.edu","ard",22323,"US","CALIFORNIA","MERCED",611310,822101,"LPG2.ucmerced.edu",1006
"2019-10-02 09:18:06","74.111.20.19","udp",3283,"static-74-111-20-19.syrcny.fios.verizon.net","ard",701,"US","NEW YORK","SYRACUSE",517312,737415,"Surveillance System - Greenlea",1006
"2019-10-02 09:18:06","177.68.23.169","udp",3283,"177-68-23-169.dsl.telesp.net.br","ard",27699,"BR","SAO PAULO","SAO PAULO",517312,737415,"Host - Marcelo Soledade",1006
"2019-10-02 09:18:06","124.194.114.132","udp",3283,,"ard",3786,"KR","GYEONGSANGBUGDO","SEONSAN-EUP",517311,0,,360
"2019-10-02 09:18:06","129.174.55.244","udp",3283,"gmutantt.gmu.edu","ard",11279,"US","VIRGINIA","FAIRFAX",611310,822101,"gmutant",360
"2019-10-02 09:18:06","71.61.193.69","udp",3283,"c-71-61-193-69.hsd1.pa.comcast.net","ard",7922,"US","PENNSYLVANIA","MONACA",517311,737401,"minihomesvr",1006
"2019-10-02 09:18:06","207.254.60.30","udp",3283,,"ard",395337,"US","NEVADA","LAS VEGAS",0,0,8034,1006
"2019-10-02 09:18:06","140.116.183.179","udp",3283,,"ard",1659,"TW","TAIPEI CITY","TAIPEI",923110,0,"CCKs Black Mac Pro",1006
"2019-10-02 09:18:06","172.90.125.237","udp",3283,"cpe-172-90-125-237.socal.res.rr.com","ard",20001,"US","CALIFORNIA","ORANGE",517311,737401,"chadski_s computer",1006
"2019-10-02 09:18:06","208.78.107.204","udp",3283,,"ard",395336,"US","NEVADA","LAS VEGAS",0,0,"Atlanta6",1006

Our 111 Report Types

« Back to Network Reporting