Top 50 Vulnerabilidades
Una CVE es una falla de seguridad conocida. Esta vista muestra cuáles aparecen con más frecuencia en la superficie paraguaya observada por Shodan.
Proveedores de Internet
Muestra qué redes alojan más dispositivos con vulnerabilidades conocidas visibles desde internet.
| Proveedor | Dispositivos Conectados |
|---|---|
| Nucleo S.A. | 2,247 |
| Telecel S.A. | 2,047 |
| Núcleo S.A. | 1,257 |
| MONGELOS ARCE MARCIAL(DELTA NETWORKS) | 1,056 |
| TV 2 S.A. | 885 |
| SOL TELECOMUNICACIONES S.A. | 681 |
| Telecom Argentina S.A. | 550 |
| TECNOLOGIA EN ELECTRONICA E INFORMATICA SOCIEDAD ANONIMA (T.E.I.S.A) | 419 |
| INTERNET & MEDIA S.A. | 409 |
| TEMPUS GROUP S.A. | 295 |
| GIG@NET SOCIEDAD ANONIMA | 288 |
| COMPANIA PARAGUAYA DE COMUNICACIONES S.A. (COPACO S.A.) | 265 |
| Techtel LMDS Comunicaciones Interactivas S.A. | 238 |
| Centro Nacional de Computacion | 169 |
| FRANCISCO DARIO DAVID GARCIA AYALA (NETCON) | 166 |
| STARTELECOM S.A. | 156 |
| COMPAÑIA PARAGUAYA DE COMUNICACIONES S.A. (COPACO S.A.) | 118 |
| E-life Paraguay S.A. | 109 |
| RED PARAGUAYA DE TELECOMUNICACIONES SA | 104 |
| DOUGLAS BIONDO BOSCHETTI(TECNOPAGE) | 74 |
| Netvision S.A. | 49 |
| Masternet Telecomunicaciones | 48 |
| FULL TELECOMUNICACIONES S.A | 47 |
| UFINET PANAMA S.A. | 43 |
| ITATEC SOCIEDAD ANONIMA | 40 |
| SANCHEZ ANIBAL RAMON (ARSOFT INTERNET) | 38 |
| PANDA CONECT S.A. | 37 |
| PRIETO TELLES ALEXANDRE(F1NET TELECOM PY) | 34 |
| FLYTEC TELECOM SOCIEDAD ANONIMA | 31 |
| HINET E.A.S. UNIPERSONAL | 31 |
| CHACO COMUNICACIONES S.A. | 30 |
| PLANET S.A. | 29 |
| WIND NET S.A. | 29 |
| DAHMER MARIANO ROBERTO ADRIANO | 28 |
| Saldivar Sosa Rodrigo Agustin (RAYNET) | 27 |
| VIVE TELECOM S.A. | 25 |
| Cable Television Satelital SRL | 24 |
| MACHADO BAEZ, NERY JAVIER (LOCAL NET PARAGUAY) | 23 |
| MSW S.A. | 21 |
| MULTI LINK S.A. | 18 |
| Direccion Nacional de Contrataciones Publicas | 16 |
| HERNAN GALEANO KIM (HERKIM - SOLUCIONES TECNOLOGICAS) | 15 |
| Douglas Back Pavan (SI NET) | 14 |
| Leonir Remussi (KDMNET) | 13 |
| PERES RAMOS WILLIAN (GIGABIT INTERNET) | 13 |
| Secretaria Nacional de Tecnologias de la Información y Comunicaciones | 13 |
| CAMPOS FARIAS GUILHERME | 12 |
| COOPERATIVA COLONIZADORA MULTIACTIVA FERNHEIM LTDA | 12 |
| ACAS TECNOLOGIAS S.A. | 11 |
| GRUPO SPEED NET SOCIEDAD ANONIMA | 11 |
Ciudades
Ayuda a identificar dónde se agrupa la exposición sin convertir el informe en una lista de objetivos.
