Top 50 Vulnerabilidades
Una CVE es una falla de seguridad conocida. Esta vista muestra cuáles aparecen con más frecuencia en la superficie paraguaya observada por Shodan.
Proveedores de Internet
Muestra qué redes alojan más dispositivos con vulnerabilidades conocidas visibles desde internet.
| Proveedor | Dispositivos Conectados |
|---|---|
| Núcleo S.A. | 2,614 |
| Telecel S.A. | 1,930 |
| Telecom Argentina S.A. | 1,005 |
| MONGELOS ARCE MARCIAL(DELTA NETWORKS) | 900 |
| TECNOLOGIA EN ELECTRONICA E INFORMATICA SOCIEDAD ANONIMA (T.E.I.S.A) | 747 |
| TV 2 S.A. | 744 |
| INTERNET & MEDIA S.A. | 738 |
| COMPAÑIA PARAGUAYA DE COMUNICACIONES S.A. (COPACO S.A.) | 372 |
| GIG@NET SOCIEDAD ANONIMA | 278 |
| TEMPUS GROUP S.A. | 272 |
| SOL TELECOMUNICACIONES S.A. | 246 |
| Techtel LMDS Comunicaciones Interactivas S.A. | 233 |
| Centro Nacional de Computacion | 166 |
| FRANCISCO DARIO DAVID GARCIA AYALA (NETCON) | 155 |
| STARTELECOM S.A. | 135 |
| E-life Paraguay S.A. | 111 |
| RED PARAGUAYA DE TELECOMUNICACIONES SA | 89 |
| Netvision S.A. | 60 |
| DOUGLAS BIONDO BOSCHETTI(TECNOPAGE) | 57 |
| Secretaria Nacional de Tecnologias de la Información y Comunicaciones | 57 |
| FULL TELECOMUNICACIONES S.A | 44 |
| Masternet Telecomunicaciones | 43 |
| SANCHEZ ANIBAL RAMON (ARSOFT INTERNET) | 35 |
| PANDA CONECT S.A. | 34 |
| PRIETO TELLES ALEXANDRE(F1NET TELECOM PY) | 33 |
| UFINET PANAMA S.A. | 31 |
| CHACO COMUNICACIONES S.A. | 30 |
| PLANET S.A. | 30 |
| HINET E.A.S. UNIPERSONAL | 29 |
| ITATEC SOCIEDAD ANONIMA | 28 |
| WIND NET S.A. | 28 |
| DAHMER MARIANO ROBERTO ADRIANO | 25 |
| Leonir Remussi (KDMNET) | 24 |
| Saldivar Sosa Rodrigo Agustin (RAYNET) | 24 |
| Douglas Back Pavan (SI NET) | 21 |
| VIVE TELECOM S.A. | 21 |
| MACHADO BAEZ, NERY JAVIER (LOCAL NET PARAGUAY) | 20 |
| FLYTEC TELECOM SOCIEDAD ANONIMA | 19 |
| MULTI LINK S.A. | 19 |
| Cable Television Satelital SRL | 18 |
| MSW S.A. | 17 |
| Direccion Nacional de Contrataciones Publicas | 16 |
| COOPERATIVA COLONIZADORA MULTIACTIVA FERNHEIM LTDA | 14 |
| ACAS TECNOLOGÍAS S.A. | 13 |
| FLYNET SRL | 12 |
| PERES RAMOS WILLIAN (GIGABIT INTERNET) | 11 |
| CAMPOS FARIAS GUILHERME | 10 |
| TV MAX CABLE S.A. | 10 |
| HERNAN GALEANO KIM (HERKIM - SOLUCIONES TECNOLOGICAS) | 9 |
| Liz Carolina Zavala Martinez (Link Telecomunicaciones) | 9 |
Ciudades
Ayuda a identificar dónde se agrupa la exposición sin convertir el informe en una lista de objetivos.
