{"snapshot_updated":"2026-08-03","methodology":"August 2026 census snapshot. Current per-service headlines use Shodan fingerprint index counts from the 2026-08 research pass where available (index match ≠ verified zero-auth). Ollama country/provider breakdowns are Shodan index facets for product:\"Ollama\" (Aug 2026), not LeakIX zero-auth shares. Older third-party windows remain in series. MCP and generic OpenAI-compatible stay collecting until a defensible fingerprint exists. Consent-based sample counts from this site are not population estimates.","reachable_ollama":{"count":11822,"label":"Shodan index matches (fingerprint — not verified zero-auth); 86% on :11434","source":"Shodan count · `product:\"Ollama\"`","observed":"2026-08"},"zero_auth_ollama":{"count":112199,"label":"answered an unauthenticated GET with the Ollama root banner (HTTP 200 \"Ollama is running\") — endpoint verified zero-auth at crawl time; 7× more sit off :11434 than on it","source":"Shodan count · `http.html:\"Ollama is running\" http.status:200`","observed":"2026-08"},"zero_auth_ollama_baseline":{"count":12269,"label":"zero-auth Ollama measured six months earlier — the growth baseline","source":"LeakIX continuous scan","observed":"2026-02"},"zero_auth_by_country":[{"label":"US","count":2081},{"label":"DE","count":1906},{"label":"CN","count":1376},{"label":"FR","count":849},{"label":"HK","count":498},{"label":"KR","count":496}],"zero_auth_by_provider":[{"label":"Contabo","count":878},{"label":"Hetzner","count":793},{"label":"OVH","count":745},{"label":"Tencent","count":422},{"label":"Oracle","count":334},{"label":"DigitalOcean","count":270}],"services":[{"id":"ollama","product":"Ollama","fix_card_id":"ollama-exposed","status":"published","zero_auth":{"count":112199,"label":"answered an unauthenticated GET with the Ollama root banner (HTTP 200 \"Ollama is running\") — endpoint verified zero-auth at crawl time; 7× more sit off :11434 than on it","source":"Shodan count · `http.html:\"Ollama is running\" http.status:200`","observed":"2026-08"},"reachable":{"count":11822,"label":"Shodan index matches (fingerprint — not verified zero-auth); 86% on :11434","source":"Shodan count · `product:\"Ollama\"`","observed":"2026-08"},"series":[{"month":"2026-01","metric":"reachable","count":175108,"source":"SentinelLABS × Censys"},{"month":"2026-02","metric":"zero_auth","count":12269,"source":"LeakIX continuous scan"},{"month":"2026-08","metric":"shodan_index","count":11822,"source":"Shodan count · `product:\"Ollama\"`"},{"month":"2026-08","metric":"zero_auth","count":112199,"source":"Shodan count · banner + 200"}],"by_country":[{"label":"US","count":2081},{"label":"DE","count":1906},{"label":"CN","count":1376},{"label":"FR","count":849},{"label":"HK","count":498},{"label":"KR","count":496}],"by_provider":[{"label":"Contabo","count":878},{"label":"Hetzner","count":793},{"label":"OVH","count":745},{"label":"Tencent","count":422},{"label":"Oracle","count":334},{"label":"DigitalOcean","count":270}]},{"id":"openwebui","product":"Open WebUI","fix_card_id":"open-webui-exposed","status":"published","reachable":{"count":3114,"label":"Shodan index matches (favicon fingerprint — not verified zero-auth). Headline uses the favicon hash as the more defensible fingerprint; the title query `http.title:\"Open WebUI\"` matched 17,768 hosts (2026-08) but was noisier.","source":"Shodan count · `http.favicon.hash:1239683376`","observed":"2026-08"},"series":[{"month":"2026-05","metric":"reachable","count":12000,"source":"Intruder research"},{"month":"2026-05","metric":"zero_auth","count":24,"source":"Intruder research"},{"month":"2026-08","metric":"shodan_index","count":3114,"source":"Shodan count · `http.favicon.hash:1239683376`"}]},{"id":"flowise","product":"Flowise","fix_card_id":"flowise-exposed","status":"published","reachable":{"count":3390,"label":"Shodan index matches (fingerprint — not verified zero-auth)","source":"Shodan count · `http.html:\"Flowise - Build AI Agents, Visually\"`","observed":"2026-08"},"series":[{"month":"2026-05","metric":"reachable","count":2650,"source":"Intruder research"},{"month":"2026-05","metric":"zero_auth","count":92,"source":"Intruder research"},{"month":"2026-08","metric":"shodan_index","count":3390,"source":"Shodan count · `http.html:\"Flowise - Build AI Agents, Visually\"`"}]},{"id":"langflow","product":"Langflow","fix_card_id":"langflow-exposed","status":"published","reachable":{"count":2644,"label":"Shodan index matches (title — not verified zero-auth)","source":"Shodan count · `http.title:\"Langflow\"`","observed":"2026-08"},"series":[{"month":"2026-05","metric":"reachable","count":300,"source":"Intruder research"},{"month":"2026-05","metric":"zero_auth","count":25,"source":"Intruder research"},{"month":"2026-08","metric":"shodan_index","count":2644,"source":"Shodan