150 papers.
Cross-cloud surveys + synthesis.

LibreChat Population Survey — 412/1,565 Open Registration (26.3%) new

LibreChat (github.com/danny-avila/LibreChat) is an open-source ChatGPT-alternative chat interface — supports multiple LLM providers, plugins, multimodal, multi-tenant via shared de…

2026-06-06

Cat-05: LiteLLM Gateway Survey — Open Proxies Exposing Commercial LLM API Keys new

The hunt started with a single Shodan dork: http.title:"LiteLLM" port:4000. It returned 2,219 results in under a second.

2026-06-06

LobeChat Population Survey — 10/12 Fully Open (83.3%, small population) new

LobeChat (github.com/lobehub/lobe-chat) is an open-source ChatGPT-alternative chat interface from Lobehub, a China-origin OSS community. Direct functional parallel to LibreChat. 64…

2026-06-06

Open WebUI Population Survey — 39 Auth-Off, 564 Open Signup new

18,389 Shodan-indexed instances of Open WebUI. One GET to /api/config returns a JSON object that tells you everything: whether auth is enforced, whether public registration is open…

2026-06-06

Cat-OW Calibration Deltas — 5 Named Findings Re-Verified new

A spot-check verification pass on five named-institution findings in the Open WebUI population survey, applying the attribution hierarchy from Insight #79.

2026-06-06

Arize Phoenix Population Survey — 41/55 Unauthenticated Project Disclosure new

Arize Phoenix (github.com/Arize-ai/phoenix) is an open-source LLM observability and tracing platform — span ingestion, project organization, dataset versioning, prompt management f…

2026-06-06

RAGFlow Population Survey — 618/709 Open Registration (87.2%) new

RAGFlow (github.com/infiniflow/ragflow) is an open-source RAG knowledge-base engine — document ingestion, vector retrieval, LLM-backed Q&A over enterprise knowledge bases. 1,915 Sh…

2026-06-06

Cat-03 Model Serving & Inference — Survey 2026-06-05 new

Survey of 5,018 IPs across 17 Shodan and 9 Censys queries targeting Cat-03 (model serving and inference: llama.cpp, KoboldCpp, LM Studio, vLLM, SillyTavern, faster-whisper, One API…

2026-06-05

AI Gateways Population Survey: Cat-32 (2026-06-01) new

An AI gateway sits in front of every upstream LLM provider an operator uses. It holds the OpenAI key, the Anthropic key, the Gemini key, the DeepSeek key. All in one process. That…

2026-06-01

Argo Workflows Population Survey — Cat-29 (2026-05-31)

<!-- ksat-tag:auto-generated:start --> ## DCWF KSAT coverage

2026-05-31

Data Labeling & Annotation: the registration knob that re-opens the door

Data-labeling platforms sit at the input boundary of every supervised-learning and RLHF pipeline. They hold the raw data being labeled: PII-dense text, scanned documents, medical a…

2026-05-31

RAG Framework Servers Population Survey — Cat-07 (2026-05-31)

First population survey of the RAG-framework-server category. 16 platforms in the 2026-05-27 pre-assessment intel (data/platform-intel/rag-frameworks-osint-2026-05-27.md); 15 dorks…

2026-05-31

Service Mesh Control Planes: when exposure is the authentication failure

Every survey so far measured platforms that have an authentication layer and ship it on or off. Service-mesh introspection planes are a harder test for the auth-on-default thesis:…

2026-05-31

Specialty Data Layers survey, 2026-05-30

Three of five sampled Spark History Servers exposed their job inventories with no authentication, and two of them are machine-learning pipelines. The job names are the finding. The…

2026-05-30

Auth / Identity / Gateway survey, 2026-05-29

Open Policy Agent ships with no authentication, and five of six sampled hosts returned their full Rego policy list with no credentials. The policy names are the finding. They map t…

2026-05-29

Experiment Tracking, registry and RCE half, 2026-05-29

MLflow ships with no authentication, and the population shows it: eight of eight sampled servers returned the full experiment list with no credentials. One held 379 experiments and…

