IP Prefix
IPv4
1.1.1.0/24
Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.
Origin AS
AS13335
RPKI
1 ROAs
Open IPs
226
last 90 d
Network
Anycast
Cloudflare
Routing
Origin AS
Holder
Cloudflare
Prefix Length
/24
Multi-Origin
No
Last refresh
2026-07-21 19:59:50
RPKI Validity
max-len 24
valid
apnic
RIR Allocation
Geographic Announcement
Anycast — Cloudflare.
This prefix is announced from many PoPs worldwide simultaneously. The MaxMind "ZZ" code below reflects "no single country" rather than "unknown" — the route taken depends on the BGP best-path of the querying ASN.
GeoIP attribution from MaxMind GeoLite2 (CC-BY-SA). The starting address of the prefix maps to:
| Country | Continent | Ranges |
|---|---|---|
| ZZ Anycast / no single country | 1 |
Sample IPs in this Prefix
| IP | Open ports | Last scan |
|---|---|---|
| 1.1.1.1 | 13 | 2026-07-15 21:29:10.000 |
| 1.1.1.176 | 6 | 2026-07-21 01:55:14.000 |
| 1.1.1.159 | 6 | 2026-07-17 13:42:51.000 |
| 1.1.1.177 | 5 | 2026-07-21 04:52:02.000 |
| 1.1.1.126 | 5 | 2026-07-19 22:36:44.000 |
| 1.1.1.59 | 5 | 2026-07-17 12:21:08.000 |
| 1.1.1.252 | 5 | 2026-07-16 18:35:36.000 |
| 1.1.1.202 | 5 | 2026-07-16 02:48:26.000 |
| 1.1.1.95 | 5 | 2026-06-23 02:37:18.000 |
| 1.1.1.66 | 5 | 2026-06-21 03:38:57.000 |
| 1.1.1.89 | 5 | 2026-06-19 03:52:57.000 |
| 1.1.1.41 | 4 | 2026-07-21 22:04:23.000 |
| 1.1.1.3 | 4 | 2026-07-21 17:00:12.000 |
| 1.1.1.86 | 4 | 2026-07-21 11:57:01.000 |
| 1.1.1.98 | 4 | 2026-07-21 11:25:52.000 |
| 1.1.1.221 | 4 | 2026-07-21 05:53:18.000 |
| 1.1.1.44 | 4 | 2026-07-21 05:42:43.000 |
| 1.1.1.56 | 4 | 2026-07-21 02:39:04.000 |
| 1.1.1.161 | 4 | 2026-07-20 14:34:14.000 |
| 1.1.1.121 | 4 | 2026-07-20 12:58:45.000 |
| 1.1.1.153 | 4 | 2026-07-20 05:20:50.000 |
| 1.1.1.167 | 4 | 2026-07-19 23:13:43.000 |
| 1.1.1.90 | 4 | 2026-07-19 19:53:27.000 |
| 1.1.1.215 | 4 | 2026-07-19 11:37:05.000 |
| 1.1.1.211 | 4 | 2026-07-18 14:00:07.000 |
Hosted Domains
Domains that resolve to any address in this prefix — aggregated across the whole subnet. 4,142 distinct domains seen; top by span shown.
History
Prefix-event history pending
Origin AS changes, ROA add/drop events, multi-origin episodes and withdrawals require snapshot-diffing across BGP crawls. The data accumulates as the archive grows — full ReplacingMergeTree compaction makes point-in-time event extraction unavailable for now.