| Ciudad | Dispositivos Conectados |
|---|---|
| Asunción | 6,342 |
| Pedro Juan Caballero | 966 |
| Ciudad del Este | 786 |
| Villarrica | 763 |
| Los Cedrales | 745 |
| San Lorenzo | 328 |
| Santa Rita | 303 |
| Katueté | 281 |
| Concepción | 204 |
| Fernando de la Mora | 134 |
| Capiatá | 92 |
| Mariano Roque Alonso | 78 |
| Presidente Franco | 67 |
| Salto del Guairá | 55 |
| Colonia General Alfredo Stroessner | 52 |
| Limpio | 42 |
| Caaguazú | 39 |
| Nueva Esperanza | 35 |
| San Alberto | 35 |
| Colonia Menno | 33 |
| Ayolas | 29 |
| Lambaré | 25 |
| Caacupé | 24 |
| San Antonio | 23 |
| Lima | 18 |
| Obligado | 18 |
| Coronel Oviedo | 14 |
| Filadelfia | 14 |
| Itauguá | 14 |
| Guarambaré | 11 |
| La Paloma del Espíritu Santo | 11 |
| Carapeguá | 10 |
| Encarnación | 10 |
| Nemby | 8 |
| Puerto Mayor Otaño | 6 |
| Caraguatay | 5 |
| Veinticinco de Diciembre | 5 |
| Colonia Mauricio José Troche | 4 |
| Horqueta | 4 |
| Itacurubí de la Cordillera | 4 |
| Repatriación | 4 |
| Villa Oliva | 4 |
| Cambyretá | 3 |
| Capiibary | 3 |
| Hohenau | 3 |
| Altos | 2 |
| Areguá | 2 |
| General Elizardo Aquino | 2 |
| Nueva Londres | 2 |
| Piribebuy | 2 |
Productos
Dispositivos y programas específicos detectados en sistemas vulnerables: routers, servidores, cámaras, paneles y servicios.
| Producto | Instancias |
|---|---|
| MySQL | 3,031 |
| Apache httpd | 2,200 |
| nginx | 1,953 |
| OpenSSH | 815 |
| ntpd | 478 |
| lighttpd | 340 |
| MikroTik Winbox | 304 |
| Microsoft IIS httpd | 163 |
| Ubiquiti AirRouter | 161 |
| uc-httpd | 78 |
| Portainer | 38 |
| Jetty | 31 |
| OpenResty | 25 |
| Squid http proxy | 24 |
| Apache Tomcat | 18 |
| Exim smtpd | 16 |
| Jenkins | 16 |
| Remote Desktop Protocol | 15 |
| pfSense pfSense | 14 |
| PostgreSQL | 10 |
| Grafana (Open Source) | 9 |
| Nextcloud | 9 |
| MongoDB | 8 |
| Control Web Panel (CWP) | 7 |
| WildFly | 7 |
| Plex Media Server | 6 |
| Outlook Web App | 5 |
| ProFTPD | 5 |
| RabbitMQ | 5 |
| ciscoSystems | 4 |
| n8n | 4 |
| ownCloud | 4 |
| Grafana (Enterprise) | 3 |
| Metabase | 3 |
| Ollama | 3 |
| WEBrick httpd | 3 |
| Werkzeug httpd | 3 |
| Wowza Streaming Engine | 3 |
| Cacti | 2 |
| Control Web Panel | 2 |
| Palo Alto Networks PA-3400 | 2 |
| VMware ESXi | 2 |
| mini_httpd | 2 |
| Apache Tomcat/Coyote JSP engine | 1 |
| CUPS (IPP) | 1 |
| D-Link DCS-5010L webcam http interface | 1 |
| Elastic | 1 |
| Emby Media Server | 1 |
| Gitea | 1 |
| Harbor | 1 |
Sistemas Operativos
Versiones antiguas o sin soporte suelen indicar dispositivos que necesitan mantenimiento, reemplazo o aislamiento.