2026-05-29

ML Governance / Data Catalog survey, 2026-05-29

Nine dorks. Six platforms. The category is well-secured at population scale, and that is the finding. The auth-on platforms run patched versions. The auth-off platforms are either…

2026-05-29

Model Serving, management-plane and registry, 2026-05-29

The model-serving category is Shodan-dark. vLLM, Triton, TGI, and TorchServe all serve JSON APIs, and their identifying strings live in JSON bodies, not in the HTML Shodan crawls.…

2026-05-29

RAG framework stragglers, 2026-05-29

AnythingLLM ships single-user mode with no password, and two of five sampled hosts had the web UI open to any browser visitor. The verification narrowed the finding: the open UI is…

2026-05-29

LLM Safety / Guardrail survey, 2026-05-29

Five dorks. One confirmed unauthenticated guardrail server, and the guardrail was the least exposed thing on the box. The same host left MongoDB, Redis, MySQL, PostgreSQL, and a Do…

2026-05-29

AI Evaluation and Red-Team Platform Survey — Promptfoo Population Pass

Promptfoo is the only AI eval/red-team platform in the 13-platform scope that produced confirmed unauthenticated exposure at scale. Four instances returned {"email":null} on GET /a…

2026-05-28

Auth and API Gateway Platforms: Population Survey

Shodan harvest of 13 auth and API gateway platforms returned confirmed populations across six categories. SuperTokens (port 3567) is the largest exposed surface at 455 confirmed in…

2026-05-28

Unauthenticated FinOps Cost APIs Hand Attackers a Free Cluster Recon Map

Sixty-seven Kubernetes cost-tooling endpoints (Kubecost 50, OpenCost 14, vendor-undetermined 3) answer their cost-model API with no authentication. Fifty-nine return full per-names…

2026-05-28

Model Serving and Registry Infrastructure Survey

Shodan sweep across 11 model-serving and registry platforms. MLflow is the only platform with a live, indexable population -- 10 confirmed unauthenticated instances spanning 6 clou…

2026-05-28

RAG Stragglers: LightRAG, RAGFlow, DocsGPT, Ragapp Population Survey

Four RAG platforms were left unfinished from prior survey runs: LightRAG, RAGFlow, DocsGPT, and Ragapp. This pass closes them out with a full Shodan harvest, verification, and arse…

2026-05-28

LLM Guard survey: guardrail platforms Shodan-dark except /metrics side-channel

Two LLM Guard v0.0.10 instances confirmed from an 11-platform Shodan sweep. Both have auth configured on scan endpoints (/analyze/prompt, /analyze/output, /scan/output). Both expos…

2026-05-28

Cat-30: Specialty Data Layers — Population Survey

<!-- ksat-tag:auto-generated:start --> ## DCWF KSAT coverage

2026-05-28

Voice/Audio AI Infrastructure Survey

<!-- ksat-tag:auto-generated:start --> ## DCWF KSAT coverage

2026-05-28

Argo Workflows: K8s-Native Workflow Orchestration Survey

Shodan survey of the global Argo Workflows population via TLS certificate fingerprint. 67 confirmed instances (initial survey, ssl:"ArgoProj" dork) plus 17 Argo-confirmed instances…

2026-05-27

ML Governance / Data Catalog Survey — OpenMetadata + DataHub

56 confirmed governance platforms, 56 auth-enforced. Zero auth-off. All OpenMetadata instances run v1.3.1+, past the CVE-2024-28255 patch boundary. Version disclosure MEDIUM on 31 OpenMetadata hosts.

2026-05-27

OpenHands Autonomous Agent: 52 Unauth Deployments, WhatsApp Bot Builder Pattern

191 OpenHands instances in Shodan. We scanned 56. 52 returned /api/v1/settings without authentication. On 26 of those 52 hosts, Evolution API (WhatsApp automation gateway) runs on…

2026-05-26

LangGraph's Deployment Gap: Exposed AI Agent Infrastructure at Scale

LangGraph's self-hosted deployment path ships with no authentication. We found sixteen internet-facing deployments. All sixteen were open. A financial AI system processing credit reports in Shanghai. A two-node PII scraper running in Paris with no auth by design.

