{
  "cut_at": "2026-08-05T12:18:21Z",
  "kind": "census",
  "month": "2026-08",
  "snapshot": {
    "methodology": "August 2026 census snapshot. Current per-service headlines use Shodan fingerprint index counts from the 2026-08 research pass where available (index match \u2260 verified zero-auth). Ollama country/provider breakdowns are Shodan index facets for product:\"Ollama\" (Aug 2026), not LeakIX zero-auth shares. Older third-party windows remain in series. MCP and generic OpenAI-compatible stay collecting until a defensible fingerprint exists. Consent-based sample counts from this site are not population estimates.",
    "ollama_breakdown": {
      "metric": "shodan_index",
      "note": "Country/provider shares of the Shodan product fingerprint index \u2014 not LeakIX zero-auth.",
      "observed": "2026-08",
      "source": "Shodan facets \u00b7 product:\"Ollama\""
    },
    "reachable_ollama": {
      "count": 11822,
      "label": "Shodan index matches (fingerprint \u2014 not verified zero-auth); 86% on :11434",
      "observed": "2026-08",
      "source": "Shodan count \u00b7 `product:\"Ollama\"`"
    },
    "services": [
      {
        "by_country": [
          {
            "count": 2081,
            "label": "US"
          },
          {
            "count": 1906,
            "label": "DE"
          },
          {
            "count": 1376,
            "label": "CN"
          },
          {
            "count": 849,
            "label": "FR"
          },
          {
            "count": 498,
            "label": "HK"
          },
          {
            "count": 496,
            "label": "KR"
          }
        ],
        "by_provider": [
          {
            "count": 878,
            "label": "Contabo"
          },
          {
            "count": 793,
            "label": "Hetzner"
          },
          {
            "count": 745,
            "label": "OVH"
          },
          {
            "count": 422,
            "label": "Tencent"
          },
          {
            "count": 334,
            "label": "Oracle"
          },
          {
            "count": 270,
            "label": "DigitalOcean"
          }
        ],
        "fix_card_id": "ollama-exposed",
        "id": "ollama",
        "product": "Ollama",
        "reachable": {
          "count": 11822,
          "label": "Shodan index matches (fingerprint \u2014 not verified zero-auth); 86% on :11434",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `product:\"Ollama\"`"
        },
        "series": [
          {
            "count": 175108,
            "metric": "reachable",
            "month": "2026-01",
            "source": "SentinelLABS \u00d7 Censys"
          },
          {
            "count": 12269,
            "metric": "zero_auth",
            "month": "2026-02",
            "source": "LeakIX continuous scan"
          },
          {
            "count": 11822,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `product:\"Ollama\"`"
          },
          {
            "count": 112199,
            "metric": "zero_auth",
            "month": "2026-08",
            "source": "Shodan count \u00b7 banner + 200"
          }
        ],
        "status": "published",
        "zero_auth": {
          "count": 112199,
          "label": "answered an unauthenticated GET with the Ollama root banner (HTTP 200 \"Ollama is running\") \u2014 endpoint verified zero-auth at crawl time; 7\u00d7 more sit off :11434 than on it",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.html:\"Ollama is running\" http.status:200`"
        }
      },
      {
        "fix_card_id": "open-webui-exposed",
        "id": "openwebui",
        "product": "Open WebUI",
        "reachable": {
          "count": 3114,
          "label": "Shodan index matches (favicon fingerprint \u2014 not verified zero-auth). Headline uses the favicon hash as the more defensible fingerprint; the title query `http.title:\"Open WebUI\"` matched 17,768 hosts (2026-08) but was noisier.",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.favicon.hash:1239683376`"
        },
        "series": [
          {
            "count": 12000,
            "metric": "reachable",
            "month": "2026-05",
            "source": "Intruder research"
          },
          {
            "count": 24,
            "metric": "zero_auth",
            "month": "2026-05",
            "source": "Intruder research"
          },
          {
            "count": 3114,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.favicon.hash:1239683376`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "flowise-exposed",
        "id": "flowise",
        "product": "Flowise",
        "reachable": {
          "count": 3390,
          "label": "Shodan index matches (fingerprint \u2014 not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.html:\"Flowise - Build AI Agents, Visually\"`"
        },
        "series": [
          {
            "count": 2650,
            "metric": "reachable",
            "month": "2026-05",
            "source": "Intruder research"
          },
          {
            "count": 92,
            "metric": "zero_auth",
            "month": "2026-05",
            "source": "Intruder research"
          },
          {
            "count": 3390,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.html:\"Flowise - Build AI Agents, Visually\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "langflow-exposed",
        "id": "langflow",
        "product": "Langflow",
        "reachable": {
          "count": 2644,