| Ciudad | Dispositivos Conectados |
|---|---|
| Asunción | 6,516 |
| Pedro Juan Caballero | 1,114 |
| Villarrica | 904 |
| Los Cedrales | 888 |
| Ciudad del Este | 872 |
| San Lorenzo | 325 |
| Katueté | 304 |
| Santa Rita | 285 |
| Concepción | 212 |
| Fernando de la Mora | 134 |
| Capiatá | 90 |
| Mariano Roque Alonso | 89 |
| Presidente Franco | 77 |
| Salto del Guairá | 61 |
| Colonia General Alfredo Stroessner | 55 |
| Caaguazú | 42 |
| Limpio | 42 |
| Caacupé | 37 |
| Ayolas | 34 |
| Colonia Menno | 31 |
| Nueva Esperanza | 29 |
| Lima | 26 |
| San Alberto | 26 |
| Obligado | 24 |
| Lambaré | 22 |
| San Antonio | 22 |
| Itauguá | 16 |
| Coronel Oviedo | 14 |
| Carapeguá | 13 |
| Filadelfia | 12 |
| La Paloma del Espíritu Santo | 11 |
| Encarnación | 8 |
| Veinticinco de Diciembre | 8 |
| Guarambaré | 7 |
| Puerto Mayor Otaño | 7 |
| Nemby | 5 |
| Tomás Romero Pereira | 5 |
| Caraguatay | 4 |
| Hohenau | 4 |
| Horqueta | 4 |
| Nueva Londres | 4 |
| Repatriación | 4 |
| San Juan Nepomuceno | 4 |
| Arroyos y Esteros | 3 |
| Capiibary | 3 |
| Colonia Mauricio José Troche | 3 |
| General Elizardo Aquino | 3 |
| Itacurubí de la Cordillera | 3 |
| San Cosme y Damián | 3 |
| San Isidro de Curuguaty | 3 |
Productos
Dispositivos y programas específicos detectados en sistemas vulnerables: routers, servidores, cámaras, paneles y servicios.
| Producto | Instancias |
|---|---|
| MySQL | 3,450 |
| nginx | 2,190 |
| Apache httpd | 2,164 |
| OpenSSH | 863 |
| MikroTik Winbox | 439 |
| lighttpd | 398 |
| ntpd | 181 |
| Microsoft IIS httpd | 162 |
| Ubiquiti AirRouter | 161 |
| uc-httpd | 86 |
| Jetty | 32 |
| Exim smtpd | 28 |
| Apache Tomcat | 25 |
| Portainer | 25 |
| Squid http proxy | 23 |
| OpenResty | 18 |
| PostgreSQL | 10 |
| Grafana (Open Source) | 9 |
| Nextcloud | 9 |
| Control Web Panel (CWP) | 8 |
| MongoDB | 8 |
| Remote Desktop Protocol | 8 |
| WildFly | 6 |
| RabbitMQ | 5 |
| Jenkins | 4 |
| ProFTPD | 4 |
| VMware ESXi | 4 |
| Wowza Streaming Engine | 4 |
| ownCloud | 4 |
| Grafana (Enterprise) | 3 |
| Metabase | 3 |
| Outlook Web App | 3 |
| Plex Media Server | 3 |
| ciscoSystems | 3 |
| mini_httpd | 3 |
| n8n | 3 |
| CUPS (IPP) | 2 |
| Cacti | 2 |
| Palo Alto Networks PA-3400 | 2 |
| WEBrick httpd | 2 |
| Control Web Panel | 1 |
| D-Link DCS-5010L webcam http interface | 1 |
| D-Link DCS-933L webcam http interface | 1 |
| Elastic | 1 |
| Harbor | 1 |
| Home Assistant | 1 |
| Microsoft RPC | 1 |
| MinIO Server | 1 |
| Mosquitto | 1 |
| Ollama | 1 |
Sistemas Operativos
Versiones antiguas o sin soporte suelen indicar dispositivos que necesitan mantenimiento, reemplazo o aislamiento.