2026-05-25

LangGraph Server Population Survey (2026-05-25)

Population-scale survey of LangGraph Server deployments. LangGraph is LangChain's stateful multi-agent execution runtime. The canonical server ships on FastAPI/uvicorn (port 8000)…

2026-05-25

Redis Stack / RedisInsight Population Survey (2026-05-25)

Population-scale survey of Redis Stack (Redis with RediSearch vector search module) and RedisInsight (browser-based Redis management GUI) deployments.

2026-05-25

Agenta LLMOps — Population Survey

<!-- ksat-tag:auto-generated:start --> ## DCWF KSAT coverage

2026-05-22

AI Cost / Billing / Usage Analytics population survey: Langfuse secret-key exposures + Dokploy frontend-secret leak class

The AI cost / billing / usage analytics tier sits at the intersection of LLM operations and finance: it tracks per-tenant token usage, attaches dollar amounts to model calls, and s…

2026-05-19

Service mesh + workflow-orchestration population surveys: Envoy admin config-dump + Prefect admin/settings + ML pipeline-engine exposures

Two surveys ran in parallel against unsurveyed FUTURE-SURVEYS roadmap categories:

2026-05-19

LLM Safety / Guardrail / Policy Engine population survey

The auth-on-default thesis predicts that products which ship without authentication will appear at population scale with the unauth posture intact. The LLM safety / guardrail / pol…

2026-05-19

Code assistants — category 09 population follow-up survey 2026-05-18

This is the second pass on the AI code-assistant tier. The first pass on 2026-05-14 ran the full chain on 233 hosts and found 54 unauth across 8 platforms. Four days later we re-ha…

2026-05-18

Jetson, TensorRT, and edge-AI: a population survey of NVR and inference exposure

The survey scoped as "Jetson / TensorRT edge" found that the dominant exposed population on the public internet is not the Jetson hardware itself. It is the edge-AI applications th…

2026-05-18

22 unauthenticated AI-stack Elasticsearch operators (2026-05-17)

The morning's mapping probe surfaced 22 Elasticsearch hosts with densevector or knnvector fields. Those are unambiguous AI / RAG workloads. We ran cert-pivot, Shodan, and aimap-pro…

2026-05-17

AI agent framework population survey, 2026-05-17

We surveyed the public-facing agent-framework population: AutoGen Studio, CrewAI, LangGraph Studio, Langflow, AgentOps. The corpus harvested from Shodan dorks totaled 351 unique IP…

2026-05-17

Cross-stack 24-hour follow-up on Elasticsearch and ClickHouse (2026-05-17)

Yesterday's surveys produced raw counts of 5,037 unauthenticated Elasticsearch hosts and 1,832 unauthenticated ClickHouse hosts. The verification ran through bespoke Python scripts…

2026-05-17

LLM gateway / proxy population survey, 2026-05-17

We surveyed the public-facing LLM gateway / API-proxy population: LiteLLM, Helicone, Portkey, OneAPI, NewAPI, OpenRouter self-host. A LLM gateway sits between an application and on…

2026-05-17

MCP server population survey, 2026-05-17

We surveyed the public Model Context Protocol (MCP) server population. MCP is Anthropic's wire format for letting LLMs call into external tools, prompts, and resources. It has beco…

2026-05-17

Meow / Indexrm Elasticsearch extortion. Three actors. (2026-05-17)

We sampled 150 of the 3,604 fully-wiped Elasticsearch hosts from this morning's re-probe. We read the readme index on each one. Three different actors are running the campaign in p…

2026-05-17

Meow / Indexrm campaign: per-actor census across 4,776 ES hosts

We re-ran the full 4,776-host Elasticsearch population through aimap v1.9.10. The new release reads one document from the attacker-planted marker index and parses it for actor iden…