count · `http.title:\"Langflow\"`"}]},{"id":"n8n","product":"n8n","fix_card_id":"n8n-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":42130,"source":"Shodan count · `http.favicon.hash:-831756631,-670975485`"}],"reachable":{"count":42130,"label":"Shodan index matches (fingerprint — not verified zero-auth); All n8n instances — not AI-workflow-only","source":"Shodan count · `http.favicon.hash:-831756631,-670975485`","observed":"2026-08"}},{"id":"vllm","product":"vLLM","fix_card_id":"vllm-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":311,"source":"Shodan count · `http.html:\"vLLM\"`"}],"reachable":{"count":311,"label":"Shodan index matches (body contains vLLM — not verified zero-auth)","source":"Shodan count · `http.html:\"vLLM\"`","observed":"2026-08"}},{"id":"langfuse","product":"Langfuse","fix_card_id":"langfuse-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":1558,"source":"Shodan count · `http.html:\"LangfuseIcon\"`"}],"reachable":{"count":1558,"label":"Shodan index matches (fingerprint — not verified zero-auth)","source":"Shodan count · `http.html:\"LangfuseIcon\"`","observed":"2026-08"}},{"id":"qdrant","product":"Qdrant","fix_card_id":"qdrant-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":2605,"source":"Shodan count · `http.html:\"qdrant - vector search engine\"`"}],"reachable":{"count":2605,"label":"Shodan index matches (fingerprint — not verified zero-auth); API root JSON; often proxied off :6333","source":"Shodan count · `http.html:\"qdrant - vector search engine\"`","observed":"2026-08"}},{"id":"mcp","product":"MCP servers","fix_card_id":"mcp-exposed","status":"collecting","collecting_note":"No citeable Shodan fingerprint yet (protocol string≈0; /mcp/sse path is noisy — OpenA2A 0/10 confirmed)."},{"id":"langserve","product":"LangServe","fix_card_id":"langserve-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":11,"source":"Shodan count · `http.html:\"langserve\"`"}],"reachable":{"count":11,"label":"Shodan index matches (html langserve — small population; not verified zero-auth)","source":"Shodan count · `http.html:\"langserve\"`","observed":"2026-08"}},{"id":"openclaw","product":"OpenClaw","fix_card_id":"openclaw-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":41286,"source":"Shodan count · `http.title:\"Clawdbot Control\",\"Moltbot Control\",\"OpenClaw Control\"`"}],"reachable":{"count":41286,"label":"Shodan index matches (fingerprint — not verified zero-auth); Mostly OpenClaw Control; ~28k on :18789","source":"Shodan count · `http.title:\"Clawdbot Control\",\"Moltbot Control\",\"OpenClaw Control\"`","observed":"2026-08"}},{"id":"openhands","product":"OpenHands","fix_card_id":"openhands-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":78,"source":"Shodan count · `http.html:\"OpenHands Agent Server\"`"}],"reachable":{"count":78,"label":"Shodan index matches (fingerprint — not verified zero-auth)","source":"Shodan count · `http.html:\"OpenHands Agent Server\"`","observed":"2026-08"}},{"id":"openai-compat","product":"OpenAI-compatible API","fix_card_id":"openai-compat-exposed","status":"collecting","collecting_note":"Generic /v1/models index is not a product census; covered via vLLM/LiteLLM/OpenHands primaries."},{"id":"autogen-studio","product":"AutoGen Studio","fix_card_id":"autogen-studio-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":1,"source":"Shodan count · `http.html:\"AutoGen Studio\"`"}],"reachable":{"count":1,"label":"Shodan index matches (AutoGen Studio html — sparse; not verified zero-auth)","source":"Shodan count · `http.html:\"AutoGen Studio\"`","observed":"2026-08"}},{"id":"crewai","product":"CrewAI Studio","fix_card_id":"crewai-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":14,"source":"Shodan count · `http.title:\"CrewAI\"`"}],"reachable":{"count":14,"label":"Shodan index matches (title CrewAI — sparse; not verified zero-auth)","source":"Shodan count · `http.title:\"CrewAI\"`","observed":"2026-08"}},{"id":"chroma","product":"Chroma","fix_card_id":"chroma-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":806,"source":"Shodan count · `product:\"Chroma\"`"}],"reachable":{"count":806,"label":"Shodan index matches (product module — not verified zero-auth)","source":"Shodan count · `product:\"Chroma\"`","observed":"2026-08"}},{"id":"weaviate","product":"Weaviate","fix_card_id":"weaviate-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":1335,"source":"Shodan count · `http.html:\"https://weaviate.io\"`"}],"reachable":{"count":1335,"label":"Shodan index matches (fingerprint — not verified zero-auth)","source":"Shodan count · `http.html:\"https://weaviate.io\"`","observed":"2026-08"}},{"id":"dify","product":"Dify","fix_card_id":"dify-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":933,"source":"Shodan count · `http.favicon.hash:97378986`"}],"reachable":{"count":933,"label":"Shodan index matches (fingerprint — not verified zero-auth)","source":"Shodan count · `http.favicon.hash:97378986`","observed":"2026-08"}},{"id":"litellm","product":"LiteLLM","fix_card_id":"litellm-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":7336,"source":"Shodan count · `http.html:\"LiteLLM API - Swagger UI\"`"}],"reachable":{"count":7336,"label":"Shodan index matches (fingerprint — not verified zero-auth)","source":"Shodan count · `http.html:\"LiteLLM API - Swagger UI\"`","observed":"2026-08"}},{"id":"jupyter","product":"Jupyter","fix_card_id":"jupyter-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":2295,"source":"Shodan count · `http.title:\"Jupyter Notebook\",\"JupyterLab\"`"}],"reachable":{"count":2295,"label":"Shodan index matches (Notebook/Lab titles — not verified zero-auth / token state)","source":"Shodan count · `http.title:\"Jupyter Notebook\",\"JupyterLab\"`","observed":"2026-08"}},{"id":"milvus","product":"Milvus","fix_card_id":"milvus-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":536,"source":"Shodan count · `product:\"Milvus\"`"}],"reachable":{"count":536,"label":"Shodan index matches (product fingerprint — :9091 index, not verified zero-auth)","source":"Shodan count · `product:\"Milvus\"`","observed":"2026-08"}},{"id":"redis","product":"Redis","fix_card_id":"redis-exposed","status":"published","series":[{"month":"2026-08","metric":"shodan_index","count":1922,"source":"Shodan count · `http.title:\"RedisInsight\",\"Redis Commander\"`"}],"reachable":{"count":1922,"label":"Shodan index matches (RedisInsight/Commander consoles — not raw Redis :6379)","source":"Shodan count · `http.title:\"RedisInsight\",\"Redis Commander\"`","observed":"2026-08"}}],"shodan_pass":{"observed":"2026-08-03","plan":"basic (Freelancer)","query_credits_spent":28,"query_credits_remaining":9972,"query_credits_monthly":10000,"note":"host/count and facets do not consume query credits. Spent credits were host/search page-1 samples: census candidates (OpenClaw, n8n, LiteLLM, OpenHands, Qdrant, Open WebUI) plus a per-product fingerprint-validation corpus and Milvus/Ray research queries."},"ollama_breakdown":{"metric":"shodan_index","source":"Shodan facets · product:\"Ollama\"","observed":"2026-08","note":"Country/provider shares of the Shodan product fingerprint index — not LeakIX zero-auth."},"index":[{"id":"ollama","product":"Ollama","fix_card_id":"ollama-exposed","status":"published","zero_auth_count":112199,"zero_auth_observed":"2026-08","zero_auth_source":"Shodan count · `http.html:\"Ollama is running\" http.status:200`","reachable_count":11822,"reachable_observed":"2026-08","reachable_source":"Shodan count · `product:\"Ollama\"`","sample_n":1,"cite":"As of 2026-08, 112,199 Ollama servers on the public internet are exposed without authentication.","href":"/census/ollama"},{"id":"n8n","product":"n8n","fix_card_id":"n8n-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":42130,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.favicon.hash:-831756631,-670975485`","sample_n":1,"cite":"As of 2026-08, 42,130 n8n hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/n8n"},{"id":"openclaw","product":"OpenClaw","fix_card_id":"openclaw-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":41286,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.title:\"Clawdbot Control\",\"Moltbot Control\",\"OpenClaw Control\"`","sample_n":0,"cite":"As of 2026-08, 41,286 OpenClaw hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/openclaw"},{"id":"litellm","product":"LiteLLM","fix_card_id":"litellm-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":7336,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.html:\"LiteLLM API - Swagger UI\"`","sample_n":0,"cite":"As of 2026-08, 7,336 LiteLLM hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/litellm"},{"id":"flowise","product":"Flowise","fix_card_id":"flowise-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":3390,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.html:\"Flowise - Build AI Agents, Visually\"`","sample_n":0,"cite":"As of 2026-08, 3,390 Flowise hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/flowise"},{"id":"openwebui","product":"Open WebUI","fix_card_id":"open-webui-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":3114,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.favicon.hash:1239683376`","sample_n":0,"cite":"As of 2026-08, 3,114 Open WebUI hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/openwebui"},{"id":"langflow","product":"Langflow","fix_card_id":"langflow-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":2644,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.title:\"Langflow\"`","sample_n":0,"cite":"As of 2026-08, 2,644 Langflow hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/langflow"},{"id":"qdrant","product":"Qdrant","fix_card_id":"qdrant-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":2605,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.html:\"qdrant - vector search engine\"`","sample_n":0,"cite":"As of 2026-08, 2,605 Qdrant hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/qdrant"},{"id":"jupyter","product":"Jupyter","fix_card_id":"jupyter-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":2295,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.title:\"Jupyter Notebook\",\"JupyterLab\"`","sample_n":0,"cite":"As of 2026-08, 2,295 Jupyter hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/jupyter"},{"id":"redis","product":"Redis","fix_card_id":"redis-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":1922,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.title:\"RedisInsight\",\"Redis Commander\"`","sample_n":0,"cite":"As of 2026-08, 1,922 Redis hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/redis"},{"id":"langfuse","product":"Langfuse","fix_card_id":"langfuse-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":1558,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.html:\"LangfuseIcon\"`","sample_n":0,"cite":"As of 2026-08, 1,558 Langfuse hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/langfuse"},{"id":"weaviate","product":"Weaviate","fix_card_id":"weaviate-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":1335,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.html:\"https://weaviate.io\"`","sample_n":0,"cite":"As of 2026-08, 1,335 Weaviate hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/weaviate"},{"id":"dify","product":"Dify","fix_card_id":"dify-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":933,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.favicon.hash:97378986`","sample_n":0,"cite":"As of 2026-08, 933 Dify hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/dify"},{"id":"chroma","product":"Chroma","fix_card_id":"chroma-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":806,"reachable_observed":"2026-08","reachable_source":"Shodan count · `product:\"Chroma\"`","sample_n":0,"cite":"As of 2026-08, 806 Chroma hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/chroma"},{"id":"milvus","product":"Milvus","fix_card_id":"milvus-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":536,"reachable_observed":"2026-08","reachable_source":"Shodan count · `product:\"Milvus\"`","sample_n":1,"cite":"As of 2026-08, 536 Milvus hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/milvus"},{"id":"vllm","product":"vLLM","fix_card_id":"vllm-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":311,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.html:\"vLLM\"`","sample_n":0,"cite":"As of 2026-08, 311 vLLM hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/vllm"},{"id":"openhands","product":"OpenHands","fix_card_id":"openhands-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":78,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.html:\"OpenHands Agent Server\"`","sample_n":0,"cite":"As of 2026-08, 78 OpenHands hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/openhands"},{"id":"crewai","product":"CrewAI Studio","fix_card_id":"crewai-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":14,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.title:\"CrewAI\"`","sample_n":0,"cite":"As of 2026-08, 14 CrewAI Studio hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/crewai"},{"id":"langserve","product":"LangServe","fix_card_id":"langserve-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":11,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.html:\"langserve\"`","sample_n":0,"cite":"As of 2026-08, 11 LangServe hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/langserve"},{"id":"autogen-studio","product":"AutoGen Studio","fix_card_id":"autogen-studio-exposed","status":"published","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":1,"reachable_observed":"2026-08","reachable_source":"Shodan count · `http.html:\"AutoGen Studio\"`","sample_n":0,"cite":"As of 2026-08, 1 AutoGen Studio hosts match a published fingerprint index on Shodan - index match, not a verified zero-auth count.","href":"/census/autogen-studio"},{"id":"mcp","product":"MCP servers","fix_card_id":"mcp-exposed","status":"collecting","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":null,"reachable_observed":null,"reachable_source":null,"sample_n":0,"cite":null,"href":"/census/mcp"},{"id":"openai-compat","product":"OpenAI-compatible API","fix_card_id":"openai-compat-exposed","status":"collecting","zero_auth_count":null,"zero_auth_observed":null,"zero_auth_source":null,"reachable_count":null,"reachable_observed":null,"reachable_source":null,"sample_n":0,"cite":null,"href":"/census/openai-compat"}]}