Open Ubiquiti Report

This report identifies hosts that have the Ubiquiti Discovery service running and accessible on the Internet.

These services have the potential to be used in amplification attacks by criminals that wish to perform denial of service attacks. In addition, they expose a large amount of information about the system running the service.

The service is tested by sending a UDP packet containing a four-byte payload to UDP port 10001.

Fields

timestamp

Time that the IP was probed in UTC+0
ip

The IP address of the device in question
protocol

Protocol that the response came on (always UDP)
port

Port that the CharGen response came from
hostname

Reverse DNS name of the device in question
tag

This will always be ubiquiti
asn

ASN of where the device in question resides
geo

Country where the device in question resides
region

State / Province / Administrative region where the device in question resides
city

City in which the device in question resides
naics

North American Industry Classification System Code
sic

Standard Industrial Classification System Code
mac

Media access control address (MAC address) of the device
radioname

The trivial name of the device
essid

The SSID name of the wireless (if available)
modelshort

The short model name of the device
modelfull

The full model name of the device
firmware

The revision of firmware that the device is running
size

The size (in bytes) of the response

Sample

"timestamp","ip","protocol","port","hostname","tag","asn","geo","region","city","naics","sic","mac","radioname","essid","modelshort","modelfull","firmware","size"
"2019-02-04 15:34:33","177.22.68.220","udp",10001,"220.68.22.177.strnet.com.br","ubiquiti",262890,"BR","SAO PAULO","TAMBAU",0,0,"0027223ae564","Sartori Tecnologia","NETTAMBAU23N-2","AG5-HP",,"XM.ar7240.v6.0.4-licensed.30805.170505.1649",164
"2019-02-04 15:34:33","195.32.35.53","udp",10001,"c-35-53.cust.wadsl.it","ubiquiti",205005,"IT","ASTI","MONTECHIARO D'ASTI",0,0,"802aa8b03d28","DETTORI Daniela","find-adsl","LB5",,"XW.ar934x.v6.0.4.30805.170505.1510",142
"2019-02-04 15:34:33","195.32.50.5","udp",10001,"c-50-5.cust.wadsl.it","ubiquiti",205005,"IT","TORINO","CHIERI",0,0,"00272210fbd9","Ferrante Marco","find-adsl","N5N",,"XM.ar7240.v6.0.4.30805.170505.1525",144
"2019-02-04 15:34:33","189.80.29.3","udp",10001,"189-80-29-3.rev.tricor.com.br","ubiquiti",7738,"BR","MINAS GERAIS","CAMBUQUIRA",0,0,"0418d664a43a","andrea.sbarbosa","TrAirTC103Max","AG5-HP",,"XW.ar934x.v5.6.5.29033.160515.2108",151
"2019-02-04 15:34:33","179.189.37.80","udp",10001,,"ubiquiti",52598,"BR","RIO GRANDE DO SUL","IMIGRANTE",0,0,"002722a050e7","Tiago Andre Levanaoski","asnet_daltrofilhoA","AG5-HP",,"XM.ar7240.v5.6.3.28591.151130.1749",163
"2019-02-04 15:34:33","168.205.233.249","udp",10001,"249-233-205-168.static.interpop.com.br","ubiquiti",264871,"BR","MINAS GERAIS","MATIAS CARDOSO",0,0,"0418d64af3da","CAMARA","InterPop - 023","N5B-16",,"XW.ar934x.v6.0.3.30600.170329.1817",144
"2019-02-04 15:34:33","69.80.247.177","udp",10001,"ip-69-80-247-177.wireless.static.fire2wire.com","ubiquiti",11191,"US","CALIFORNIA","HILMAR",0,0,"6872514a3d61","AirRouter HP","Mendonca","LAP-HP",,"XM.ar7240.v5.6.4.28924.160331.1253",155
"2019-02-04 15:34:33","31.44.149.93","udp",10001,,"ubiquiti",50129,"ES","ALICANTE","TORREVIEJA",0,0,"802aa828c3df","PLA21964","PH32-U2-P4","P5B-400",,"XW.ar934x.v6.0.1.30382.170317.1751",145
"2019-02-04 15:34:33","179.107.61.45","udp",10001,"45-61-107-179.clickturbo.com.br","ubiquiti",262346,"BR","GOIAS","MORRINHOS",0,0,"0027225cea66","RICARDO APARECIDO VIEIRA","CLICKTURBO-001-JDA-UBNT-S4","LM5",,"XM.ar7240.v5.6.8.29413.160715.1613",176
"2019-02-04 15:34:33","138.34.36.120","udp",10001,,"ubiquiti",577,"CA","ONTARIO","PEMBROKE",0,0,"802aa8fa1eea","WCCT - P Seville","Lisgar-5.8Sec-SW","N5B-19",,"XW.ar934x.v6.0.4.30805.170505.1510",156

Our 80 Report Types

« Back to Network Reporting