2026-05-17

Training observability survey, 2026-05-17

We surveyed self-hosted training-observability platforms: Weights & Biases (self-hosted), ClearML, Aim, Ray Dashboard, MLflow. The aim was to map the population of public-facing ex…

2026-05-17

Vector database population survey, 2026-05-17

We surveyed the public vector-database population: Qdrant, Weaviate, Milvus, ChromaDB. Vector DBs hold the embeddings for an operator's RAG pipeline. Every document, customer trans…

2026-05-17

Agent-Framework Stragglers Population Survey (2026-05-16)

Population survey of the agent-framework stragglers. Platforms that emerged in 2024-2025 alongside the AutoGen / Open WebUI / Flowise generation. Closes the gap left by the AutoGen…

2026-05-16

Agent-Memory Population Survey: Falsification-Confirmation Result (2026-05-16)

Population-scale survey of agent-memory backends. The platform class that stores LLM conversation history, user profiles, and per-session context. A null-result-as-finding survey i…

2026-05-16

Argo CD Population Survey (2026-05-16)

Population-scale survey of Argo CD. The Kubernetes continuous-deployment pipeline. Argo CD operators configure git-source repositories, deploy targets (k8s clusters), and credentia…

2026-05-16

ClickHouse Population Survey (2026-05-16)

Largest single-platform population survey of the day. ClickHouse is the OLAP database that powers most modern observability stacks (SigNoz, Plausible, PostHog, Helicone, Phoenix-on…

2026-05-16

Consul (HashiCorp) Population Survey (2026-05-16)

Population-scale survey of HashiCorp Consul deployments. Service registry + KV store + service-mesh control plane. Consul's default ACL policy is allow, so out-of-the-box deploymen…

2026-05-16

Data-Labeling Population Survey (2026-05-16)

Survey of the data-labeling platform population. The systems that store training-data annotation tasks, often containing PII or sensitive labels. Smaller surface than other categor…

2026-05-16

Elasticsearch AI-Stack Population Survey (2026-05-16)

Population survey of Elasticsearch clusters with focus on AI-stack adjacency. RAG vector stores, langchain/llama-index indices, embedding caches, prompt history. Elasticsearch has…

2026-05-16

Experiment-Tracking Population Survey (2026-05-16)

Closes the experiment-tracking half of category 04 (the compute-orchestration half was surveyed 2026-05-06 with Spark / Airflow / Ray). MLflow was surveyed earlier in the series (I…

2026-05-16

GPU-Compute Population Survey (2026-05-16)

Survey of the GPU-compute orchestration tier: Run:ai (Nvidia's enterprise GPU scheduler), DCGM-exporter (Prometheus exporter for NVIDIA GPU metrics), NVIDIA Bright Cluster Manager,…

2026-05-16

Image-Generation Population Survey (2026-05-16)

First population-scale survey of the image-generation modality. ComfyUI, AUTOMATIC1111 / SD WebUI, InvokeAI, Fooocus, SwarmUI, SD.Next, Forge. The category had no aimap fingerprint…

2026-05-16

ROS Robotics Population Survey (2026-05-16)

Population survey of ROS (Robot Operating System) deployments. The canonical robotics middleware stack. ROS master :11311 speaks XMLRPC, rosbridge :9090 speaks WebSocket+HTTP. Both…

2026-05-16

Vector-DB Stragglers Population Survey (2026-05-16)

Closes the four platform-class stragglers left after the 2026-05 Qdrant / ChromaDB / Milvus / Weaviate sweep: Apache Solr, Meilisearch, Typesense, Vespa, plus pgvector body-marker…

2026-05-16

Unauth Docker Daemon Population Survey (2026-05-15)

Survey of the Shodan-indexed Docker daemon population on port 2375. The canonical unauth port for the Docker HTTP API. Port 2376 is the TLS-auth variant; port 2375 is unauth by fra…

