[ census ]

public counts, third-party indexes

refreshed as they publish

CENSUS

Exposed AI, counted

As of Aug 2026, 112,199 Ollama servers on the public internet are exposed without authentication (Shodan count · `http.html:"Ollama is running" http.status:200`). Current Shodan index (Aug 2026): 11,822 hosts matching product:"Ollama". Index match, not the zero-auth figure above.

Zero-auth set: Shodan count · `http.html:"Ollama is running" http.status:200` · Aug 2026. Index set: Shodan count · `product:"Ollama"` · Aug 2026. Sources and windows differ. Quote each number with its own attribution.

Scan yours Exposure classes Raw JSON Ollama detail Release 2026-08

[ index ]

Per-service index

internet-wide snapshots, named sources

Published rows are internet-wide snapshots with named sources. zero-auth means a published unauthenticated count; index means a Shodan (or similar) fingerprint match, not verified zero-auth. Collecting means I check that product but do not yet have a published population estimate. Consent-sample n is not a population count.

Shodan research pass 2026-08-03: fingerprint index counts (uncredited host/count queries) plus page-1 banner samples for fingerprint validation.

Service Count Observed Sample n
Ollama 112,199 zero-auth Aug 2026 1 Detail →
n8n 42,130 index Aug 2026 1 Detail →
OpenClaw 41,286 index Aug 2026 - Detail →
LiteLLM 7,336 index Aug 2026 - Detail →
Flowise 3,390 index Aug 2026 - Detail →
Open WebUI 3,114 index Aug 2026 - Detail →
Langflow 2,644 index Aug 2026 - Detail →
Qdrant 2,605 index Aug 2026 - Detail →
Jupyter 2,295 index Aug 2026 - Detail →
Redis 1,922 index Aug 2026 - Detail →
Langfuse 1,558 index Aug 2026 - Detail →
Weaviate 1,335 index Aug 2026 - Detail →
Dify 933 index Aug 2026 - Detail →
Chroma 806 index Aug 2026 - Detail →
Milvus 536 index Aug 2026 1 Detail →
vLLM 311 index Aug 2026 - Detail →
OpenHands 78 index Aug 2026 - Detail →
CrewAI Studio 14 index Aug 2026 - Detail →
LangServe 11 index Aug 2026 - Detail →
AutoGen Studio 1 index Aug 2026 - Detail →
MCP servers - collecting - Detail →
OpenAI-compatible API - collecting - Detail →
[ surface ]

Attack surface

ranked by published zero-auth counts

Exposure classes, ranked

As of 2026-08, 112,199 Ollama servers on the public internet are exposed without authentication. On the Attack Surface Map, model endpoints currently lead published classes. (sources: Shodan count · `product:"Ollama"` Aug 2026; Shodan count · `http.html:"Ollama is running" http.status:200` Aug 2026 - unauth.dev/attack-surface)

Ranked by published internet-wide zero-auth counts. Honeypot probe volume is attacker interest, not a population estimate. Classes marked collecting have no published population figure yet.

Raw JSON

  1. Model endpoints

    112,199 zero-auth

    Inference APIs that answer strangers - list models, chat, pull weights.

    Shodan count · `http.html:"Ollama is running" http.status:200` · 2026-08 · honeypot probes (7d): 2129

    Fix → Demo →

  2. Agent memory stores

    collecting

    Vector / RAG backends that may hold long-lived agent state (OWASP ASI06).

    OWASP ASI06

    honeypot probes (7d): 2556

    Fix → Demo →

  3. MCP / tool transport

    collecting

    Model Context Protocol discovery, SSE, and tools catalogs without auth.

    honeypot probes (7d): 231

    Fix → Demo →

  4. Agent runtimes

    collecting

    Workflow and chatflow builders strangers can invoke or claim as admin.

    honeypot: collecting

    Fix → Demo →

  5. Notebooks & RCE surfaces

    collecting

    Interactive compute that becomes remote code execution when open.

    honeypot: collecting

    Fix → Demo →

  6. Prompt & trace backends

    collecting

    Observability that retains prompts, tools, and session state.

    honeypot: collecting

    Fix → Demo →

How to read this

1 class ranked from published census counts; 5 still collecting a population estimate. Snapshot 2026-08-03. Live probe map: /botwatch.

August 2026 census snapshot. Current per-service headlines use Shodan fingerprint index counts from the 2026-08 research pass where available (index match ≠ verified zero-auth). Ollama country/provider breakdowns are Shodan index facets for product:"Ollama" (Aug 2026), not LeakIX zero-auth shares. Older third-party windows remain in series. MCP and generic OpenAI-compatible stay collecting until a defensible fingerprint exists. Consent-based sample counts from this site are not population estimates.

[ geo ]

Ollama breakdown

index shares · not a zero-auth geographic census

Ollama index shares from Shodan facets · product:"Ollama" · Aug 2026, not a zero-auth geographic census.

Ollama by country

  1. US2,081
  2. DE1,906
  3. CN1,376
  4. FR849
  5. HK498
  6. KR496

Ollama by provider

  1. Contabo878
  2. Hetzner793
  3. OVH745
  4. Tencent422
  5. Oracle334
  6. DigitalOcean270

Snapshot updated 2026-08-03. August 2026 census snapshot. Current per-service headlines use Shodan fingerprint index counts from the 2026-08 research pass where available (index match ≠ verified zero-auth). Ollama country/provider breakdowns are Shodan index facets for product:"Ollama" (Aug 2026), not LeakIX zero-auth shares. Older third-party windows remain in series. MCP and generic OpenAI-compatible stay collecting until a defensible fingerprint exists. Consent-based sample counts from this site are not population estimates.

[ sample ]

Consent sample

aggregate only · no IPs, no domains

What operators who check here actually run

Version distribution from scans submitted to this site. Aggregate only: no IPs, no domains. A product appears once it has at least 20 samples. This is a self-selected sample, not a population estimate.

Milvus n = 1

Collecting: 1/20 samples before this product's distribution goes public.

Ollama n = 1

Collecting: 1/20 samples before this product's distribution goes public.

n8n n = 1

Collecting: 1/20 samples before this product's distribution goes public.