| Sistema Operativo | Instancias |
|---|---|
| Ubuntu | 1,581 |
| Windows | 163 |
| Ubiquiti AirOS | 161 |
| MikroTik RouterOS 6.47 | 78 |
| MikroTik RouterOS 6.49.19 | 73 |
| MikroTik RouterOS 6.49.13 | 45 |
| MikroTik RouterOS 6.49.20 | 30 |
| MikroTik RouterOS 6.49.18 | 29 |
| MikroTik RouterOS 6.49.21 | 25 |
| MikroTik RouterOS 6.49.22 | 24 |
| MikroTik RouterOS 6.48.7 | 23 |
| MikroTik RouterOS 6.47.9 | 17 |
| MikroTik RouterOS 6.47.10 | 15 |
| MikroTik RouterOS 6.49.7 | 14 |
| FreeBSD | 13 |
| Linux | 9 |
| MikroTik RouterOS 6.47.1 | 6 |
| Windows 10 Pro 19045 | 6 |
| MikroTik RouterOS 6.43.2 | 4 |
| MikroTik RouterOS 6.46.1 | 4 |
| Unix | 4 |
| MikroTik RouterOS 6.42.6 | 3 |
| MikroTik RouterOS 6.42.7 | 3 |
| MikroTik RouterOS 6.44.5 | 3 |
| MikroTik RouterOS 6.46.5 | 3 |
| MikroTik RouterOS 6.46.6 | 3 |
| Windows 7 Professional 7600 | 3 |
| IOS 16.9.4 | 2 |
| MikroTik RouterOS 6.18 | 2 |
| MikroTik RouterOS 6.40.8 | 2 |
| MikroTik RouterOS 6.43.11 | 2 |
| MikroTik RouterOS 6.43.4 | 2 |
| MikroTik RouterOS 6.44.3 | 2 |
| MikroTik RouterOS 6.44.6 | 2 |
| MikroTik RouterOS 6.45.1 | 2 |
| MikroTik RouterOS 6.45.7 | 2 |
| MikroTik RouterOS 6.46.3 | 2 |
| MikroTik RouterOS 6.46.4 | 2 |
| MikroTik RouterOS 6.47.3 | 2 |
| PAN-OS | 2 |
| Synology DiskStation Manager (DSM) 6.2.1-23824 | 2 |
| Synology DiskStation Manager (DSM) 6.2.2-24922 | 2 |
| Windows (build 6.3.9600) | 2 |
| Windows 10 Enterprise 19045 | 2 |
| Windows 10 Pro 26200 | 2 |
| Windows Server 2008 R2 Enterprise | 2 |
| IOS 16.9.5 | 1 |
| MikroTik RouterOS 5.26 | 1 |
| MikroTik RouterOS 6.15 | 1 |
| MikroTik RouterOS 6.17 | 1 |
Puertos expuestos
Los puertos revelan qué servicios están publicados. Cada puerto abierto debería tener una razón, controles y monitoreo.
| Puerto | Detecciones |
|---|---|
| 80 | 1,696 |
| 443 | 1,425 |
| 8291 | 440 |
| 22 | 428 |
| 445 | 304 |
| 8080 | 243 |
| 81 | 228 |
| 3306 | 218 |
| 123 | 182 |
| 8090 | 88 |
| 2222 | 77 |
| 8081 | 69 |
| 8443 | 58 |
| 88 | 42 |
| 9000 | 42 |
| 10001 | 38 |
| 8000 | 35 |
| 9443 | 34 |
| 8888 | 30 |
| 84 | 29 |
| 8089 | 29 |
| 9090 | 29 |
| 82 | 26 |
| 444 | 26 |
| 8082 | 26 |
| 8585 | 25 |
| 3000 | 23 |
| 45000 | 23 |
| 8009 | 19 |
| 8085 | 18 |
| 83 | 17 |
| 3128 | 17 |
| 4443 | 17 |
| 8086 | 16 |
| 587 | 15 |
| 3333 | 15 |
| 5000 | 15 |
| 8181 | 15 |
| 465 | 14 |
| 5432 | 14 |
| 8001 | 14 |
| 8083 | 13 |
| 7443 | 12 |
| 8069 | 12 |
| 4444 | 10 |
| 9092 | 10 |
| 9998 | 10 |
| 10000 | 10 |
| 8008 | 9 |
| 27017 | 9 |
Sistemas Autónomos (ASN)
Los ASN agrupan redes bajo una administración. Son útiles para coordinar remediación y priorizar conversaciones.