| Sistema Operativo | Instancias |
|---|---|
| Ubuntu | 1,380 |
| Windows | 168 |
| Ubiquiti AirOS | 161 |
| MikroTik RouterOS 6.47 | 86 |
| MikroTik RouterOS 6.49.13 | 40 |
| MikroTik RouterOS 6.48.7 | 28 |
| MikroTik RouterOS 6.49.18 | 27 |
| MikroTik RouterOS 6.47.10 | 20 |
| MikroTik RouterOS 6.49.7 | 19 |
| FreeBSD | 16 |
| MikroTik RouterOS 6.47.9 | 15 |
| FreeBSD 12.3-STABLE (amd64) | 12 |
| Linux | 9 |
| MikroTik RouterOS 6.18 | 5 |
| MikroTik RouterOS 6.46.1 | 5 |
| MikroTik RouterOS 6.47.1 | 5 |
| Unix | 5 |
| Windows 10 Pro 19045 | 5 |
| MikroTik RouterOS 6.44.5 | 4 |
| MikroTik RouterOS 6.42.6 | 3 |
| MikroTik RouterOS 6.42.7 | 3 |
| MikroTik RouterOS 6.43.2 | 3 |
| MikroTik RouterOS 6.45.1 | 3 |
| MikroTik RouterOS 6.46.5 | 3 |
| MikroTik RouterOS 6.47.3 | 3 |
| MikroTik RouterOS 6.7 | 3 |
| Windows 7 Professional 7600 | 3 |
| Windows Server 2008 Enterprise | 3 |
| Windows Server 2008 R2 Enterprise | 3 |
| Windows Server 2008 Standard | 3 |
| IOS 16.9.4 | 2 |
| MikroTik RouterOS 6.43.11 | 2 |
| MikroTik RouterOS 6.43.4 | 2 |
| MikroTik RouterOS 6.44.3 | 2 |
| MikroTik RouterOS 6.44.6 | 2 |
| MikroTik RouterOS 6.45.7 | 2 |
| MikroTik RouterOS 6.46.3 | 2 |
| MikroTik RouterOS 6.46.4 | 2 |
| MikroTik RouterOS 6.46.6 | 2 |
| PAN-OS | 2 |
| Synology DiskStation Manager (DSM) 6.2.1-23824 | 2 |
| Synology DiskStation Manager (DSM) 6.2.2-24922 | 2 |
| Windows 10 Pro 26200 | 2 |
| Windows 7 Professional | 2 |
| Debian GNU/Linux 10 (buster) (Linux 4.19.0-18-amd64) | 1 |
| FreeBSD 10.1-RELEASE-p6 (amd64) | 1 |
| FreeBSD 11.2-RELEASE-p10 (amd64) | 1 |
| IOS 16.9.5 | 1 |
| IOS 17.6.5 | 1 |
| MikroTik RouterOS 6.15 | 1 |
Puertos expuestos
Los puertos revelan qué servicios están publicados. Cada puerto abierto debería tener una razón, controles y monitoreo.
| Puerto | Detecciones |
|---|---|
| 80 | 1,748 |
| 443 | 1,380 |
| 123 | 478 |
| 22 | 444 |
| 8291 | 309 |
| 445 | 279 |
| 8080 | 230 |
| 81 | 219 |
| 3306 | 199 |
| 8090 | 93 |
| 2222 | 88 |
| 8081 | 70 |
| 8443 | 55 |
| 88 | 49 |
| 8000 | 42 |
| 9000 | 42 |
| 9090 | 36 |
| 82 | 32 |
| 84 | 31 |
| 8089 | 29 |
| 10001 | 28 |
| 9443 | 27 |
| 8888 | 24 |
| 8085 | 22 |
| 161 | 20 |
| 3000 | 20 |
| 3128 | 20 |
| 8069 | 20 |
| 444 | 17 |
| 9001 | 17 |
| 4443 | 15 |
| 8001 | 15 |
| 8086 | 15 |
| 3333 | 14 |
| 3389 | 14 |
| 8009 | 14 |
| 1080 | 13 |
| 5000 | 13 |
| 83 | 12 |
| 8083 | 11 |
| 8181 | 11 |
| 32400 | 11 |
| 85 | 10 |
| 7443 | 10 |
| 5432 | 9 |
| 7001 | 9 |
| 9998 | 9 |
| 21 | 8 |
| 830 | 8 |
| 2083 | 8 |
Sistemas Autónomos (ASN)
Los ASN agrupan redes bajo una administración. Son útiles para coordinar remediación y priorizar conversaciones.