          "label": "Shodan index matches (title \u2014 not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.title:\"Langflow\"`"
        },
        "series": [
          {
            "count": 300,
            "metric": "reachable",
            "month": "2026-05",
            "source": "Intruder research"
          },
          {
            "count": 25,
            "metric": "zero_auth",
            "month": "2026-05",
            "source": "Intruder research"
          },
          {
            "count": 2644,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.title:\"Langflow\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "n8n-exposed",
        "id": "n8n",
        "product": "n8n",
        "reachable": {
          "count": 42130,
          "label": "Shodan index matches (fingerprint \u2014 not verified zero-auth); All n8n instances \u2014 not AI-workflow-only",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.favicon.hash:-831756631,-670975485`"
        },
        "series": [
          {
            "count": 42130,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.favicon.hash:-831756631,-670975485`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "vllm-exposed",
        "id": "vllm",
        "product": "vLLM",
        "reachable": {
          "count": 311,
          "label": "Shodan index matches (body contains vLLM \u2014 not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.html:\"vLLM\"`"
        },
        "series": [
          {
            "count": 311,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.html:\"vLLM\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "langfuse-exposed",
        "id": "langfuse",
        "product": "Langfuse",
        "reachable": {
          "count": 1558,
          "label": "Shodan index matches (fingerprint \u2014 not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.html:\"LangfuseIcon\"`"
        },
        "series": [
          {
            "count": 1558,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.html:\"LangfuseIcon\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "qdrant-exposed",
        "id": "qdrant",
        "product": "Qdrant",
        "reachable": {
          "count": 2605,
          "label": "Shodan index matches (fingerprint \u2014 not verified zero-auth); API root JSON; often proxied off :6333",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.html:\"qdrant - vector search engine\"`"
        },
        "series": [
          {
            "count": 2605,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.html:\"qdrant - vector search engine\"`"
          }
        ],
        "status": "published"
      },
      {
        "collecting_note": "No citeable Shodan fingerprint yet (protocol string\u22480; /mcp/sse path is noisy \u2014 OpenA2A 0/10 confirmed).",
        "fix_card_id": "mcp-exposed",
        "id": "mcp",
        "product": "MCP servers",
        "status": "collecting"
      },
      {
        "fix_card_id": "langserve-exposed",
        "id": "langserve",
        "product": "LangServe",
        "reachable": {
          "count": 11,
          "label": "Shodan index matches (html langserve \u2014 small population; not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.html:\"langserve\"`"
        },
        "series": [
          {
            "count": 11,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.html:\"langserve\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "openclaw-exposed",
        "id": "openclaw",
        "product": "OpenClaw",
        "reachable": {
          "count": 41286,
          "label": "Shodan index matches (fingerprint \u2014 not verified zero-auth); Mostly OpenClaw Control; ~28k on :18789",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.title:\"Clawdbot Control\",\"Moltbot Control\",\"OpenClaw Control\"`"
        },
        "series": [
          {
            "count": 41286,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.title:\"Clawdbot Control\",\"Moltbot Control\",\"OpenClaw Control\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "openhands-exposed",
        "id": "openhands",
        "product": "OpenHands",
        "reachable": {
          "count": 78,
          "label": "Shodan index matches (fingerprint \u2014 not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.html:\"OpenHands Agent Server\"`"
        },
        "series": [
          {
            "count": 78,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.html:\"OpenHands Agent Server\"`"
          }
        ],
        "status": "published"
      },
      {
        "collecting_note": "Generic /v1/models index is not a product census; covered via vLLM/LiteLLM/OpenHands primaries.",
        "fix_card_id": "openai-compat-exposed",
        "id": "openai-compat",
        "product": "OpenAI-compatible API",
        "status": "collecting"
      },
      {
        "fix_card_id": "autogen-studio-exposed",
        "id": "autogen-studio",
        "product": "AutoGen Studio",
        "reachable": {
          "count": 1,
          "label": "Shodan index matches (AutoGen Studio html \u2014 sparse; not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.html:\"AutoGen Studio\"`"
        },
        "series": [
          {
            "count": 1,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.html:\"AutoGen Studio\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "crewai-exposed",
        "id": "crewai",
        "product": "CrewAI Studio",
        "reachable": {
          "count": 14,
          "label": "Shodan index matches (title CrewAI \u2014 sparse; not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.title:\"CrewAI\"`"
