Shadowserver Application

The following page provides details on domains, networks, IPs, hosting services, and content delivery networks used by Shadowserver.

Description

Shadowserver is a non-profit organization that gathers, analyzes, and shares cybersecurity data globally to help detect, prevent, and mitigate cyber threats and vulnerabilities.

Category	Cybersecurity
Web Link	Shadowserver - Home Page

Application Domains

The application domains data shown here is available in our Netify Data Feeds solution. The data is accessible via our IP API as well as downloadable datasets.

Learn More »

Shadowserver - Domains

shadowserver.org is the primary domain associated with Shadowserver.

Network Ranges

45.143.160.0/24
50.114.88.0/24
108.165.44.0/24
146.19.20.0/24
154.9.2.0/23
and 21 more

Network Ranges
Some applications are deployed across network blocks. Only networks that are dedicated to an application are provided.

Shadowserver Network

Some organizations deploy all or parts of an application solution through their own infrastructure instead of third party hosting providers like AWS or Google Cloud Platform. The following is a sample of active IP addresses on the Shadowserver Network.

ASN Description	ASN	Route	Location	IP	Shared
The Shadowserver Foundation	AS22168	154.9.2.0/23	United States	154.9.2.14
The Shadowserver Foundation	AS22168	154.9.2.0/23	United States	154.9.2.53

Other Networks

There are tens of thousands of Internet network providers and we make an effort to track as many as we can, but we have less coverage for niche and local providers. The following is a sample of Shadowserver IP addresses on this type of network.

ASN Description	ASN	Route	Location	IP	Shared
Underworld	AS50213	91.213.203.0/24	Norway	91.213.203.35

Hosting

Cloud hosting vendors like AWS and Microsoft Azure provide cloud-based computing and network resources to deliver applications. The hosting platforms used by Shadowserver are summarized below by geographical points-of-presence (PoP). Each PoP can host many IPs to deliver an application.

Cloud Hosts	# of IPs
Hurricane Electric	2

Host	PoP	Location	IPs
Hurricane Electric	Core	United States	2 IPs

Content Delivery Networks - CDNs

In order to get information to end users more quickly, many applications are distributed from multiple geographical points-of-presence (PoPs) using Content Delivery Networks (CDNs). Each PoP can host many IPs to deliver an application. A sample IP is provided.