| ASN (Nombre) | Dispositivos |
|---|---|
| as27895 | 2,615 |
| as23201 | 1,930 |
| as7303 | 1,005 |
| as266831 | 900 |
| as28103 | 747 |
| as272062 | 744 |
| as266858 | 738 |
| as61512 | 278 |
| as52455 | 272 |
| as27768 | 267 |
| as263717 | 246 |
| as11664 | 233 |
| as27733 | 166 |
| as269914 | 154 |
| as270052 | 135 |
| as27669 | 111 |
| as27866 | 105 |
| as264631 | 89 |
| as27795 | 60 |
| as264705 | 57 |
| as266876 | 57 |
| as266694 | 44 |
| as266814 | 43 |
| as267702 | 35 |
| as263732 | 34 |
| as267795 | 33 |
| as52468 | 31 |
| as263228 | 30 |
| as264733 | 30 |
| as269878 | 29 |
| as269783 | 28 |
| as273023 | 28 |
| as273063 | 25 |
| as264770 | 24 |
| as267920 | 24 |
| as263750 | 21 |
| as265759 | 21 |
| as270096 | 20 |
| as262183 | 19 |
| as266673 | 19 |
| as264756 | 18 |
| as267885 | 17 |
| as262250 | 16 |
| as269905 | 14 |
| as269725 | 13 |
| as265728 | 12 |
| as267905 | 11 |
| as269930 | 10 |
| as269976 | 10 |
| as267883 | 9 |
Componentes HTTP
Tecnologías web visibles en dispositivos vulnerables: servidores, librerías, frameworks y extensiones.
| Componente HTTP | Instancias |
|---|---|
| Apache HTTP Server | 1,895 |
| PHP | 1,098 |
| OpenSSL | 869 |
| Nginx | 856 |
| Ubuntu | 843 |
| Windows Server | 799 |
| jQuery | 778 |
| lighttpd | 505 |
| Bootstrap | 448 |
| CentOS | 359 |
| Modernizr | 171 |
| jQuery CDN | 171 |
| ZURB Foundation | 165 |
| Debian | 143 |
| HSTS | 132 |
| IIS | 113 |
| Microsoft ASP.NET | 91 |
| jQuery UI | 86 |
| Python | 78 |
| jQuery Migrate | 65 |
| Java | 63 |
| AngularJS | 50 |
| Jetty | 46 |
| Flask | 44 |
| UNIX | 38 |
| Perl | 37 |
| Fedora | 26 |
| mod_perl | 26 |
| OpenResty | 23 |
| Node.js | 22 |
| MySQL | 20 |
| Apache Traffic Server | 19 |
| AlmaLinux | 18 |
| Express | 17 |
| Jenkins | 16 |
| mod_ssl | 16 |
| mod_dav | 15 |
| mod_python | 14 |
| React | 13 |
| Underscore.js | 13 |
| Popper | 12 |
| XAMPP | 12 |
| Basic | 11 |
| DataTables | 10 |
| Ruby | 10 |
| Moment.js | 9 |
| Apache Tomcat | 8 |
| Google Hosted Libraries | 8 |
| Zabbix | 8 |
| jsDelivr | 8 |
Categorías HTTP
Agrupa componentes por tipo para mostrar patrones: servidores web, sistemas operativos, lenguajes, frameworks y seguridad.
| Categoría Componente HTTP | Instancias |
|---|---|
| Web servers | 3,491 |
| Operating systems | 2,237 |
| Programming languages | 1,254 |
| Web server extensions | 872 |
| Reverse proxies | 856 |
| JavaScript libraries | 787 |
| UI frameworks | 616 |
| CDN | 189 |
| Web frameworks | 182 |
| Security | 153 |
| JavaScript frameworks | 95 |
| Miscellaneous | 38 |
| Databases | 22 |
| CI | 16 |
| CMS | 10 |
| Static site generator | 8 |
| Analytics | 7 |
| Blogs | 7 |
| Tag managers | 7 |
| Development | 6 |
| JavaScript graphics | 6 |
| Webmail | 6 |
| Font scripts | 5 |
| Caching | 4 |
| Maps | 4 |
| Network storage | 4 |
| Authentication | 2 |
| Editors | 2 |
| Message boards | 2 |
| Video players | 2 |
| WordPress plugins | 2 |
| LMS | 1 |
| Live chat | 1 |
| Mobile frameworks | 1 |
| PaaS | 1 |
| Page builders | 1 |
| Rich text editors | 1 |
Versiones SSL/TLS
Protocolos antiguos como SSLv2, SSLv3, TLS 1.0 y TLS 1.1 son señales de configuraciones que necesitan revisión.
| Versión SSL/TLS | Detecciones |
|---|---|
| tlsv1.2 | 1,313 |
| tlsv1.3 | 761 |
| tlsv1 | 561 |
| tlsv1.1 | 551 |
| sslv3 | 113 |
| sslv2 | 13 |
Dispositivos con capturas
Cuando Shodan tiene capturas, puede haber interfaces administrativas o paneles visibles que revelan información sensible.
| Tiene Captura | Cantidad |
|---|---|
| 1 | 11 |