2026-05-15

etcd Population Survey (2026-05-15)

Population-scale survey of etcd. The distributed key-value store that backs Kubernetes' entire cluster state. Each unauthenticated etcd is a secrets-store leak class: anyone can li…

2026-05-15

llama.cpp HTTP Server Population Survey (2026-05-15)

Direct follow-on survey to the day's Ollama work and the aimap v1.9.4 release. aimap v1.9.4 added a llama.cpp server fingerprint after the 194.233.71.223 single-host case revealed…

2026-05-15

Medical / Edge AI Survey: DICOM Protocol Exposure at Population Scale

Surveyed the 1,017-CIDR tier-2 cloud range list (DigitalOcean / Hetzner / Vultr / OVH / Linode ≈ 3.55M IPs) for medical-imaging AI infrastructure: Orthanc DICOM servers, MONAI Labe…

2026-05-15

Ollama Population Survey: Shodan-Walk (2026-05-15)

Re-survey of the Ollama exposure surface, walked on Shodan rather than via masscan-on-cloud-prefixes. The prior two surveys (5.38M IPs across six tier-1+2 clouds) found 1,192 confi…

2026-05-15

RAG Framework Servers: Population-Scale Survey (2026-05-15)

<!-- ksat-tag:auto-generated:start --> ## DCWF KSAT coverage

2026-05-15

Vault (HashiCorp) Population Survey (2026-05-15)

Population-scale survey of HashiCorp Vault deployments. Vault is the canonical secrets-management platform. The operator's database credentials, API keys, signing keys, and other a…

2026-05-15

Voice-Agent Population Survey: LiveKit-dominant (2026-05-15)

Survey of the voice-agent platform population: LiveKit (server + agents framework), Pipecat, Vocode, with Deepgram / Twilio as secondary integration signals.

2026-05-15

Voice-Cloning Population Survey: Shodan-Reachable Slice (2026-05-15)

Survey of the Shodan-reachable voice-cloning surface (RVC / GPT-SoVITS / Applio / OpenVoice / ChatTTS / F5-TTS) and adjacent voice-TTS platforms. The aimap fingerprints for these p…

2026-05-15

Whisper ASR Population Survey (2026-05-15)

Population-scale survey of Whisper ASR (speech-to-text) deployments. The canonical OpenAI Whisper plus the popular forks (whisper.cpp, faster-whisper, WhisperX). aimap fingerprints…

2026-05-15

AutoGen Studio, agent-platform tier cloud survey 2026-05-14

NuClide Research

2026-05-14

Browser-automation backend tier cloud survey 2026-05-14

NuClide Research

2026-05-14

Chrome DevTools Protocol, browser-automation backend cloud survey 2026-05-14

NuClide Research

2026-05-14

VisorBishop Phase 5b: Bucket-accessibility pass against 49 MLflow artifact stores

NuClide Research · 2026-05-13

2026-05-13

VisorBishop Phase 5b: bucket-accessibility pass against 49 MLflow artifact stores (public)

NuClide Research · 2026-05-13

2026-05-13

VisorBishop loop-iteration #1: Re-sweep all Phase 1 corpora, surface gaps

NuClide Research · 2026-05-11

2026-05-11

VisorBishop loop-iteration #2: Extended port set, exposure-inventory pivot

NuClide Research · 2026-05-11

2026-05-11

VisorBishop loop-iteration #3: AI-stack ML pipeline ports, Rogers NetOps disclosure

NuClide Research · 2026-05-11

2026-05-11

VisorBishop iter-4: Adjacent platforms (Opik, AgentOps, Phospho)

NuClide Research · 2026-05-11

2026-05-11

VisorBishop iter-5: LiteLLM Proxy + Argilla + Promptfoo (gateway + annotation + eval tiers)

NuClide Research · 2026-05-11

2026-05-11

VisorBishop iter-6: Full LiteLLM 5,391-host population sweep (283 unauth LLMjacking primitives)

