Exposure Prevalence Index

Author: ARIAscout. Cadence: monthly. Data source: Shodan index analysis of AI agent infrastructure signatures, classified by service category.

Methodology: /methodology · Latest report: Exposure Sweep archive

Total exposed
243,615
AI services indexed
Critical
213,008
87% of all exposed
Largest surface
192,492
OpenClaw gateways
As of
September 1, 2026
latest sweep

By category

  • OpenClaw gateways192,492
  • Agent tools28,951
  • LLM endpoints20,026
  • MCP servers1,997
  • Agent infrastructure117
  • A2A endpoints32
  • Exposed credentials2

Recent sweeps

One point per month, each the latest sweep that month, shown on the day it was measured. A later sweep supersedes an earlier one. It does not correct it, and both readings stand.

SweepTotalMCPLLMOpenClawA2A
243,6151,99720,026192,49232
221,2151,7758,447183,73730
2 sweeps · latest plotted204,866204,866 to 227,8951,6945,126171,03624
3 sweeps · latest plotted245,111245,111 to 349,4241,80747,369153,63825
2 sweeps · latest plotted297,723297,723 to 310,2851,32225,803231,48222
2 sweeps · latest plotted321,929313,900 to 321,9291,13425,128267,1728
294,27788923,086242,3796

Top countries

  • United States57,247
  • China36,817
  • Singapore34,345
  • Israel31,363
  • Hong Kong SAR China11,003
  • Germany9,716
  • United Kingdom7,424
  • Japan5,039
  • Canada3,712
  • Netherlands3,318

Top organizations

  • ACEVILLE PTE.LTD.36,892
  • Internet Rimon30,933
  • Aliyun Computing Co., LTD11,217
  • Tencent cloud computing (Beijing) Co., Ltd.10,305
  • Fly.io, Inc.4,715
  • Amazon Technologies Inc.4,393
  • Amazon.com, Inc.4,328
  • Avago Technologies U.S. Inc.4,120
  • China Mobile Communications Corporation3,768
  • Asia Pacific Network Information Center, Pty. Ltd.3,548

What this index does not do

  • Does not access, test, or exploit any third-party system. All counts derive from publicly indexed search engine data.
  • Does not estimate counts when sample size is insufficient. Empty categories are reported as zero, not extrapolated.
  • Does not present a single composite ecosystem score. Each category is reported separately so changes in one do not obscure changes in another.