Acum 1 h
175,000 exposed Ollama AI servers across 130 countries give hackers 23,000 persistent targets
Between October 2025 and January 2026, security researchers reported that around 175,000 private AI servers running Ollama were exposed to the public internet, with about 23,000 of them remaining persistently online. These unprotected systems span 130 countries and are being hijacked by criminals to steal computing resources, bypass security safeguards, and potentially access internal data using techniques like SSRF, scanning, and prompt injection. Around 48% of the exposed hosts allow tool-calling, and most use a common model file format that could let attackers crash thousands of servers with a single exploit.