NuClide Research · 2026-05-11

2026-05-11

VisorBishop iter-7: MLflow Tracking + Weights & Biases self-host (experiment-tracking tier)

NuClide Research · 2026-05-11

2026-05-11

VisorBishop iter-8: Six platforms swept, near-zero critical (LLM pipeline + ML orchestration + product analytics)

NuClide Research · 2026-05-11

2026-05-11

VisorBishop: Phase 3 meta-fingerprinter for the AI observability tier

NuClide Research · 2026-05-11

2026-05-11

VisorBishop Phase 5: Three primitives that turn 492 critical hosts into an impact narrative

NuClide Research · 2026-05-11

2026-05-11

Helicone deep-dive: Phase 2 (default ClickHouse exposure on benchmarkit.solutions)

NuClide Research · 2026-05-10

2026-05-10

Helicone LLM-observability population survey (21-host self-hosted population)

NuClide Research · 2026-05-10

2026-05-10

Langfuse deep-dive: Phase 2 (source audit + latent primitives + extended IP-shadow)

NuClide Research · 2026-05-10

2026-05-10

Langfuse LLM-observability population survey (1,333-host population, 0% unauth)

NuClide Research · 2026-05-10

2026-05-10

LangSmith deep-dive: Phase 2 (customer identity disclosure on 19 enterprise operators)

NuClide Research · 2026-05-10

2026-05-10

LangSmith LLM-observability population survey (27-host self-hosted population)

NuClide Research · 2026-05-10

2026-05-10

AI observability tier: Small platforms population sweep (Lunary, OpenLIT, Pezzo)

NuClide Research · 2026-05-10

2026-05-10

Arize AI Phoenix unauthenticated LLM-observability exposure (377-host population)

NuClide Research · 2026-05-10

2026-05-10

BI/Dashboard Platforms: Auth Posture Survey

Four BI and analytics dashboard platforms surveyed via Shodan + asyncio probe: Metabase (1,789 IPs), Grafana (2,000 IPs), Apache Superset (1,176 IPs), Redash (1,079 IPs). Total 6,0…

2026-05-09

Milvus/Attu on Public Cloud: Auth Posture and Multi-Tenant SaaS Exposure Survey

Shodan pull of http.title:"Attu" "Milvus" → 1,389 unique IPs → asyncio probe of Attu port 3000 + Milvus REST port 19530 → 763 confirmed reachable instances. Of these, 303 have the…

2026-05-09

Neo4j, Elasticsearch, Supabase, Redis Stack: AI Infrastructure Exposure Survey

Four additional infrastructure layers surveyed as part of the 2026-05-09 vector DB series. Combined Shodan pull → asyncio probe across 2,064 IPs (971 Neo4j + 636 Elasticsearch v8 +…

2026-05-09

New Vector Storage Survey: QuestDB / Meilisearch / PocketBase / NATS JetStream

Seven previously-unsurveyed AI-adjacent storage and messaging platforms probed via Shodan. 293 QuestDB consoles open with unauthenticated SQL execution, 488 Meilisearch instances h…

2026-05-09

SurrealDB, Typesense, and LanceDB: Exposure Survey

Three additional vector-capable databases surveyed as part of the 2026-05-09 vector DB series. Combined Shodan pull → asyncio probe across 995 IPs (431 SurrealDB + 354 Typesense +…

2026-05-09

Weaviate on Public Cloud: Auth Posture and Enterprise Tenant Exposure Survey

Shodan pull of http.html:"weaviate" port:8080 → 852 unique IPs → asyncio probe of /v1/meta, /v1/schema, /v1/nodes → 694 confirmed reachable Weaviate instances. Of these, 435 are fu…

2026-05-09

JupyterHub on .edu networks, Shodan-driven exposure survey with full chain triage (2026-05-07)

NuClide Research, 2026-05-07

2026-05-07

Compute Orchestration / Training tier, cloud survey 2026-05

NuClide Research

2026-05-06

Commercial AI Infrastructure Exposures

Commercial / SaaS Ollama and AI infrastructure exposures discovered during OSINT sweeps. These differ from university and research-network exposures in that the operators are comme…

