Scanner Finds About 240,000 OpenClaw Instances Reachable on Public Internet
Summary
A custom scanner reportedly found about 240,000 OpenClaw instances reachable on the public internet, most online. The article says console access requires an authentication token and advises against direct exposure and recommends configuration audits.
Key points
- A custom-built scanner reportedly found roughly 240,000 OpenClaw instances reachable on the public internet; most were said to be online.
- The scanner detects instances by IP address and port; reachability alone does not establish unauthorized access.
- Console access reportedly requires an authentication token, so discovery by the scanner does not itself grant access to configuration files or operational tasks.
- The article warns that high privileges and public exposure can increase security risks, and advises against direct exposure and recommends configuration audits.
Article Details
- Event Type
- Public exposure of OpenClaw instances
- Impact
- A custom-built scanner reportedly identified approximately 240,000 OpenClaw instances reachable on the public internet, with most still online. The article says console access requires an authentication token and reports no confirmed unauthorized access or compromise. Public exposure may increase risk, particularly if instances have additional vulnerabilities or excessive privileges.