Country
United States
Aggregated network and security signals for United States, sourced from BGP feeds, CT logs, our scan layer and honeypot network.
ASNs observed
13,291
last 30 d
Open IPs
16,712,887
last 90 d
Hosting share
8.5%
of open IPs
Threat hits
5,418
IOC matches
Top ASNs
| ASN | Name | Open IPs |
|---|---|---|
| AS396982 | Google Cloud | 905,327 |
| AS16509 | Amazon.com | 371,611 |
| AS22394 | CELLCO | 209,941 |
| AS174 | Cogent Communications, Inc. | 186,530 |
| AS19551 | Thales/Imperva | 160,926 |
| AS20940 | Akamai Technologies | 159,550 |
| AS14061 | DigitalOcean | 112,030 |
| AS209 | Lumen AS209 | 108,774 |
| AS8075 | Microsoft | 103,595 |
| AS7922 | Comcast | 84,028 |
| AS46606 | Endurance International Group, Inc | 78,845 |
| AS3257 | GTT Communications (AS3257) | 77,817 |
| AS5650 | Frontier Communications of America (FCA) | 77,464 |
| AS237 | Merit Network | 77,132 |
| AS26496 | GoDaddy | 70,715 |
| AS36352 | ColoCrossing | 66,850 |
| AS2769 | — | 60,679 |
| AS40509 | — | 60,164 |
| AS98 | — | 59,663 |
| AS31898 | Oracle Cloud Infrastructure | 53,609 |
Top Hosting Providers
| ASN | Name | Open IPs |
|---|---|---|
| AS174 | Cogent Communications, Inc. | 186,530 |
| AS19551 | Thales/Imperva | 160,926 |
| AS20940 | Akamai Technologies | 159,550 |
| AS14061 | DigitalOcean | 112,030 |
| AS209 | Lumen AS209 | 108,774 |
| AS8075 | Microsoft | 103,595 |
| AS46606 | Endurance International Group, Inc | 78,845 |
| AS3257 | GTT Communications (AS3257) | 77,820 |
| AS5650 | Frontier Communications of America (FCA) | 77,466 |
| AS237 | Merit Network | 77,132 |
| AS26496 | GoDaddy | 70,715 |
| AS36352 | ColoCrossing | 66,850 |
| AS31898 | Oracle Cloud Infrastructure | 53,609 |
| AS7018 | AT&T US - 7018 | 48,125 |
| AS701 | Verizon | 42,216 |
Top open ports
Tech-Stack Distribution
| Technology | Hosts |
|---|---|
| jQuery | 29,676 |
| Bootstrap | 10,809 |
| jQuery UI | 4,693 |
| Google Analytics | 4,540 |
| Google Tag Manager | 4,467 |
| PHP | 4,272 |
| MySQL | 4,012 |
| WordPress | 3,997 |
| jQuery Migrate | 3,924 |
| Modernizr | 3,469 |
| jsDelivr | 2,859 |
| Popper | 1,904 |
| Cloudflare | 1,887 |
| cdnjs | 1,887 |
| RequireJS | 1,874 |
Top Server headers
| Server | Hosts |
|---|---|
| CloudFront | 173,581 |
| nginx | 125,279 |
| AkamaiGHost | 102,893 |
| Apache | 63,017 |
| squid/3.5.20 | 17,472 |
| nginx/1.24.0 (Ubuntu) | 16,066 |
| Microsoft-IIS/10.0 | 14,904 |
| Microsoft-HTTPAPI/2.0 | 14,497 |
| nginx/1.18.0 (Ubuntu) | 11,970 |
| Caddy | 8,580 |
| gws | 7,926 |
| openresty | 7,487 |
| awselb/2.0 | 7,327 |
| AmazonS3 | 7,298 |
| openresty/1.31.1.1 | 7,018 |
Top Attack Sources
| Feed | Category | Matched IPs |
|---|---|---|
| firehol-l1 | abuse | 2,075 |
| spamhaus-drop | spam | 2,066 |
| tor-exit | anonymizer | 1,277 |