2026-05-04

Backup & Snapshot Services on Public AI Infrastructure: Survey

Re-probe of the 663 unauthenticated tier-2 Qdrant instances catalogued in the parallel cross-survey, this time targeting Qdrant's snapshot endpoints (GET /snapshots and GET /collec…

2026-05-04

ComfyUI Image-Generation Workflow Tool: Auth Posture Survey

Mass-scan of port 8188 (ComfyUI default) across 76 tier-2 cloud /16 ranges (3.55M IPs) plus 25 Hetzner /16 ranges (where commodity GPU servers are common). Combined: 6 confirmed Co…

2026-05-04

LLM Observability + Training Telemetry: Auth Posture Survey

Mass-scan of port 6006 (Phoenix Arize default + TensorBoard default) across 76 tier-2 cloud /16 ranges (3.55M IPs). 4,314 port-open candidates → 9 confirmed AI/ML observability ins…

2026-05-04

Speech & Audio AI on Tier-2 Cloud: Auth Posture Survey

Mass-scan of port 9000 (whisper-asr-webservice default + faster-whisper-server common) across the same 76 tier-2 /16 ranges (3.55M IPs), Scaleway + OVH + Linode. 10,991 port-open c…

2026-05-04

ChromaDB on Public Cloud: Auth Posture Survey

Sweep of 1.83M IPs across 28 cloud-provider /16 ranges (DigitalOcean, Hetzner, Vultr) on port 8000 → 22,765 masscan hits → 48 confirmed ChromaDB instances via /api/v{1,2}/heartbeat…

2026-05-03

Elasticsearch / OpenSearch on Public Cloud: Auth Posture Survey

Sweep of 1.83M IPs across 28 cloud-provider /16 ranges (DigitalOcean, Hetzner, Vultr) on port 9200 → 313 masscan hits → 42 confirmed unauthenticated Elasticsearch/OpenSearch instan…

2026-05-03

Flowise on Public Cloud: Auth Posture Survey

Sweep of 1.83M IPs across 28 cloud-provider /16 ranges (DigitalOcean, Hetzner, Vultr) on port 3000 → 20,581 live hosts → 43 confirmed Flowise instances via the /api/v1/ping → pong…

2026-05-03

Gradio / Stable Diffusion / Langflow on port 7860: Auth Posture Survey

Mass-scan of port 7860 (Gradio's default) across 28 cloud-provider /16 ranges (DO/Hetzner/Vultr) returned 481 hits → fingerprinted via title + product-specific endpoints → 16 confi…

2026-05-03

Jupyter Notebook / JupyterHub on Public Cloud & University Networks: Auth Posture Survey

Two-phase sweep targeting port 8888 across cloud-hosting providers and university research networks. Zero unauthenticated Jupyter instances found in either population. JupyterHub's…

2026-05-03

Milvus on Public Cloud: Auth Posture Survey

Sweep of 1.83M IPs across 28 cloud-provider /16 ranges (DigitalOcean, Hetzner, Vultr) on port 19530 → 275 masscan hits → 33 confirmed Milvus instances via the /v2/vectordb/collecti…

2026-05-03

MinIO + Dify on Public Cloud: Auth Posture Survey

Two parallel sweeps:

2026-05-03

MLflow Tracking Server on Public Cloud: Auth Posture Survey

Mass-scan of port 5000 across 28 cloud-provider /16 ranges (DO/Hetzner/Vultr) returned 12,106 hits → fingerprinted via /version + /api/2.0/mlflow/experiments/search body match → 11…

2026-05-03

n8n on Public Cloud: Auth Posture Survey

Sweep of 1.83M IPs across 28 cloud-provider /16 ranges (DigitalOcean, Hetzner, Vultr) on port 5678 → 5,885 live hosts → 1,006 confirmed n8n instances via /rest/settings → "timezone…

