Live check · Shodan
Internet-exposed attack surface
Check what any public IP shows to the internet — open ports and known CVEs. Below, the whole of Azerbaijan's weekly attack-surface picture.
For any IP/domain: who owns it (ASN/operator), internet-exposed ports and known CVEs (ranked by KEV/EPSS).
Azerbaijan · national picture
This week the number of internet-exposed hosts in Azerbaijan fell (from last week -1,157). Of these 444 are open RDP— ransomware's #1 entry point.
Remote access
Databases
ICS / SCADA
SOC watchlist · mass-exploit targets
The perimeter technologies most exploited in APT and ransomware campaigns (VPN, mail, virtualization) — instances exposed to the internet in Azerbaijan. These are targets that appear again and again on the CISA KEV list.
Regional comparison · open RDP
Remote Desktop (RDP, port 3389) — the most-used entry point for ransomware. Internet-exposed RDP host count for Azerbaijan compared with its neighbours.
Exposed hosts by city
Most-exposed operators
- Aztelekom Broadband network9,331
- DELTA Broadband Network9,227
- DELTA LeasedLine Network8,268
- Azeronline Information Services8,155
- Aztelekom LLC7,590
- AzInTelecom LLC5,839
- DELTA Satellite Network4,838
- SUPERONLAYN LTD3,649
Most-seen products
- nginx7,232
- ciscoSystems6,168
- ntpd5,381
- OpenSSH2,543
- MikroTik bandwidth-test server2,332
- Microsoft IIS httpd1,880
- Apache httpd1,604
- Hikvision IP Camera1,592
Weekly trend — exposed host count
Source: Shodan /shodan/host/count (country:AZ), weekly. Aggregate counts — no individual IP is disclosed. The academic API has no vuln filter, so this is an exposure picture, not a CVE view.