search
Shodan
Trends
- 1147 exposed MCP servers found online without authenticationโA post about publicly exposed MCP servers (147 without authentication). https:// pluto.security/blog/wide-open- hundreds
Security researchers report hundreds of MCP (Model Context Protocol) servers are publicly reachable on the internet, with 147 requiring no authentication. The exposed instances allegedly offer access to root shells, production data, and citizen records, discoverable via search engines like Shodan. The findings highlight how rapidly deployed AI infrastructure is being left wide open, renewing warnings about securing AI tooling before sensitive data leaks.
- 2New Phoenix network entry flagged by security researchersโASN: 53755 Location: Phoenix, US Added: 2026-09-29T13:43 # shodansafari # infosec
Security researchers are discussing newly registered network infrastructure: autonomous system number 53755, located in Phoenix, United States, and added to registries on 29 September 2026. Such ASN tracking is commonly used in the infosec community to spot newly provisioned networks, monitor hosting providers, and identify potentially suspicious infrastructure before it is used for malicious purposes.
- 3ASN 979 registered in Liberty Lake draws security researchers' attentionโASN: 979 Location: Liberty Lake, US Added: 2026-09-29T14:10 # shodansafari # infosec
Security researchers are flagging autonomous system number 979, which is registered to Liberty Lake, Washington, in the United States. The listing, dated 29 September 2026, is circulating in information security circles as part of routine network reconnaissance discussion, with specialists examining the ownership and activity of networks tied to that ASN.
- 4New Ashburn network record raises questions among security researchersโASN: 19437 Location: Ashburn, US Added: 2026-09-29T14:00 # shodansafari # infosec
Security specialists are circulating a newly registered network record: autonomous system 19437, based in Ashburn, Virginia, catalogued in internet scanning databases on 29 September 2026. Ashburn is a major global data centre hub, so new infrastructure appearing there often draws attention from researchers tracking hosting providers, botnet command servers or other potentially suspicious activity online.
- 5Shodan flags newly exposed device in Rozzano, ItalyโASN: 20746 Location: Rozzano, IT Added: 2026-09-29T13:52 # shodansafari # infosec
A newly indexed internet-connected device on autonomous system 20746, located in Rozzano, Italy, was logged on Shodan on 29 September 2026. Security researchers use these 'Shodan safari' listings to track exposed systems and highlight networks with devices visible on the open internet, raising questions about the operator's exposure management.
- 6Shodan flags new Xiamen listing on China Unicom's ASN 4837โASN: 4837 Location: Xiamen, CN Added: 2026-09-29T13:56 # shodansafari # infosec
A newly indexed entry on the Shodan search service lists a host located in Xiamen, China, on autonomous system number 4837, which belongs to China Unicom's backbone network. The record was added on 29 September 2026 and circulated among infosec practitioners who use Shodan to track exposed devices and shifts in the Chinese internet's address space.
- 7Cybersecurity researchers flag Chicago network on ASN 7018โASN: 7018 Location: Chicago, US Added: 2026-09-29T14:09 # shodansafari # infosec
Cybersecurity practitioners are highlighting devices exposed on ASN 7018, AT&T's autonomous system number, located in Chicago, US. The item was catalogued on 29 September 2026 as part of a Shodan-based hunt for publicly accessible internet-facing systems. Security communities use these listings to spot misconfigured or vulnerable infrastructure and raise awareness about exposed services.
- 8Dresden network flagged in infosec Shodan safariโASN: 6724 Location: Dresden, DE Added: 2026-09-29T13:58 # shodansafari # infosec
Cybersecurity watchers are pointing to autonomous system number 6724, registered in Dresden, Germany, as part of a running infosec exercise cataloguing networks exposed on the internet. The entry was logged on 29 September 2026 and tagged under the Shodan safari hashtag used by researchers who browse Shodan's index of connected devices and servers for open or misconfigured systems.
- 9Shodan spotlights Hong Kong network ASN 64022โASN: 64022 Location: Hong Kong, HK Added: 2026-09-29T13:56 # shodansafari # infosec
Cybersecurity observers are flagging details of autonomous system number 64022, a network registered in Hong Kong, listed with a recorded timestamp of 29 September 2026. The entry is being shared among information security practitioners as part of ongoing network reconnaissance discussion, though no further technical details or incidents have been publicly attached to it.
- 10New autonomous system registered in Pretoria, South AfricaโASN: 327901 Location: Pretoria, ZA Added: 2026-09-29T14:04 # shodansafari # infosec
A new autonomous system number, AS327901, has been registered with a location of Pretoria, South Africa, with the record dated 29 September 2026. The registration was flagged in cybersecurity circles, where observers track newly announced networks to monitor changes in the global internet's routing landscape and watch for suspicious or noteworthy newcomers.
- 11Chenzhou ASN 63838 flagged in infosec circlesโASN: 63838 Location: Chenzhou, CN Added: 2026-09-29T13:40 # shodansafari # infosec
Cybersecurity practitioners are noting AS63838, an autonomous system registered in Chenzhou, China, with an addition timestamp of 29 September 2026. The item, shared under infosec tags, appears as part of ongoing network-mapping activity that tracks newly announced or notable autonomous systems and their locations.
- 12Arezzo network flagged in cybersecurity discussionโASN: 49709 Location: Arezzo, IT Added: 2026-09-29T13:52 # shodansafari # infosec
A newly registered network in Arezzo, Italy, operating under autonomous system number 49709, is being flagged in cybersecurity circles. Security researchers monitor newly announced ASNs closely, since fresh allocations can host previously unseen services and are often scanned for exposed systems, misconfigurations, and potential malicious activity shortly after going online.
- 13ASN 141679 in Tianjin newly logged in network scansโASN: 141679 Location: Tianjin, CN Added: 2026-09-29T14:13 # shodansafari # infosec
Autonomous system number 141679, registered in Tianjin, China, was added to network scanning records on 29 September 2026. The listing is being shared among information security practitioners who track newly observed networks and infrastructure. Beyond the registration details, no information is given about who operates the network or what it hosts.
- 14Kyoto network ASN 17511 newly catalogued in internet scansโASN: 17511 Location: Kyoto, JP Added: 2026-09-29T14:11 # shodansafari # infosec
Autonomous system number 17511, located in Kyoto, Japan, was newly added to internet-wide scanning databases on 29 September 2026. Information security practitioners flagged the addition as part of ongoing efforts to map exposed devices and services, a routine but closely watched step for spotting newly reachable networks and potential attack surface in Japanese address space.
- 15Newly exposed host spotted in Fremont data centreโASN: 63949 Location: Fremont, US Added: 2026-09-29T13:59 # shodansafari # infosec
Security researchers are flagging an internet-facing host registered to ASN 63949, a network range operated by Linode in Fremont, California, that was indexed on 29 September 2026. The finding circulated in information security circles under the shodansafari hashtag, where practitioners share and discuss newly exposed servers, open ports and misconfigured devices discovered through internet-wide scanning.
- 16Microsoft-linked network spotted announcing IP space from OsloโASN: AS8075 Location: Oslo, NO Added: 2026-09-25T18:01 # shodansafari # infosec
Autonomous System 8075, the network operated by Microsoft, was observed announcing IP address space located in Oslo, Norway. The observation was logged and shared on 25 September 2026 with the cybersecurity community under the tag #shodansafari. This type of sighting is used by security researchers to track how large cloud and technology providers extend their network presence into new regions and data centre locations.