| ASN (Nombre) | Dispositivos |
|---|---|
| as27895 | 3,309 |
| as23201 | 1,957 |
| as266831 | 1,011 |
| as272062 | 841 |
| as263717 | 623 |
| as7303 | 550 |
| as28103 | 411 |
| as266858 | 409 |
| as52455 | 284 |
| as61512 | 277 |
| as27768 | 272 |
| as11664 | 230 |
| 27895 | 194 |
| as269914 | 160 |
| as27733 | 151 |
| as270052 | 146 |
| as27669 | 104 |
| as264631 | 102 |
| 23201 | 89 |
| as27866 | 79 |
| as266876 | 73 |
| 263717 | 58 |
| as266694 | 47 |
| as266814 | 47 |
| as27795 | 46 |
| 266831 | 45 |
| 272062 | 44 |
| as52468 | 40 |
| as273023 | 38 |
| as267702 | 37 |
| as263732 | 35 |
| as266673 | 31 |
| as267795 | 31 |
| as269878 | 31 |
| as264733 | 30 |
| as263228 | 29 |
| as269783 | 29 |
| 27768 | 26 |
| as267920 | 26 |
| as273063 | 26 |
| as264756 | 24 |
| as270096 | 23 |
| as265759 | 22 |
| as264705 | 19 |
| as267885 | 19 |
| 27733 | 18 |
| as262183 | 18 |
| as269725 | 18 |
| as262250 | 16 |
| as272026 | 15 |
Componentes HTTP
Tecnologías web visibles en dispositivos vulnerables: servidores, librerías, frameworks y extensiones.
| Componente HTTP | Instancias |
|---|---|
| Apache HTTP Server | 1,964 |
| PHP | 1,137 |
| Nginx | 904 |
| Ubuntu | 882 |
| jQuery | 851 |
| Windows Server | 843 |
| OpenSSL | 830 |
| lighttpd | 518 |
| Bootstrap | 407 |
| CentOS | 350 |
| jQuery CDN | 164 |
| Modernizr | 161 |
| ZURB Foundation | 156 |
| Debian | 155 |
| HSTS | 130 |
| IIS | 109 |
| jQuery UI | 93 |
| Microsoft ASP.NET | 86 |
| Python | 68 |
| jQuery Migrate | 63 |
| Java | 50 |
| Perl | 39 |
| AngularJS | 37 |
| Jetty | 34 |
| Flask | 32 |
| UNIX | 32 |
| mod_perl | 29 |
| Fedora | 23 |
| Node.js | 22 |
| MySQL | 20 |
| React | 20 |
| Apache Traffic Server | 19 |
| Express | 18 |
| mod_ssl | 18 |
| mod_dav | 17 |
| OpenResty | 16 |
| mod_python | 16 |
| Popper | 15 |
| AlmaLinux | 14 |
| Underscore.js | 13 |
| Next.js | 12 |
| Webpack | 12 |
| XAMPP | 11 |
| Basic | 10 |
| Cloudflare | 10 |
| DataTables | 10 |
| cdnjs | 10 |
| Moment.js | 9 |
| Ruby | 9 |
| mod_wsgi | 9 |
Categorías HTTP
Agrupa componentes por tipo para mostrar patrones: servidores web, sistemas operativos, lenguajes, frameworks y seguridad.
| Categoría Componente HTTP | Instancias |
|---|---|
| Web servers | 3,593 |
| Operating systems | 2,312 |
| Programming languages | 1,266 |
| Reverse proxies | 904 |
| JavaScript libraries | 860 |
| Web server extensions | 836 |
| UI frameworks | 566 |
| CDN | 179 |
| Web frameworks | 169 |
| Security | 150 |
| JavaScript frameworks | 90 |
| Miscellaneous | 44 |
| Databases | 22 |
| Static site generator | 13 |
| CMS | 11 |
| JavaScript graphics | 9 |
| Blogs | 8 |
| Analytics | 7 |
| Font scripts | 7 |
| Caching | 5 |
| Development | 5 |
| Maps | 5 |
| Tag managers | 5 |
| CI | 4 |
| Network storage | 4 |
| Webmail | 4 |
| WordPress plugins | 3 |
| Authentication | 2 |
| Editors | 2 |
| Message boards | 2 |
| Video players | 2 |
| LMS | 1 |
| Live chat | 1 |
| Mobile frameworks | 1 |
| PaaS | 1 |
| Page builders | 1 |
| Rich text editors | 1 |
| Widgets | 1 |
Versiones SSL/TLS
Protocolos antiguos como SSLv2, SSLv3, TLS 1.0 y TLS 1.1 son señales de configuraciones que necesitan revisión.
| Versión SSL/TLS | Detecciones |
|---|---|
| tlsv1.2 | 1,362 |
| tlsv1.3 | 824 |
| tlsv1 | 568 |
| tlsv1.1 | 557 |
| sslv3 | 110 |
| sslv2 | 10 |
Dispositivos con capturas
Cuando Shodan tiene capturas, puede haber interfaces administrativas o paneles visibles que revelan información sensible.
| Tiene Captura | Cantidad |
|---|---|
| 1 | 6 |