--- title: Found a Denial of Service Vulnerability in a Major... description: A bug bounty hunter used Shodan to scan an IP range in scope, discovered a Pike HTTP Server with unusual open ports, and found a Denial of Service... canonical: https://daily.dev/posts/found-a-denial-of-service-vulnerability-in-a-major-company-s-production-infrastructure-using-shodan-wldoyxg0h twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Found a Denial of Service Vulnerability in a Major Company’s Production Infrastructure Using Shodan | daily.dev og:description: A bug bounty hunter used Shodan to scan an IP range in scope, discovered a Pike HTTP Server with unusual open ports, and found a Denial of Service... og:url: https://daily.dev/posts/found-a-denial-of-service-vulnerability-in-a-major-company-s-production-infrastructure-using-shodan-wldoyxg0h og:image: https://api.daily.dev/og/posts/WlDoYxg0H.png og:image:alt: Found a Denial of Service Vulnerability in a Major Company’s Production Infrastructure Using Shodan og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Found a Denial of Service Vulnerability in a Major Company’s Production Infrastructure Using Shodan **[InfoSec Write-ups](https://daily.dev/sources/infosecwriteups)** · 10 min read · 0 upvotes · 0 comments ## Summary A bug bounty hunter used Shodan to scan an IP range in scope, discovered a Pike HTTP Server with unusual open ports, and found a Denial of Service vulnerability on port 8888. POST requests to the server's 'ext' module caused connections to hang indefinitely with no timeout enforcement, allowing an attacker to exhaust server workers with just 10-20 concurrent requests. The post walks through the full process: Shodan recon, port enumeration, vulnerability discovery via silent POST responses, PoC with netstat monitoring, CVSS 3.1 scoring (7.5 HIGH), and responsible disclosure including how to handle triage misunderstandings. Key takeaways include testing all HTTP methods separately, treating server silence as a signal, and not ignoring IP ranges in bug bounty scopes. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [\[HS\] Dark Writeup](https://daily.dev/posts/hs-dark-writeup-roulrgb8j) · InfoSec Write-ups · 0 upvotes · 0 comments - [When One Vulnerability Breaks the Internet and Millions of Devices Join In](https://daily.dev/posts/when-one-vulnerability-breaks-the-internet-and-millions-of-devices-join-in-rmhnf223x) · Security Boulevard · 0 upvotes · 0 comments - [TFTP Honey pot Results](https://daily.dev/posts/tftp-honey-pot-results-gesc6epgq) · Hacker News · 0 upvotes · 0 comments - [Nginx, Apache, and more hit by DoS attack exploiting flaw in HTTP/2](https://daily.dev/posts/nginx-apache-and-more-hit-by-dos-attack-exploiting-flaw-in-http-2-lrfkdbwpy) · CSO Online · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/found-a-denial-of-service-vulnerability-in-a-major-company-s-production-infrastructure-using-shodan-wldoyxg0h) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Found a Denial of Service Vulnerability in a Major Company’s Production Infrastructure Using Shodan","url":"https://daily.dev/posts/found-a-denial-of-service-vulnerability-in-a-major-company-s-production-infrastructure-using-shodan-wldoyxg0h","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/found-a-denial-of-service-vulnerability-in-a-major-company-s-production-infrastructure-using-shodan-wldoyxg0h"},"datePublished":"2026-03-22T06:19:55.312Z","dateModified":"2026-03-22T06:20:24.381Z","description":"A bug bounty hunter used Shodan to scan an IP range in scope, discovered a Pike HTTP Server with unusual open ports, and found a Denial of Service...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/64fe8aa15b824edc0af53d9d56b9d812?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/64fe8aa15b824edc0af53d9d56b9d812?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"InfoSec Write-ups","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"InfoSec Write-ups","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/f0dc21b5bbfd46fda36f7b4b53dd1705","url":"https://daily.dev/sources/infosecwriteups"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/found-a-denial-of-service-vulnerability-in-a-major-company-s-production-infrastructure-using-shodan-wldoyxg0h","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security","timeRequired":"PT10M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"InfoSec Write-ups","item":"https://daily.dev/sources/infosecwriteups"},{"@type":"ListItem","position":3,"name":"Found a Denial of Service Vulnerability in a Major Company’s Production Infrastructure Using Shodan"}]} ```