Country
United States
Aggregated network and security signals for United States, sourced from BGP feeds, CT logs, our scan layer and honeypot network.
ASNs observed
13,291
last 30 d
Open IPs
16,696,357
last 90 d
Hosting share
8.5%
of open IPs
Threat hits
5,418
IOC matches
Top ASNs
| ASN | Name | Open IPs |
|---|---|---|
| AS396982 | Google Cloud | 904,123 |
| AS16509 | Amazon.com | 369,651 |
| AS22394 | CELLCO | 208,797 |
| AS174 | Cogent Communications, Inc. | 185,491 |
| AS19551 | Thales/Imperva | 160,926 |
| AS20940 | Akamai Technologies | 158,482 |
| AS14061 | DigitalOcean | 111,375 |
| AS209 | Lumen AS209 | 108,126 |
| AS8075 | Microsoft | 102,781 |
| AS7922 | Comcast | 83,554 |
| AS46606 | Endurance International Group, Inc | 78,576 |
| AS3257 | GTT Communications (AS3257) | 77,336 |
| AS237 | Merit Network | 77,127 |
| AS5650 | Frontier Communications of America (FCA) | 77,027 |
| AS26496 | GoDaddy | 70,427 |
| AS36352 | ColoCrossing | 66,401 |
| AS2769 | — | 60,677 |
| AS40509 | — | 60,164 |
| AS98 | — | 59,663 |
| AS31898 | Oracle Cloud Infrastructure | 53,364 |
Top Hosting Providers
| ASN | Name | Open IPs |
|---|---|---|
| AS174 | Cogent Communications, Inc. | 185,491 |
| AS19551 | Thales/Imperva | 160,926 |
| AS20940 | Akamai Technologies | 158,482 |
| AS14061 | DigitalOcean | 111,375 |
| AS209 | Lumen AS209 | 108,126 |
| AS8075 | Microsoft | 102,781 |
| AS46606 | Endurance International Group, Inc | 78,576 |
| AS3257 | GTT Communications (AS3257) | 77,336 |
| AS237 | Merit Network | 77,127 |
| AS5650 | Frontier Communications of America (FCA) | 77,027 |
| AS26496 | GoDaddy | 70,427 |
| AS36352 | ColoCrossing | 66,401 |
| AS31898 | Oracle Cloud Infrastructure | 53,364 |
| AS7018 | AT&T US - 7018 | 47,873 |
| AS701 | Verizon | 41,960 |
Top open ports
Tech-Stack Distribution
| Technology | Hosts |
|---|---|
| jQuery | 29,464 |
| Bootstrap | 10,733 |
| jQuery UI | 4,660 |
| Google Analytics | 4,507 |
| Google Tag Manager | 4,434 |
| PHP | 4,245 |
| MySQL | 3,986 |
| WordPress | 3,971 |
| jQuery Migrate | 3,891 |
| Modernizr | 3,445 |
| jsDelivr | 2,836 |
| Popper | 1,894 |
| cdnjs | 1,870 |
| Cloudflare | 1,870 |
| RequireJS | 1,853 |
Top Server headers
| Server | Hosts |
|---|---|
| CloudFront | 172,137 |
| nginx | 124,322 |
| AkamaiGHost | 102,046 |
| Apache | 62,541 |
| squid/3.5.20 | 17,331 |
| nginx/1.24.0 (Ubuntu) | 15,959 |
| Microsoft-IIS/10.0 | 14,783 |
| Microsoft-HTTPAPI/2.0 | 14,373 |
| nginx/1.18.0 (Ubuntu) | 11,888 |
| Caddy | 8,518 |
| gws | 7,867 |
| openresty | 7,429 |
| awselb/2.0 | 7,274 |
| AmazonS3 | 7,253 |
| openresty/1.31.1.1 | 6,975 |
Top Attack Sources
| Feed | Category | Matched IPs |
|---|---|---|
| firehol-l1 | abuse | 2,075 |
| spamhaus-drop | spam | 2,066 |
| tor-exit | anonymizer | 1,277 |