        },
        "series": [
          {
            "count": 14,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.title:\"CrewAI\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "chroma-exposed",
        "id": "chroma",
        "product": "Chroma",
        "reachable": {
          "count": 806,
          "label": "Shodan index matches (product module \u2014 not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `product:\"Chroma\"`"
        },
        "series": [
          {
            "count": 806,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `product:\"Chroma\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "weaviate-exposed",
        "id": "weaviate",
        "product": "Weaviate",
        "reachable": {
          "count": 1335,
          "label": "Shodan index matches (fingerprint \u2014 not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.html:\"https://weaviate.io\"`"
        },
        "series": [
          {
            "count": 1335,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.html:\"https://weaviate.io\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "dify-exposed",
        "id": "dify",
        "product": "Dify",
        "reachable": {
          "count": 933,
          "label": "Shodan index matches (fingerprint \u2014 not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.favicon.hash:97378986`"
        },
        "series": [
          {
            "count": 933,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.favicon.hash:97378986`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "litellm-exposed",
        "id": "litellm",
        "product": "LiteLLM",
        "reachable": {
          "count": 7336,
          "label": "Shodan index matches (fingerprint \u2014 not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.html:\"LiteLLM API - Swagger UI\"`"
        },
        "series": [
          {
            "count": 7336,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.html:\"LiteLLM API - Swagger UI\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "jupyter-exposed",
        "id": "jupyter",
        "product": "Jupyter",
        "reachable": {
          "count": 2295,
          "label": "Shodan index matches (Notebook/Lab titles \u2014 not verified zero-auth / token state)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.title:\"Jupyter Notebook\",\"JupyterLab\"`"
        },
        "series": [
          {
            "count": 2295,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.title:\"Jupyter Notebook\",\"JupyterLab\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "milvus-exposed",
        "id": "milvus",
        "product": "Milvus",
        "reachable": {
          "count": 536,
          "label": "Shodan index matches (product fingerprint \u2014 :9091 index, not verified zero-auth)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `product:\"Milvus\"`"
        },
        "series": [
          {
            "count": 536,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `product:\"Milvus\"`"
          }
        ],
        "status": "published"
      },
      {
        "fix_card_id": "redis-exposed",
        "id": "redis",
        "product": "Redis",
        "reachable": {
          "count": 1922,
          "label": "Shodan index matches (RedisInsight/Commander consoles \u2014 not raw Redis :6379)",
          "observed": "2026-08",
          "source": "Shodan count \u00b7 `http.title:\"RedisInsight\",\"Redis Commander\"`"
        },
        "series": [
          {
            "count": 1922,
            "metric": "shodan_index",
            "month": "2026-08",
            "source": "Shodan count \u00b7 `http.title:\"RedisInsight\",\"Redis Commander\"`"
          }
        ],
        "status": "published"
      }
    ],
    "shodan_pass": {
      "note": "host/count and facets do not consume query credits. Spent credits were host/search page-1 samples: census candidates (OpenClaw, n8n, LiteLLM, OpenHands, Qdrant, Open WebUI) plus a per-product fingerprint-validation corpus and Milvus/Ray research queries.",
      "observed": "2026-08-03",
      "plan": "basic (Freelancer)",
      "query_credits_monthly": 10000,
      "query_credits_remaining": 9972,
      "query_credits_spent": 28
    },
    "snapshot_updated": "2026-08-03",
    "zero_auth_by_country": [
      {
        "count": 2081,
        "label": "US"
      },
      {
        "count": 1906,
        "label": "DE"
      },
      {
        "count": 1376,
        "label": "CN"
      },
      {
        "count": 849,
        "label": "FR"
      },
      {
        "count": 498,
        "label": "HK"
      },
      {
        "count": 496,
        "label": "KR"
      }
    ],
    "zero_auth_by_provider": [
      {
        "count": 878,
        "label": "Contabo"
      },
      {
        "count": 793,
        "label": "Hetzner"
      },
      {
        "count": 745,
        "label": "OVH"
      },
      {
        "count": 422,
        "label": "Tencent"
      },
      {
        "count": 334,
        "label": "Oracle"
      },
      {
        "count": 270,
        "label": "DigitalOcean"
      }
    ],
    "zero_auth_ollama": {
      "count": 112199,
      "label": "answered an unauthenticated GET with the Ollama root banner (HTTP 200 \"Ollama is running\") \u2014 endpoint verified zero-auth at crawl time; 7\u00d7 more sit off :11434 than on it",
      "observed": "2026-08",
      "source": "Shodan count \u00b7 `http.html:\"Ollama is running\" http.status:200`"
    }
  }
}