And do those machines have web servers exposed to the world?

Do you ask that question to bash me for having an old, unsupported OSes open to the world?

Then address this to the owners of those machines. And get a load of cash ready to give it to them, so they could migrate to somehitng newer.

Yes, why wouldn't they? There are multiple vendors who still provide security updates for CentOS 6