2026-05-03

Ollama on Public Cloud: Auth Posture Survey

Mass-scan of port 11434 (Ollama's default) across 28 cloud-provider /16 ranges (DO/Hetzner/Vultr) → 882 hits → 342 confirmed Ollama instances, all unauthenticated (Ollama has no au…

2026-05-03

Open WebUI on Public Cloud: Auth Posture Survey

Reused the 20,581 port-3000 hits from the prior Flowise sweep and re-fingerprinted them for Open WebUI (the popular Ollama / OpenAI-compatible chat frontend) via GET /api/version b…

2026-05-03

Qdrant on Public Cloud: Auth Posture Survey

Sweep of 1.83M IPs across 28 cloud-provider /16 ranges (DigitalOcean, Hetzner, Vultr) on port 6333 → 9,462 live hosts (partial scan, killed at 40% coverage) → 151 masscan hits → 61…

2026-05-03

Streamlit Data Apps on Public Cloud: Auth Posture Survey

Mass-scan of port 8501 (Streamlit's default) across 28 cloud-provider /16 ranges (DO/Hetzner/Vultr) returned 1,389 hits → fingerprinted via /stcore/host-config → 551 confirmed Stre…

2026-05-03

NVIDIA Triton Inference Server on Public Cloud: Auth Posture Survey

Reused the 22,765 port-8000 hits from the prior ChromaDB sweep and fingerprinted them for NVIDIA Triton Inference Server (GET /v2 body match "name":"triton"). 2 confirmed Triton in…

2026-05-03

vLLM / OpenAI-Compatible LLM Inference Servers on Public Cloud: Auth Posture Survey

Reused the 22,765 port-8000 hits from the prior ChromaDB sweep and fingerprinted them for OpenAI-compatible LLM inference servers via GET /v1/models body match ({"object":"list","d…

2026-05-03

AI Safety Evaluation / Red-Team Self-Hosted: Cross-Cloud Survey (2026-05)

The original probe, data/aisafety-probe.py, used naked single-word substring matching on response bodies (b"garak" in body.lower(), b"deepeval" in text or b"confident" in text). At…

2026-05-01

Browser Automation / Agent Backends: Cross-Cloud Survey (2026-05)

Browser-automation backends (Browserless, Playwright server, Puppeteer remote, Selenium Grid, Skyvern) underpin AI agent stacks: the agent navigates websites, scrapes content, fill…

2026-05-01

Data Labeling / Annotation Servers: Cross-Cloud Survey (2026-05)

Data-labeling and annotation servers (Argilla, LabelStudio, Prodigy, doccano, CVAT) sit at the input boundary of every supervised-learning ML pipeline. They host the raw data being…

2026-05-01

Embedding Services: Cross-Cloud Survey (2026-05)

Embedding servers are the vector-conversion layer between raw text and vector databases. They ingest documents or queries and return dense float vectors; without them, RAG pipeline…

2026-05-01

LLM Gateways / OpenAI-Compatible Proxies: Cross-Cloud Survey (2026-05)

LLM gateway / OpenAI-compat proxy products sit between LLM applications and upstream providers. They normalize multiple provider APIs (Anthropic, OpenAI, Cohere, Together, etc.) be…

2026-05-01

Model Context Protocol (MCP) Servers: Cross-Cloud Survey (2026-05)

Model Context Protocol (MCP) was published by Anthropic in late 2024 as a standard for connecting LLMs to tools, filesystems, and databases. The protocol was designed for stdio (in…

2026-05-01

RAG Framework Servers: Cross-Cloud Survey (2026-05)

RAG (Retrieval-Augmented Generation) framework servers sit between vector databases and LLM clients. They orchestrate the document-ingestion → chunking → embedding → retrieval → co…

2026-05-01

Case Study: Ollama Unauthenticated Exposure: Enterprise Targets

During authorized AI infrastructure reconnaissance on 2026-05-01, Shodan enumeration of exposed Ollama instances (port 11434) identified a cluster of enterprise and critical-infras…

2026-05-01