Country
United States
Aggregated network and security signals for United States, sourced from BGP feeds, CT logs, our scan layer and honeypot network.
ASNs observed
13,299
last 30 d
Open IPs
16,768,791
last 90 d
Hosting share
8.6%
of open IPs
Threat hits
5,418
IOC matches
Top ASNs
| ASN | Name | Open IPs |
|---|---|---|
| AS396982 | Google Cloud | 909,768 |
| AS16509 | Amazon.com | 377,878 |
| AS22394 | CELLCO | 214,206 |
| AS174 | Cogent Communications, Inc. | 189,972 |
| AS20940 | Akamai Technologies | 162,721 |
| AS19551 | Thales/Imperva | 160,926 |
| AS14061 | DigitalOcean | 114,084 |
| AS209 | Lumen AS209 | 110,856 |
| AS8075 | Microsoft | 106,553 |
| AS7922 | Comcast | 85,579 |
| AS46606 | Endurance International Group, Inc | 79,741 |
| AS3257 | GTT Communications (AS3257) | 79,197 |
| AS5650 | Frontier Communications of America (FCA) | 79,047 |
| AS237 | Merit Network | 77,139 |
| AS26496 | GoDaddy | 71,797 |
| AS36352 | ColoCrossing | 68,215 |
| AS2769 | — | 60,680 |
| AS40509 | — | 60,165 |
| AS98 | — | 59,663 |
| AS31898 | Oracle Cloud Infrastructure | 54,508 |
Top Hosting Providers
| ASN | Name | Open IPs |
|---|---|---|
| AS174 | Cogent Communications, Inc. | 189,979 |
| AS20940 | Akamai Technologies | 162,721 |
| AS19551 | Thales/Imperva | 160,926 |
| AS14061 | DigitalOcean | 114,084 |
| AS209 | Lumen AS209 | 110,858 |
| AS8075 | Microsoft | 106,553 |
| AS46606 | Endurance International Group, Inc | 79,744 |
| AS3257 | GTT Communications (AS3257) | 79,197 |
| AS5650 | Frontier Communications of America (FCA) | 79,047 |
| AS237 | Merit Network | 77,139 |
| AS26496 | GoDaddy | 71,797 |
| AS36352 | ColoCrossing | 68,215 |
| AS31898 | Oracle Cloud Infrastructure | 54,508 |
| AS7018 | AT&T US - 7018 | 48,982 |
| AS701 | Verizon | 42,988 |
Top open ports
Tech-Stack Distribution
| Technology | Hosts |
|---|---|
| jQuery | 30,485 |
| Bootstrap | 11,086 |
| jQuery UI | 4,821 |
| Google Analytics | 4,672 |
| Google Tag Manager | 4,599 |
| PHP | 4,385 |
| MySQL | 4,117 |
| WordPress | 4,101 |
| jQuery Migrate | 4,030 |
| Modernizr | 3,565 |
| jsDelivr | 2,934 |
| Popper | 1,956 |
| cdnjs | 1,942 |
| Cloudflare | 1,942 |
| RequireJS | 1,917 |
Top Server headers
| Server | Hosts |
|---|---|
| CloudFront | 177,881 |
| nginx | 128,307 |
| AkamaiGHost | 105,457 |
| Apache | 64,570 |
| squid/3.5.20 | 17,909 |
| nginx/1.24.0 (Ubuntu) | 16,463 |
| Microsoft-IIS/10.0 | 15,302 |
| Microsoft-HTTPAPI/2.0 | 14,962 |
| nginx/1.18.0 (Ubuntu) | 12,251 |
| Caddy | 8,795 |
| gws | 8,123 |
| openresty | 7,682 |
| awselb/2.0 | 7,488 |
| AmazonS3 | 7,444 |
| openresty/1.31.1.1 | 7,162 |
Top Attack Sources
| Feed | Category | Matched IPs |
|---|---|---|
| firehol-l1 | abuse | 2,075 |
| spamhaus-drop | spam | 2,066 |
| tor-exit | anonymizer | 1,277 |